Senior Patch & Vulnerability Remediation Engineer

Job Summary

We are seeking a Senior Patch & Vulnerability Remediation Engineer with strong experience in vulnerability management, Software Composition Analysis (SCA), enterprise patching, SCCM/MECM, PowerShell, and remote remediation. The role focuses on identifying, assessing, prioritizing, remediating, and validating vulnerabilities across enterprise workstations, servers, applications, and software components.

Key Responsibilities

• Perform end-to-end vulnerability assessment workflows including scanning, analysis, classification, prioritization, remediation, validation, and closure.
• Analyze vulnerability scan and SCA results, including CVEs, affected software/dependencies, severity, exploitability, and business impact.
• Perform Software Composition Analysis (SCA) and coordinate remediation of open-source and third-party software vulnerabilities.
• Develop and execute vulnerability remediation and patching plans within defined SLAs.
• Research vendor advisories, patches, fixes, and remediation guidance.
• Test, deploy, and validate OS and application security patches across workstations and servers.
• Use SCCM/MECM for patch deployment, compliance monitoring, software distribution, and endpoint management.
• Perform SCCM/MECM troubleshooting, including deployment failures, client issues, content/download problems, and compliance discrepancies.
• Perform remote remediation and troubleshooting across enterprise endpoints and servers.
• Develop PowerShell scripts for remediation, automation, validation, inventory, and troubleshooting.
• Perform log analysis to investigate patch, deployment, endpoint, and remediation failures.
• Conduct root cause analysis and implement corrective actions.
• Validate remediation through follow-up vulnerability scans, compliance checks, and endpoint validation.
• Support urgent remediation of critical and zero-day vulnerabilities.
• Maintain remediation tracking, SLA metrics, compliance reports, and remediation evidence.
• Collaborate with Security, Infrastructure, Application Support, Endpoint Management, and vendor teams.

Mandatory Skills

• Software Composition Analysis (SCA)
• Vulnerability Assessment & Remediation
• Vulnerability Scanning
• Enterprise Patching
• SCCM / MECM
• SCCM/MECM Troubleshooting
• PowerShell Scripting
• Log Analysis
• Remote Remediation
• Vulnerability Assessment Workflows
• CVE/CVSS and vulnerability prioritization
• Patch compliance and remediation validation
• Windows workstation/server environments

Experience

• 5+ years in vulnerability management, patch management, endpoint engineering, or infrastructure security.
• Hands-on experience with SCA, vulnerability remediation, SCCM/MECM, PowerShell, patching, and remote troubleshooting.
• Experience with tools such as Qualys, Tenable, Rapid7, Nessus, Snyk, Black Duck, Mend, or Sonatype is preferred.