Patch Management Lead

SHI Solutions India Pvt. Ltd.; Hyderabad; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

SHI Solutions India Pvt. Ltd. is seeking a Patch Management Lead to direct enterprise patching across endpoints and servers from Hyderabad.

You will drive patch planning, deployment, troubleshooting, and compliance, engaging vulnerability and risk teams. The role requires coordinating with Tanium, Automox, Tenable, Rapid7, and endpoint security tools to meet SLAs. You will mentor engineers, manage escalation for critical vulnerabilities, and align with risk, IAM, and GRC teams for timely

Qualifications

• Bachelor’s or diploma in CS/IT/Cybersecurity or equivalent experience.
• 5–8+ years in patch management, endpoint management, or cybersecurity operations.
• Experience with enterprise patch deployment and vulnerability remediation tools.
• Experience leading or mentoring technical teams in patch management.

Responsibilities

• Lead scheduled patching across endpoints and servers using Tanium; support Automox to Tanium transitions.
• Coordinate monthly, emergency, and out-of-band patch cycles with cross-functional teams.
• Review patch applicability, deployment status, reboot needs, and compliance results.
• Prioritize patches using vulnerability data from Tenable and Rapid7.
• Collaborate with server, desktop, endpoint, app, and infra teams for deployment and validation.
• Troubleshoot patch installation failures, endpoint communication, and remediation gaps.
• Track tickets, monitor remediation, and ensure timely closure of patch issues.
• Manage patch exception docs, risk acceptance, and remediation in TruOps / similar tools.
• Coordinate with CrowdStrike and SentinelOne when endpoint health impacts patching.
• Produce patch compliance dashboards, SLA reports, and audit evidence.

Skills

Patch management

Vulnerability remediation

Leadership

Stakeholder management

Incident coordination

Scripting (PowerShell / Python)

Education

Diploma/Bachelor's in Computer Science / IT / Cybersecurity

Tools

Tanium

Automox

Tenable

Rapid7

CrowdStrike

SentinelOne

TruOps

Cyberfusion

Okta

CyberArk

Job description

JOB DESCRIPTION

Patch Management Lead

JOB TITLE: Patch Management Lead

JOB CODE: PM-LEAD

DEPARTMENT: Cybersecurity / Patch Management

LOCATION: Hyderabad, India

TYPE OF POSITION: Permanent

REPORTING TO: Cybersecurity Manager / Patch Management Manager

Work Hours

• USA business hours /
• US client-support shift

JOB SUMMARY

The Patch Management Lead will lead and manage patch management activities across enterprise endpoints and servers, overseeing patch planning, deployment, troubleshooting, compliance tracking, vulnerability remediation, risk management, and reporting. The role will work closely with vulnerability management, endpoint security, infrastructure, IAM, and risk teams using Tanium, Automox, Tenable, Rapid7, TruOps, CrowdStrike, SentinelOne, Okta, CyberArk, and Cyberfusion-related workflows.

The Patch Management Lead will act as the primary escalation point for critical patching issues and vulnerabilities, provide technical guidance to Patch Management Engineers, coordinate patching activities across teams, and ensure patch compliance and remediation targets are achieved within defined SLAs.

OPERATIONAL RESPONSIBILITIES

• Lead and oversee scheduled patching activities using Tanium and support legacy/transition workflows from Automox to Tanium.
• Plan and coordinate monthly, emergency, and out-of-band patch cycles across enterprise endpoints and servers.
• Review patch applicability, deployment status, reboot requirements, failed patches, and compliance results.
• Prioritize patching activities based on vulnerability data from Tenable and Rapid7, including CVE severity, exploitability, and business risk.
• Coordinate with server, desktop, endpoint, application, and infrastructure teams for patch deployment and validation.
• Lead troubleshooting of complex patch installation failures, endpoint communication issues, reboot-pending status, and compliance gaps.
• Track patch tickets, review deployment status, monitor remediation activities, and ensure timely closure of patch-related issues.
• Support and manage patch exception documentation, risk acceptance, and remediation tracking in TruOps or similar platforms.
• Coordinate with endpoint security platforms such as CrowdStrike and SentinelOne when endpoint health or agent status impacts patching.
• Monitor and drive patch compliance, SLA adherence, vulnerability remediation, and deployment success rates.
• Prepare and review patch compliance dashboards, management reports, SLA reports, and audit evidence.
• Lead patch-planning calls and operational reviews with internal teams and stakeholders during USA hours.
• Act as the primary escalation point for high-risk patch failures, critical vulnerabilities, and overdue remediation activities.
• Provide technical guidance and support to Patch Management Engineers and review assigned patching activities.
• Coordinate with vulnerability management, security, infrastructure, IAM, risk, and GRC teams to ensure timely remediation.
• Identify recurring patching issues and drive corrective actions and process improvements.
• Maintain patch management runbooks, deployment procedures, operational documentation, and compliance evidence.

EDUCATIONAL REQUIREMENTS, TOOLS & CERTIFICATIONS

Education: Diploma/bachelor’s degree in computer science, Information Technology, Cybersecurity, or equivalent experience.

Experience

• 5–8+ years of experience in patch management, endpoint management, infrastructure operations, vulnerability management, or cybersecurity operations.
• Strong hands-on experience with enterprise patch deployment and vulnerability remediation tools.
• Experience leading or mentoring technical teams in patch management or infrastructure operations.
• Experience supporting US business hours or global operations preferred.

Tools & Technologies

• Primary Patch Tool: Tanium, Automox
• VM Input Tools: Tenable, Rapid7
• Endpoint Security: CrowdStrike, SentinelOne
• Risk / GRC: TruOps, Cyberfusion
• Identity / PAM: Okta, CyberArk
• Other: ITSM/ticketing tools, Excel, dashboards, reporting platforms

Certifications: ITIL Foundation, Security+, Microsoft endpoint certifications, Tanium certification, or equivalent.

TECHNICAL SKILLS

• Strong understanding of Windows/Linux/macOS patching concepts.
• Strong hands-on knowledge of Tanium and/or Automox patch deployment.
• Strong understanding of vulnerability management, CVEs, CVSS, vulnerability severity, and remediation prioritization.
• Experience working with Tenable and/or Rapid7 for vulnerability-driven remediation.
• Understanding of endpoint security platforms such as CrowdStrike and SentinelOne.
• Strong knowledge of patch compliance, maintenance windows, reboot coordination, and remediation timelines.
• Strong understanding of ITIL processes, including Change Management, Incident Management, Problem Management, and Release Management.
• Ability to analyze complex patch failures and coordinate root-cause and corrective actions.
• Knowledge of patch automation and scripting such as PowerShell or Python is preferred.

SOFT SKILLS

• Strong leadership, communication, and stakeholder management skills.
• Ability to lead and mentor Patch Management Engineers.
• Strong coordination, troubleshooting, and follow-up skills.
• Strong analytical and problem-solving skills.
• Ability to manage multiple priorities and critical remediation activities.
• Strong ownership and accountability for assigned responsibilities.
• Ability to work effectively with global teams while supporting USA business hours.

OTHER SKILLS

• Experience managing enterprise-wide patching programs and remediation activities.
• Knowledge of patch exception handling, risk acceptance, remediation tracking, and SLA monitoring.
• Experience supporting compliance and audit requirements (ISO 27001, NIST, PCI-DSS, SOX).
• Ability to analyze patch compliance trends and identify areas for improvement.
• Strong understanding of patch cycles, maintenance windows, remediation timelines, and reboot coordination.
• Ability to manage high-risk vulnerabilities and coordinate emergency/out-of-band patching activities.
• Strong documentation and reporting skills.
• Ability to prepare and present patch management reports, dashboards, KPIs, and compliance metrics.
• Team-oriented approach with strong ownership of operational activities.
• Ability to maintain operational documentation, runbooks, deployment records, and compliance evidence.
• Strong coordination and stakeholder communication skills while supporting US business hours.
• Ability to act as the primary escalation point for critical patching issues and vulnerability remediation.