Vulnerability Management Analyst

Ampcus Inc.•Richmond, VA

19h•Hybrid

About The Position

The position supports enterprise software deployment, endpoint patch management, and vulnerability remediation. The role reviews endpoint vulnerability metrics, deploys targeted software updates and patches, troubleshoots deployment failures, and performs root-cause analysis to help maintain a secure, compliant, and reliable endpoint environment. The work is hybrid, with onsite attendance in Richmond, Virginia, three days per week—Tuesday, Wednesday, and Thursday. Local Richmond candidates are preferred, and candidates must physically reside in the United States for the duration of the assignment.

Requirements

Experience with enterprise software packaging, deployment, and endpoint management.
Experience with Microsoft Intune, MECM/SCCM, or similar endpoint management platforms.
Knowledge of enterprise patch management, software updates, and vulnerability remediation.
Experience troubleshooting deployment failures, patching issues, and endpoint configuration problems.
Understanding of endpoint security, hardening policies, compliance settings, and configuration baselines.
Ability to perform root-cause analysis and document corrective actions.
Four years of experience and proficiency with Windows 11 operating systems and monthly/annual updates.
Four years of experience and proficiency with Microsoft Office 365 applications and monthly updates.
Four years of experience and proficiency using an endpoint management system.
Four years of experience and proficiency using a workstation imaging solution.
Four years of experience and proficiency using a service management ticketing system.
Four years of proven analytical and problem-solving abilities.
Four years of excellent verbal and written communication skills.
Four years of ability to work independently with minimal direction and as part of a team.
Four years of ability to work effectively with end users, technical staff, and senior staff while providing exceptional customer service.
Must physically reside within the United States for the duration of the assignment.

Nice To Haves

Experience with vulnerability management tools such as Rapid7, Qualys, Tenable, or Microsoft Defender for Endpoint.
Experience automating software deployment workflows.
Ability to collaborate with application owners, security teams, infrastructure teams, and service desk personnel.
Four years of experience with Microsoft Intune and Autopilot.
Four years of experience with Microsoft GraphAPI.
Four years of experience with PatchMyPC.
Four years of experience with ServiceNow.
Four years of experience with PowerShell.
Local Richmond, Virginia candidates are preferred due to weekly onsite requirements.

Responsibilities

Engineer, modify, package, and deploy commercial off-the-shelf software across enterprise endpoint environments.
Develop and maintain software deployment packages using Microsoft Intune, Endpoint Configuration Manager (MECM/SCCM), or similar endpoint management platforms.
Perform compatibility testing and configuration adjustments for reliable software installation and operation across device profiles.
Automate software deployment workflows to improve efficiency, consistency, and scalability.
Collaborate with application owners and security teams to evaluate software update requirements, dependencies, and risks.
Support enterprise patch management processes, including testing, scheduling, deploying, and validating operating system and third-party updates.
Monitor vulnerability reports from tools such as Rapid7, Qualys, Tenable, and Microsoft Defender for Endpoint.
Assist in prioritizing and remediating endpoint-related security vulnerabilities.
Troubleshoot software deployment failures, patching issues, and endpoint configuration problems.
Perform root-cause analysis and implement corrective actions.
Maintain documentation for software packaging standards, deployment procedures, endpoint baselines, and change management activities.
Implement and enforce endpoint hardening policies, compliance settings, and configuration baselines.
Collaborate with infrastructure, security, and service desk teams to improve endpoint reliability, security, and user satisfaction.
Evaluate new technologies, software updates, and automation opportunities to optimize endpoint management operations.