Vulnerability and Patch Management Engineer

Cywarden Global Services; Chandigarh, Pune District; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Cywarden Global Services seeks a Senior Lead Vulnerability & Patch Management Engineer to lead enterprise-scale remediation across Azure-first hybrid environments. You will own architecture, automation, governance, and mentor cross-functional teams.

Responsibilities include end-to-end remediation, patching solution design, and risk-based prioritization using CVSS/EPSS with tools like Defender, Qualys, Tenable. Drive SLAs, dashboards, and process improvements.

Qualifications

• 8+ years in Vulnerability & Patch Management.
• 34 years in a Lead/Architect role.
• Strong expertise in enterprise patching tools and patch management.
• Knowledge of AWS Inspector and GCP Security Command Center.

Responsibilities

• Own end-to-end vulnerability remediation and patch management across hybrid and cloud environments.
• Architect and manage patching solutions using SCCM/MECM, Azure Update Manager, WSUS, Intune, Patch My PC.
• Drive risk-based remediation using CVSS, EPSS, CISA KEV, Defender, Qualys, Tenable.
• Build automation using PowerShell, Azure Automation, Ansible/AWX, and integrate with ServiceNow.
• Lead zero-day vulnerability response and emergency remediation.
• Define SLAs, KPIs, MTTR, executive dashboards, and governance processes.
• Mentor engineering teams and collaborate with Infra, Cloud, Security, and DevOps.

Skills

Vulnerability mgmt

Lead/Architect experience

Automation & governance

Tools

SCCM/MECM

Azure Update Manager

WSUS

Intune

Patch My PC

Microsoft Defender for Cloud & Endpoint

Qualys or Tenable

ServiceNow

Azure Policy

Azure Automation

PowerShell

AWS Inspector

GCP Security Command Center

Job description

About the Role

We're looking for an experienced Senior Lead Vulnerability & Patch Management Engineer to lead enterprise-scale vulnerability remediation and patch management across Azure-first hybrid environments. This is a strategic leadership role involving architecture, automation, governance, and team mentoring.

Key Responsibilities

• Own end-to-end vulnerability remediation and patch management across hybrid and cloud environments.
• Architect and manage patching solutions using SCCM/MECM, Azure Update Manager, WSUS, Intune, and Patch My PC.
• Drive risk-based remediation using CVSS, EPSS, CISA KEV, Microsoft Defender, Qualys, and Tenable.
• Build automation using PowerShell, Azure Automation, Ansible/AWX, and integrate with ServiceNow.
• Lead zero-day vulnerability response and emergency remediation.
• Define SLAs, KPIs, MTTR, executive dashboards, and governance processes.
• Mentor engineering teams and collaborate with Infrastructure, Cloud, Security, and DevOps teams.

Required Skills

• 8+ years in Vulnerability & Patch Management.
• 34 years in a Lead/Architect role.
• Strong expertise in:
• SCCM/MECM
• Azure Update Manager
• WSUS
• Microsoft Intune
• Patch My PC
• Microsoft Defender for Cloud & Endpoint
• Qualys or Tenable
• ServiceNow
• Azure Policy & Azure Automation
• PowerShell (Python/Bash is a plus)
• Azure-first hybrid infrastructure
• Working knowledge of AWS Inspector and GCP Security Command Center.

Preferred Certifications

• AZ-104 / AZ-500 / MD-102
• CISSP / CISM / CCSP
• Qualys or Tenable Certifications
• ITIL Foundation

Good to Have

• SOAR & AI-assisted security workflows
• NIST, CIS, ISO 27001, PCI-DSS
• CMDB & Asset Management
• Kubernetes, Docker, IaC Security (Checkov/Terrascan)