Vulnerability remediation (Patch Management) Engineer

TekWissen•New York City, NY

8d•Hybrid

About The Position

TekWissen is recruiting a Vulnerability Remediation (Patch Management) Engineer for a global professional services firm specializing in digital transformation, business process management, analytics, and AI-driven solutions. This temporary, 11-month assignment is hybrid and located in New York City, NY. The engineer will manage the end-to-end patch lifecycle and vulnerability remediation across Windows and Linux environments. Responsibilities include planning and deploying patches, analyzing vulnerability findings, troubleshooting deployment failures, validating remediation, and ensuring compliance with security standards. The role uses SCCM, Tanium, PowerShell, and Shell scripting to support deployment, automation, and reporting, and involves collaboration with security, infrastructure, application, cloud, network, and operations teams.

Requirements

The job summary requests 5–8 years of hands-on experience managing patch deployment and vulnerability remediation; the required qualifications section requests 8–10 years of hands-on experience in patch management and vulnerability remediation.
Strong hands-on experience with SCCM and Tanium.
Good knowledge of Windows and Linux system administration.
Experience deploying, troubleshooting, and validating patches across environments.
Strong PowerShell and Shell scripting skills.
Familiarity with ITIL-based change and incident management.
Strong analytical, troubleshooting, and communication skills.

Nice To Haves

CompTIA Security+, CEH, or equivalent certification.
Experience with vulnerability tools such as Qualys, Tenable, or Rapid7.
Exposure to automation frameworks or DevOps practices.

Responsibilities

Plan, schedule, and deploy security patches and updates across Windows and Linux systems.
Use SCCM and Tanium for patch deployment, automation, and reporting.
Ensure timely patching in line with organizational security SLAs and compliance requirements.
Analyze vulnerability scan outputs and translate findings into actionable patching activities.
Validate vulnerability findings, eliminate false positives, and confirm risk exposure.
Provide technical guidance on remediation, including patching, configuration changes, and compensating controls.
Prioritize remediation based on severity, exploitability, and business impact.
Validate patch implementation and confirm vulnerabilities are effectively remediated.
Diagnose and resolve patch deployment issues and failures across environments.
Perform root cause analysis and resolve compatibility or system-related issues.
Coordinate with application and infrastructure teams to resolve issues.
Develop and use PowerShell and Shell scripts to automate patch deployment, validation, and reporting.
Improve patching efficiency through automation and process optimization.
Track patch compliance and generate reports for security and audit teams.
Ensure systems meet organizational security and regulatory standards.
Support audit remediation and security assessments.
Collaborate with security, infrastructure, and operations teams on coordinated patching activities.
Maintain SOPs, patch schedules, and documentation.
Participate in change management processes and maintenance windows.
Work with infrastructure, application, cloud, and network teams to remediate vulnerabilities across servers, endpoints, databases, and network devices.
Drive vulnerability remediation from analysis of findings through closure validation.