01Overview
About the Role
We're looking for an experienced Senior Lead Vulnerability & Patch Management Engineer to lead enterprise-scale vulnerability remediation and patch management across Azure-first hybrid environments. This is a strategic leadership role involving architecture, automation, governance, and team mentoring.
Key Responsibilities
- Own end-to-end vulnerability remediation and patch management across hybrid and cloud environments.
- Architect and manage patching solutions using SCCM/MECM, Azure Update Manager, WSUS, Intune, and Patch My PC.
- Drive risk-based remediation using CVSS, EPSS, CISA KEV, Microsoft Defender, Qualys, and Tenable.
- Build automation using PowerShell, Azure Automation, Ansible/AWX, and integrate with ServiceNow.
- Lead zero-day vulnerability response and emergency remediation.
- Define SLAs, KPIs, MTTR, executive dashboards, and governance processes.
- Mentor engineering teams and collaborate with Infrastructure, Cloud, Security, and DevOps teams.
Required Skills
- 8+ years in Vulnerability & Patch Management.
- 34 years in a Lead/Architect role.
- Robust expertise in
- SCCM/MECM
- Azure Update Manager
- WSUS
- Microsoft Intune
- Patch My PC
- Microsoft Defender for Cloud & Endpoint
- Qualys or Tenable
- ServiceNow
- Azure Policy & Azure Automation
- PowerShell (Python/Bash is a plus)
- Azure-first hybrid infrastructure
- Working knowledge of AWS Inspector and GCP Security Command Center.
Preferred Certifications
- AZ-104 / AZ-500 / MD-102
- CISSP / CISM / CCSP
- Qualys or Tenable Certifications
- ITIL Foundation
Good to Have
- SOAR & AI-assisted security workflows
- NIST, CIS, ISO 27001, PCI-DSS
- CMDB & Asset Management
- Kubernetes, Docker, IaC Security (Checkov/Terrascan) .
