Vulnerability Management Analyst

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title: Vulnerability Management Analyst

Location(s): Richmond, VA
(Hybrid: 3 days per week)


Job Summary
The Endpoint Engineer will support enterprise software deployment, endpoint patch management, and vulnerability remediation activities. The role involves reviewing endpoint vulnerability metrics, deploying targeted software updates and patches, troubleshooting deployment failures, and performing root-cause analysis. The engineer will help maintain a secure, compliant, and reliable endpoint environment.

Responsibilities

• Engineer, modify, package, and deploy commercial off-the-shelf (COTS) software across enterprise endpoint environments.
• Develop and maintain software deployment packages using Microsoft Intune, Endpoint Configuration Manager (MECM/SCCM), or similar endpoint management platforms.
• Perform compatibility testing and configuration adjustments to ensure reliable software installation and operation across diverse device profiles.
• Automate software deployment workflows to improve efficiency, consistency, and scalability.
• Collaborate with application owners and security teams to evaluate software update requirements, dependencies, and risks.
• Support enterprise patch management processes, including testing, scheduling, deploying, and validating operating system and third-party updates.
• Monitor vulnerability reports from tools such as Rapid7, Qualys, Tenable, and Microsoft Defender for Endpoint.
• Assist in prioritizing and remediating endpoint-related security vulnerabilities.
• Troubleshoot software deployment failures, patching issues, and endpoint configuration problems.
• Perform root-cause analysis and implement corrective actions.
• Maintain documentation for software packaging standards, deployment procedures, endpoint baselines, and change management activities.
• Implement and enforce endpoint hardening policies, compliance settings, and configuration baselines.
• Collaborate with infrastructure, security, and service desk teams to improve endpoint reliability, security, and user satisfaction.
• Evaluate new technologies, software updates, and automation opportunities to optimize endpoint management operations.

Required Qualifications

• Experience with enterprise software packaging, deployment, and endpoint management.
• Experience with Microsoft Intune, MECM/SCCM, or similar endpoint management platforms.
• Knowledge of enterprise patch management, software updates, and vulnerability remediation.
• Experience troubleshooting deployment failures, patching issues, and endpoint configuration problems.
• Understanding of endpoint security, hardening policies, compliance settings, and configuration baselines.
• Ability to perform root-cause analysis and document corrective actions.

Preferred Qualifications

• Experience with vulnerability management tools such as Rapid7, Qualys, Tenable, or Microsoft Defender for Endpoint.
• Experience automating software deployment workflows.
• Ability to collaborate with application owners, security teams, infrastructure teams, and service desk personnel.

Work Arrangement

• Hybrid work arrangement.
• Onsite attendance required three days per week: Tuesday, Wednesday, and Thursday.
• Local Richmond, Virginia candidates are preferred due to weekly onsite requirements.
• Candidates must physically reside within the United States for the duration of the assignment.

Skills: