Quick overview
Job description
Duration: 11 months
Hybrid: 3-4 days
Location: Client site at New york
Preferred OS with both windows and linux and need to own complete SCCM deployments
Job Title: Vulnerability remediation (Patch Management) Engineer
Experience Required: 8–10 Years
Platforms: Windows & Linux
Tools: SCCM, Tanium
Job Summary
We are seeking a skilled Vulnerability remediation (Patch Management) Engineer with 5–8 years of hands-on experience in managing patch deployment and vulnerability remediation across both Windows and Linux environments. The ideal candidate will be responsible for end-to-end patch lifecycle management, including deployment, troubleshooting failures, and ensuring compliance with security standards. Strong working knowledge of SCCM, Tanium, and scripting (PowerShell/Shell) is essential for automation and efficient remediation.
Key Responsibilities
Patch Deployment & Management
- Plan, schedule, and deploy security patches and updates across Windows and Linux systems.
- Use SCCM and Tanium for patch deployment, automation, and reporting.
- Ensure timely patching aligned with organizational security SLAs and compliance requirements.
Vulnerability Assessment & Remediation
- Analyze vulnerability scan outputs and translate them into actionable patching activities.
- Validate findings to eliminate false positives and confirm true risk exposure.
- Provide technical guidance on remediation steps including patching, configuration changes, and compensating controls.
- Prioritize remediation based on severity, exploitability, and business impact.
- Validate patch implementation and ensure vulnerabilities are effectively remediated.
Troubleshooting & Issue Resolution
- Diagnose and resolve patch deployment issues and failures across environments.
- Perform root cause analysis and fix compatibility or system-related issues.
- Coordinate with application and infrastructure teams for issue resolution.
Scripting & Automation
- Develop and use PowerShell and Shell scripts to automate patch deployment, validation, and reporting.
- Improve patching efficiency through automation and process optimization.
Monitoring, Compliance & Reporting
- Track patch compliance and generate reports for security and audit teams.
- Ensure systems meet organizational security and regulatory standards.
- Support audit remediation and security assessments.
Collaboration & Documentation
- Work closely with security, infrastructure, and operations teams for coordinated patching activities.
- Maintain SOPs, patch schedules, and documentation.
- Participate in change management processes and maintenance windows.
Required Skills & Qualifications
- 8–10 years of strong hands-on experience in patch management and vulnerability remediation.
- Drive end-to-end vulnerability remediation, from analysis of findings to closure validation.
- Strong hands-on experience with SCCM and Tanium.
- Good knowledge of Windows and Linux system administration.
- Experience deploying, troubleshooting, and validating patches across environments.
- Work closely with infrastructure, application, cloud, and network teams to remediate vulnerabilities across servers, endpoints, databases, and network devices.
- Strong scripting skills (PowerShell, Shell scripting).
- Familiarity with ITIL-based change and incident management.
- Strong analytical, troubleshooting, and communication skills.
Preferred Skills / Certifications
- Certifications such as CompTIA Security+, CEH, or equivalent.
- Experience with vulnerability tools (Qualys, Tenable, Rapid7).
- Exposure to automation frameworks or DevOps practices is an advantage.
Similar jobs
- NN
System AdministratorRecently posted
Naval Nuclear Laboratory · Niskayuna, New York · Hybrid 🇺🇸
Active DirectoryDNSSharePoint+2Technology$70.9k - $108.5k/yr - GC

Systems Administrator (TS/SCI with Poly Required) with Security Clearance
GCI · Chantilly, VA · Hybrid 🇺🇸
DockerGCPAWS+17TechnologySalary not listed - SM
Computer Systems Administrator (24x7 Operations) (5764) (TS/SCI with Security ClearanceRecently posted
Smartronix, LLC · Fort Liberty, NC · On-site 🇺🇸
TerraformAnsibleVMware+1Technology$120k - $155k/yr - SA
Systems Administrator with Security ClearanceRecently posted
SAIC · Pearl City, HI · Hybrid 🇺🇸
Microsoft OfficeSharePointTechnology$120.0k - $160k/yr - RE

System Administrator 1 with Security ClearanceRecently posted
RealmOne · San Antonio, TX · Hybrid 🇺🇸
LinuxTechnologySalary not listed - WW

Network Operations Center (NOC) Lead with Security ClearanceRecently posted
World Wide Technology · Phoenix, AZ · On-site 🇺🇸
Project ManagementAdministrative$155k - $170k/yr - LM

Appian System Administrator - Clearance Required with Security ClearanceRecently posted
LMI · Fort Belvoir, VA · Hybrid 🇺🇸
SAFeSAMLSSO+4Technology$144k/yr - SA
Network Administrator with Security ClearanceRecently posted
SAIC · Colorado Springs, CO · On-site 🇺🇸
FiberiOSEncryption+1Technology$80.0k - $120k/yr - RE

Systems Engineer 6 with Security ClearanceRecently posted
RealmOne · Columbia, MD · Hybrid 🇺🇸
JiraTechnologySalary not listed - SA
Senior Systems Engineer with Security ClearanceRecently posted
SAIC · North Charleston, SC · Hybrid 🇺🇸
TechnologySalary not listed - SA
Systems Engineer with Security ClearanceRecently posted
SAIC · Chantilly, VA · Hybrid 🇺🇸
Technology$140k - $180k/yr - LE

Linux Server Systems AdministratorRecently posted
Leidos · Washington, Washington DC · On-site 🇺🇸
OracleShellAnsible+1TechnologySalary not listed