Patch Research Engineer

Qualys; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Qualys invites an Apple macOS Patch Catalogue Engineer to design, develop, and maintain an in-house macOS patch content repository for enterprise patch management. Location is Pune, India, with 3–8 years of relevant experience in patch content development and vulnerability management.

The role requires building detection logic, validating installations, and ensuring compliant deployment across enterprise environments.

Qualifications

• Strong understanding of macOS architecture and system internals.
• Experience with macOS software update mechanisms (Software Update, softwareupdate CLI).
• Experience with PKG/DMG packaging and installer behavior.

Responsibilities

• Research and analyze Apple macOS security advisories to build patch metadata.
• Create structured macOS patch metadata including version, architecture, detection, and compliance fields.
• Build and maintain a centralized macOS patch catalogue repository.
• Monitor Apple security bulletins and release notes for patch relevance.
• Develop and validate detection logic using macOS profiling commands.
• Write automation scripts in Bash, Zsh, and Python to support content generation.
• Perform QA testing across macOS versions and architectures.
• Ensure patch content is stable and does not cause regressions.
• Create metadata for third-party macOS applications and packaging workflows.

Skills

macOS architecture

Scripting (Bash, Python)

Patch management

Vulnerability content development

Detection & compliance logic

macOS update mechanisms

PKG/DMG packaging

Launch Daemons & system services

CVE/NVD data & CVSS

MDM familiarity

Tools

Jamf Pro

Kandji

Intune

Munki

Ivanti Patch

ManageEngine Patch Manager Plus

Apple MDM framework

Secure Token & FileVault

Job description

Patch Research Engineer Apple macOS Patch Catalogue Engineer — Patch Content Development

Location: Pune, India

Experience Required: 3–8 years (Patch Management / Vulnerability Content Development / macOS Systems Administration)

Role Overview We are seeking a skilled Apple macOS Patch Catalogue Engineer to design, develop, validate, and maintain macOS patch metadata and deployment catalogues in support of enterprise patch management solutions. This role is responsible for building and sustaining an in-house macOS patch content repository covering both Apple OS updates and third-party applications — ensuring accurate detection logic, reliable installation behavior, compliance reporting, and consistent deployment across enterprise environments.

Key Responsibilities

• Patch Catalogue Development Research and analyze security advisories published by Apple Inc. for macOS and related products.
  • Create structured, schema-compliant macOS patch metadata (version, architecture, detection, installation, and compliance fields).
  • Build and maintain a centralized macOS patch catalogue repository.
• macOS Update & Security Monitoring Continuously track new releases of macOS and other supported Apple and third-party products.
  • Monitor Apple security bulletins and release notes to identify patch-relevant changes as they are published.
• Detection & Compliance Logic Develop and validate detection logic using macOS system profiling commands and utilities.
  • Apply working knowledge of OS builds, application bundles (.app), and package receipts (.pkg) to construct accurate version-detection rules.
  • Write and maintain automation scripts in Bash, Zsh, and Python to support content generation and validation.
• QA & Validation Perform lab-based testing across all supported macOS versions and architectures.
  • Validate installation success, rollback scenarios, dependency handling, and fail-safe behavior for every patch.
  • Ensure patch content is stable and does not introduce regressions or system-level side effects.
• Third-Party macOS Application Patching Build accurate patch metadata for third-party macOS applications.
  • Develop packaging and deployment workflows for DMG, PKG, and ZIP installer formats.

Required Skills

• Strong understanding of macOS architecture, filesystem structure, and system internals.
• Practical experience with:
  • macOS software update mechanisms (Software Update, softwareupdate CLI)
  • PKG/DMG packaging and installer behavior
  • Launch Daemons and macOS system services
• Mandatory scripting proficiency in Bash and Python (Zsh a plus).
• Experience with Jamf Pro, Kandji, Intune, Munki, or Google Workspace would be a plus.
• Experience with Mac vulnerability management and Mac patch management.
• Solid understanding of CVE/NVD data, vulnerability severity scoring (CVSS), and patch supersedence logic.
• Experience with enterprise patch management tools is preferred (e.g., Ivanti Patch for Endpoint Manager, ManageEngine Patch Manager Plus, or similar platforms).
• Familiarity with Apple's MDM (Mobile Device Management) framework and Apple Business Manager.
• Knowledge of Secure Token and FileVault handling.
• Clear understanding of the architectural differences between Apple Silicon (ARM64) and Intel-based macOS systems.

Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings.