Vulnerability remediation (Patch Management) Engineer

American IT Systems•New York City, NY

2d•Hybrid

About The Position

We are seeking a skilled Vulnerability remediation (Patch Management) Engineer with 5–8 years of hands-on experience in managing patch deployment and vulnerability remediation across both Windows and Linux environments. The ideal candidate will be responsible for end-to-end patch lifecycle management, including deployment, troubleshooting failures, and ensuring compliance with security standards. Strong working knowledge of SCCM, Tanium, and scripting (PowerShell/Shell) is essential for automation and efficient remediation.

Requirements

8–10 years of strong hands-on experience in patch management and vulnerability remediation.
Drive end-to-end vulnerability remediation, from analysis of findings to closure validation.
Strong hands-on experience with SCCM and Tanium.
Good knowledge of Windows and Linux system administration.
Experience deploying, troubleshooting, and validating patches across environments.
Work closely with infrastructure, application, cloud, and network teams to remediate vulnerabilities across servers, endpoints, databases, and network devices.
Strong scripting skills (PowerShell, Shell scripting).
Familiarity with ITIL-based change and incident management.
Strong analytical, troubleshooting, and communication skills.

Nice To Haves

Certifications such as CompTIA Security+, CEH, or equivalent.
Experience with vulnerability tools (Qualys, Tenable, Rapid7).
Exposure to automation frameworks or DevOps practices is an advantage.

Responsibilities

Plan, schedule, and deploy security patches and updates across Windows and Linux systems.
Use SCCM and Tanium for patch deployment, automation, and reporting.
Ensure timely patching aligned with organizational security SLAs and compliance requirements.
Analyze vulnerability scan outputs and translate them into actionable patching activities.
Validate findings to eliminate false positives and confirm true risk exposure.
Provide technical guidance on remediation steps including patching, configuration changes, and compensating controls.
Prioritize remediation based on severity, exploitability, and business impact.
Validate patch implementation and ensure vulnerabilities are effectively remediated.
Diagnose and resolve patch deployment issues and failures across environments.
Perform root cause analysis and fix compatibility or system-related issues.
Coordinate with application and infrastructure teams for issue resolution.
Develop and use PowerShell and Shell scripts to automate patch deployment, validation, and reporting.
Improve patching efficiency through automation and process optimization.
Track patch compliance and generate reports for security and audit teams.
Ensure systems meet organizational security and regulatory standards.
Support audit remediation and security assessments.
Work closely with security, infrastructure, and operations teams for coordinated patching activities.
Maintain SOPs, patch schedules, and documentation.
Participate in change management processes and maintenance windows.