Secuirty Engineer

Quarks Technosoft Pvt. Ltd.; Bengaluru; Sur place; INR 4 200 000 - 7 000 000; Plein temps

Résumé du poste

Quarks Technosoft Pvt. Ltd. in Bengaluru seeks a Senior Endpoint Security Patch Management Engineer to lead enterprise patch remediation, automate deployment, and reduce cyber risk across endpoints, cloud, and apps.

You will collaborate with Security Operations, Infrastructure, Cloud, DevOps, and Compliance to govern patching and improve security posture. The role requires 7+ years in infrastructure/cybersecurity, 5+ years leading patch programs, and deep knowledge of Windows, Linux, VMware, and

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Information Technology, or related field.
• 7+ years of experience in Infrastructure, Systems Engineering, Cybersecurity, or Vulnerability Management.
• 5+ years leading enterprise patch management programs.
• Deep knowledge of Windows Client OS, Linux, VMware, cloud platforms (AWS, Azure, GCP).
• Experience with patch/vulnerability management tools such as Automox, Qualys, Microsoft Defender Vulnerability Management.
• Experience with enterprise patch management solutions such as Microsoft Intune, JAMF, Automox.
• Experience automating operational processes using IaC and configuration management tools.
• Solid understanding of CVSS, MITRE ATT&CK, and threat intelligence.
• Experience supporting large-scale enterprise environments with thousands of endpoints.

Responsabilités

• Lead the enterprise endpoint Patch and Vulnerability Management program.
• Develop and maintain patch management policies, standards, and procedures.
• Define patch prioritization based on CVSS scores, exploitability, threat intelligence, and risk.
• Manage OS and application patching across Windows, Linux, VMs, cloud, firmware, and third-party software.
• Coordinate emergency patch deployments for zero-day vulnerabilities and critical incidents.
• Integrate vulnerability scanning tools with patch management platforms to automate remediation workflows.
• Partner with Infrastructure, Cloud, Platform Engineering, and Applications teams to reduce remediation timelines.
• Design and implement automated patch deployment pipelines using scripting and configuration management tools.
• Monitor patch compliance, remediation SLAs, and vulnerability trends via dashboards.
• Perform root cause analysis for patch failures and recommend improvements.
• Support audits and regulatory compliance requirements (ISO 27001, SOC 2, PCI DSS, HIPAA, NIST, CIS Controls).
• Evaluate emerging technologies and recommend improvements to patch management capabilities.
• Mentor engineers and provide technical leadership across the organization.

Connaissances

Endpoint security

Patch management

Vulnerability management

Automation

IaC

Threat intelligence

CVSS

MITRE ATT&CK

Cloud platforms

Stakeholder collaboration

Formation

Bachelor’s degree in CS/IT

Outils

Automox

Qualys

Microsoft Defender Vulnerability Management

Intune

JAMF

Description du poste

Job Title: Senior Endpoint Security Patch Management Engineer

We are seeking an experienced Senior Endpoint Security Patch Management Engineer to lead the enterprise Endpoint vulnerability remediation and patch management program. This role is responsible for developing and executing patch management strategies, reducing organizational cyber risk, driving automation, and ensuring timely remediation of security vulnerabilities across endpoints, cloud infrastructure, and enterprise applications.

As a technical leader, you will collaborate with Security Operations, Infrastructure, Cloud Engineering, DevOps, Application Owners, and Compliance teams to establish governance, optimize patch deployment processes, and improve the organization's overall security posture.

Key Responsibilities

• Lead the enterprise endpoint Patch and Vulnerability Management program.
• Develop and maintain patch management policies, standards, and operational procedures.
• Define patch prioritization based on CVSS scores, exploitability, threat intelligence, business criticality, and risk.
• Manage operating systems and application patching across Windows, macOS, virtual machines, cloud platforms, firmware, and third-party software.
• Coordinate emergency patch deployments for zero-day vulnerabilities and critical / high security incidents.
• Integrate vulnerability scanning tools with patch management platforms to automate remediation workflows.
• Partner with Infrastructure, Cloud, Platform Engineering, and Application teams to reduce remediation timelines.
• Design and implement automated patch deployment pipelines using scripting and configuration management tools.
• Monitor patch compliance, remediation SLAs, and vulnerability trends through dashboards and executive reporting.
• Perform root cause analysis for patch failures and recommend preventive improvements.
• Support audits and regulatory compliance requirements including ISO 27001, SOC 2, PCI DSS, HIPAA, NIST, Cyber Essentials Plus and CIS Controls.
• Evaluate emerging technologies and recommend improvements to enterprise patch management capabilities.
• Mentor engineers and provide technical leadership across the organization.

Required Qualifications

• Bachelor’s degree in computer science, Information Security, Information Technology, or related field.
• 7+ years of experience in Infrastructure, Systems Engineering, Cybersecurity, or Vulnerability Management.
• 5+ years leading enterprise patch management programs.
• Deep knowledge of Windows Client OS, Linux, VMware, cloud platforms (AWS, Azure, GCP), and enterprise endpoint management.
• Experience with Patch / vulnerability management tools such as:
  • Automox
  • Qualys
  • Microsoft Defender Vulnerability Management
• Experience with enterprise patch management solutions such as:
  • Microsoft Intune
  • JAMF
  • Automox
• Experience automating operational processes using Infrastructure as Code and configuration management tools.
• Solid understanding of vulnerability scoring (CVSS), MITRE ATT&CK, and threat intelligence.
• Experience supporting large-scale enterprise environments with thousands of endpoints.