Sr. Endpoint Security Engineer - Patch Management

Accelon Consulting; Bengaluru; Híbrido; INR 1.800.000 - 3.200.000; Jornada completa

Descripción de la vacante

Accelon Consulting in Bengaluru seeks a senior Lead for Enterprise Patch and Vulnerability Management to orchestrate patching across Windows, Linux, VMs, and cloud platforms. You will define policies, prioritize risk, automate workflows, and report to executives.

You will mentor engineers, drive audits for ISO 27001, SOC 2, PCI DSS, HIPAA, NIST, and CIS Controls, and collaborate with Infra, Cloud, Platform Eng, and App teams to shorten remediation timelines.

Formación

• 7+ years in Infrastructure, Systems Engineering, Cybersecurity, or Vulnerability Management.

Responsabilidades

• Lead enterprise patch and vulnerability management program.
• Define patch prioritization based on CVSS, threat intel, and business criticality.
• Coordinate patching across Windows, Linux, VMs, and cloud platforms.
• Automate remediation workflows and integration with scanning tools.
• Mentor engineers and drive executive reporting and dashboards.
• Support audits and regulatory requirements including ISO 27001, SOC 2, PCI DSS, NIST.

Conocimientos

Endpoint patching leadership

Vulnerability management

Policy development

Automation scripting

Risk-based prioritization

Educación

Bachelor's degree in Computer Science / Information Security / IT

Herramientas

Automox

Qualys

Microsoft Defender Vulnerability Management

Microsoft Intune

JAMF

Descripción del empleo

• Lead the enterprise endpoint Patch and Vulnerability Management program.
• Develop and maintain patch management policies, standards, and operational procedures.
• Define patch prioritization based on CVSS scores, exploitability, threat intelligence, business criticality, and risk.
• Manage operating systems and application patching across Windows, macOS, virtual machines, cloud platforms, firmware, and third-party software.
• Coordinate emergency patch deployments for zero-day vulnerabilities and critical/high security incidents.
• Integrate vulnerability scanning tools with patch management platforms to automate remediation workflows.
• Partner with Infrastructure, Cloud, Platform Engineering, and Application teams to reduce remediation timelines.
• Design and implement automated patch deployment pipelines using scripting and configuration management tools.
• Monitor patch compliance, remediation SLAs, and vulnerability trends through dashboards and executive reporting.
• Perform root cause analysis for patch failures and recommend preventive improvements.
• Support audits and regulatory compliance requirements including ISO 27001, SOC 2, PCI DSS, HIPAA, NIST, Cyber Essentials Plus and CIS Controls.
• Evaluate emerging technologies and recommend improvements to enterprise patch management capabilities.
• Mentor engineers and provide technical leadership across the organization.

Requirements

Must-Have:

• 7+ years of experience in Infrastructure, Systems Engineering, Cybersecurity, or Vulnerability Management.
• 5+ years leading enterprise patch management programs.
• Bachelor's degree in Computer Science, Information Security, Information Technology, or related field.
• Deep knowledge of Windows Client OS, Linux, VMware, and cloud platforms (AWS, Azure, GCP).
• Experience with patch/vulnerability management tools: Automox, Qualys, Microsoft Defender Vulnerability Management.
• Experience with enterprise patch management solutions: Microsoft Intune, JAMF, Automox.
• Experience automating operational processes using Infrastructure as Code and configuration management tools.
• Solid understanding of vulnerability scoring (CVSS), MITRE ATT&CK, and threat intelligence.
• Experience supporting large-scale enterprise environments with thousands of endpoints.