Patch Research Engineer

Qualys; Maharashtra; On-site; INR 1,500,000 - 2,600,000; Full time

Job summary

Qualys in Pune, India is seeking an Apple macOS Patch Catalogue Engineer to design, develop, validate, and maintain patch metadata and deployment catalogs for enterprise patch management.

You will build a centralized content repository covering Apple OS updates and third-party apps, ensure accurate detection, reliable installation, compliance reporting, and consistent deployment across enterprise environments.

Qualifications

• Experience designing and validating macOS patch content for enterprise deployments.
• Strong understanding of macOS architecture, OS builds, and package formats.
• Proficient in Bash and Python scripting for automation tasks.
• Knowledge of vulnerability scoring (CVSS) and patch supersedence logic.

Responsibilities

• Develop and maintain a centralized macOS patch catalogue repository.
• Research Apple advisories and create structured patch metadata (version, architecture, detection, installation, compliance).
• Build deployment workflows for DMG, PKG, and ZIP installers.
• Write automation scripts to generate and validate patch content.
• Perform lab validation across macOS versions and architectures; ensure stability and rollback handling.

Skills

macOS patching

Vulnerability content development

macOS systems administration

Bash scripting

Python scripting

Jamf Pro

Kandji

Intune

Munki

CVSS basics

Tools

Jamf Pro

Kandji

Intune

Munki

Ivanti Patch for Endpoint Manager

ManageEngine Patch Manager Plus

Apple Business Manager

softwareupdate CLI

PKG/DMG packaging

Job description

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

Patch Research Engineer

Apple macOS Patch Catalogue Engineer — Patch Content Development

Location: Pune, India

Experience Required: 3–8 years (Patch Management / Vulnerability Content Development / macOS Systems Administration)

Role Overview

We are seeking a skilled Apple macOS Patch Catalogue Engineer to design, develop, validate, and maintain macOS patch metadata and deployment catalogues in support of enterprise patch management solutions. This role is responsible for building and sustaining an in-house macOS patch content repository covering both Apple OS updates and third-party applications — ensuring accurate detection logic, reliable installation behavior, compliance reporting, and consistent deployment across enterprise environments.

Key Responsibilities

• Patch Catalogue Development
• Research and analyze security advisories published by Apple Inc. for macOS and related products.
• Create structured, schema-compliant macOS patch metadata (version, architecture, detection, installation, and compliance fields).
• Build and maintain a centralized macOS patch catalogue repository.
• macOS Update & Security Monitoring
• Continuously track new releases of macOS and other supported Apple and third-party products.
• Monitor Apple security bulletins and release notes to identify patch-relevant changes as they are published.
• Detection & Compliance Logic
• Develop and validate detection logic using macOS system profiling commands and utilities.
• Apply working knowledge of OS builds, application bundles (.app), and package receipts (.pkg) to construct accurate version-detection rules.
• Write and maintain automation scripts in Bash, Zsh, and Python to support content generation and validation.
• QA & Validation
• Perform lab-based testing across all supported macOS versions and architectures.
• Validate installation success, rollback scenarios, dependency handling, and fail-safe behavior for every patch.
• Ensure patch content is stable and does not introduce regressions or system-level side effects.
• Third-Party macOS Application Patching
• Build accurate patch metadata for third-party macOS applications.
• Develop packaging and deployment workflows for DMG, PKG, and ZIP installer formats.

Required Skills

• Strong understanding of macOS architecture, filesystem structure, and system internals.
• Practical experience with:
• macOS software update mechanisms (Software Update, softwareupdate CLI)
• PKG/DMG packaging and installer behavior
• Launch Daemons and macOS system services
• Mandatory scripting proficiency in Bash and Python (Zsh a plus).
• Experience with Jamf Pro, Kandji, Intune, Munki, or Google Workspace would be a plus.
• Experience with Mac vulnerability management and Mac patch management.
• Solid understanding of CVE/NVD data, vulnerability severity scoring (CVSS), and patch supersedence logic.
• Experience with enterprise patch management tools is preferred (e.g., Ivanti Patch for Endpoint Manager, ManageEngine Patch Manager Plus, or similar platforms).
• Familiarity with Apple's MDM (Mobile Device Management) framework and Apple Business Manager.
• Knowledge of Secure Token and FileVault handling.
• Clear understanding of the architectural differences between Apple Silicon (ARM64) and Intel-based macOS systems.