Patch Engineer – Endpoint Vulnerability Analysis & Remediation

Patch Engineer – Endpoint Vulnerability Analysis & Remediation

Location: India Remote

Shift: 5:00 PM – 2:00 AM IST, Monday–Friday

Position Summary

We are seeking a highly skilled Patch Engineer to join our Enterprise Patch Management and Vulnerability Remediation team. This role is primarily focused on Windows endpoint patching and vulnerability remediation, including operating system, third-party, and open-source application patching.

The ideal candidate will have strong hands-on experience in vulnerability analysis, endpoint patch deployment, application packaging, and remediation validation. The role involves identifying vulnerabilities, determining appropriate remediation strategies, testing patches and application updates, deploying solutions through enterprise endpoint management platforms, and validating successful remediation.

Top 3 Technical Skills

• Qualys Vulnerability analysis and remediation
• Patch deployment using BigFix or MEMCM
• Application packaging

Primary Vulnerability Management Tool: Qualys

Key Responsibilities

• Analyze Qualys vulnerability reports and SCA findings to identify vulnerable open-source libraries, third-party applications, and software components across enterprise endpoints.
• Investigate vulnerabilities by validating affected software, installed versions, installation paths, dependencies, and potential business impact.
• Develop and recommend remediation plans that address vulnerabilities while minimizing operational risk and business disruption.
• Research vendor security advisories, release notes, CVEs, and remediation guidance to determine appropriate software versions and security updates.
• Perform Windows workstation and server operating system patching and support enterprise-wide vulnerability remediation initiatives.
• Deploy patches, application updates, and remediation solutions using BigFix, MEMCM/SCCM, or similar endpoint management platforms.
• Test patches, software updates, and application versions in lower environments before production deployment to ensure functionality, compatibility, and security.
• Validate remediation through follow-up vulnerability scans, patch compliance reports, and endpoint validation.
• Package and deploy third-party applications and updates where required.
• Coordinate with software vendors to open support cases, validate fixes, obtain technical guidance, and resolve product-specific security issues.
• Document remediation activities, testing results, deployment procedures, known issues, and recommendations.
• Partner with Information Security, Vulnerability Management, Application Support, Desktop Engineering/Packaging, and Infrastructure teams to meet remediation SLAs.
• Monitor emerging vulnerabilities, vendor advisories, CVEs, and software lifecycle changes that may impact enterprise applications.
• Participate in urgent security patch deployments and remediation activities for critical and zero-day vulnerabilities.
• Use Microsoft Excel extensively for large datasets, vulnerability tracking, reconciliation, analysis, and management reporting.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent professional experience.
• 7+ years of experience in enterprise patch management, endpoint engineering, application packaging, or vulnerability remediation.
• Strong knowledge of Windows workstation and server operating systems.
• Strong hands-on experience with at least one enterprise endpoint management platform, particularly BigFix or MEMCM/SCCM.
• Experience using endpoint management tools to deploy patches and remediate vulnerabilities.
• Experience analyzing vulnerability reports from Qualys, SCA tools, or similar vulnerability management platforms.
• Strong understanding of CVEs, third-party application vulnerabilities, open-source software components, and software dependencies.
• Experience with application packaging technologies such as MSI, MSIX, InstallShield, AdminStudio, or similar packaging technologies.
• Experience deploying applications through BigFix, Microsoft Intune, MECM/Configuration Manager, or comparable enterprise software distribution platforms.
• Strong troubleshooting and root-cause analysis skills, including the ability to identify affected software, versions, installation locations, and dependencies.
• Experience working with software vendors to troubleshoot vulnerabilities and validate remediation options.
• Strong Microsoft Excel skills, including formulas, data analysis, reconciliation, and reporting across large datasets.
• Excellent documentation, communication, and cross-functional collaboration skills.

Preferred Qualifications

• Experience packaging and deploying third-party application updates through BigFix or MEMCM while following enterprise change-management processes.
• Experience with vulnerability management platforms such as Qualys, Tenable, Rapid7, or Microsoft Defender Vulnerability Management.
• PowerShell or Python scripting experience for automation, application packaging, patching, or remediation.
• Experience supporting regulatory compliance requirements and vulnerability remediation SLAs.
• Ability to build strong partnerships with security teams, software vendors, application owners, and infrastructure teams.
• Experience handling critical and zero-day vulnerability remediation within aggressive SLA timelines.