Sr. Engineer, Enterprise Patch & Vulnerability Management

Berkley•Wilmington, DE

About The Position

The Sr. Engineer, Enterprise Patch & Vulnerability Management serves as the technical engineering lead for VIPR (Vulnerability Incident Prevention & Remediation), the enterprise capability responsible for the patch and vulnerability remediation lifecycle across services, applications, platforms, and infrastructure. Reporting to the Sr. Manager, Enterprise Patch & Vulnerability Management, the role leads technical planning, orchestration, and execution of patch-related changes, partnering with BTS technology teams, Cybersecurity, Service Management, Change Management, Application Support, and Operating Unit Technology organizations to ensure remediation is completed within established SLAs. The position is accountable for technical change orchestration and execution, AI-based vulnerability and patch analysis, exception review, and incident escalation. It also provides technical direction to an offshore execution pod and partners with product owners and engineering teams to remediate vulnerabilities, validate services after patching, and improve automation and operational processes. Success requires technical breadth across enterprise platforms, analytical and troubleshooting skills, operational discipline, and the ability to influence technical teams without direct authority.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related discipline; equivalent experience and/or alternative qualifications will be considered.
At least 5 years of technical experience.
At least 3 years of hands-on experience in enterprise patch management, vulnerability remediation, systems engineering, or infrastructure operations.
Experience leading technical execution of enterprise change and maintenance activities across multiple platforms.
Hands-on experience with patch and vulnerability tooling.
Experience applying AI, analytics, or automation tools to operational or security data.
Working knowledge of public cloud platforms and modern data, integration, platform engineering, DevOps, SRE, and cybersecurity practices.
Ability to plan, sequence, and safely execute enterprise patch deployments and drive vulnerability remediation and SLA compliance.
Ability to lead technical change planning, implementation, validation, and rollback across platforms.
Ability to evaluate exposure, compensating controls, and residual risk; triage and coordinate resolution of patch-related incidents.
Automation and scripting skills to improve deployment reliability, reporting, and evidence collection.

Responsibilities

Lead technical orchestration and execution of enterprise patch-related changes, including deployment plans, maintenance windows, dependencies, rollback procedures, change records, and maintenance-event coordination.
Coordinate remediation across products within shared maintenance windows to reduce repeated system touches, end-user disruption, and change collisions.
Use AI-enabled tools, analytics, and automation to analyze vulnerability scans, threat intelligence, and patch information; correlate findings with assets and owners; assess risk and service impact; identify trends and root causes; and recommend remediation priorities.
Validate AI-generated outputs in accordance with BTS security, data, and responsible AI standards.
Review patch and vulnerability exception requests, assess justifications, compensating controls, residual risk, and remediation timelines, and track exceptions through re-evaluation and closure.
Escalate and respond to patch-related incidents, failed deployments, and post-maintenance service degradation; coordinate triage, resolver groups, rollback or remediation, and post-incident reviews.
Provide day-to-day technical direction to the offshore execution pod, including remediation planning and handoffs, automated testing, ticket prioritization, evidence quality, and off-hours readiness; review work for accuracy and completeness.
Partner with teams to remediate vulnerabilities, hardening items, and posture management findings across network devices within established SLAs.
Work with product owners to prioritize and drive code changes needed to remediate vulnerabilities, using AI-based tools to support code analysis, recommendations, and fix validation.
Lead tiered service-health validation after remediation, confirm operational readiness, capture evidence, and implement new tests where incidents reveal coverage gaps.
Partner with SRE, DevOps, Platform Engineering, and product owners to develop and enhance automated checkout, validation, remediation orchestration, deployment pipelines, and evidence collection using enterprise tools and scripting.
Review offshore reporting on patch compliance, vulnerability aging, SLA adherence, deployment success, exceptions, and incident trends, providing technical insight for management and executive reporting.
Develop and maintain technical runbooks, standard operating procedures, and knowledge articles, and identify ways to improve reliability, reduce risk, and increase automation coverage.