Vulnerability and Patch Management Engineer (Chandigarh)

Cywarden Global Services; Chandigarh; On-site; INR 4,000,000 - 9,000,000; Full time

Job summary

Cywarden Global Services is seeking an experienced Senior Lead Vulnerability & Patch Management Engineer to spearhead enterprise-scale remediation across Azure-first hybrid environments. You will own architecture, automation, governance, and mentor a cross-functional team.

You will architect patching solutions using SCCM/MECM, Azure Update Manager, WSUS, Intune, and Patch My PC, while driving risk-based remediation with Defender, Qualys, and Tenable.

Qualifications

• 8+ years in Vulnerability & Patch Management.
• 34 years in a Lead/Architect role.

Responsibilities

• Own end-to-end vulnerability remediation and patch management across hybrid and cloud environments.
• Architect and manage patching solutions using SCCM/MECM, Azure Update Manager, WSUS, Intune, and Patch My PC.
• Drive risk-based remediation using CVSS, EPSS, CISA KEV, Microsoft Defender, Qualys, and Tenable.
• Build automation using PowerShell, Azure Automation, Ansible/AWX, and integrate with ServiceNow.
• Lead zero-day vulnerability response and emergency remediation.
• Define SLAs, KPIs, MTTR, executive dashboards, and governance processes.
• Mentor engineering teams and collaborate with Infrastructure, Cloud, Security, and DevOps teams.

Skills

Vulnerability management

Patch management

SCCM/MECM

Azure Update Manager

WSUS

Intune

Patch My PC

Microsoft Defender

Qualys/Tenable

ServiceNow

Azure Policy

Azure Automation

PowerShell

Azure-first hybrid infra

Python/Bash

Tools

SCCM/MECM

Azure Update Manager

WSUS

Intune

Patch My PC

Microsoft Defender for Cloud & Endpoint

Qualys

Tenable

ServiceNow

Azure Policy

Azure Automation

PowerShell

Job description

About the Role

We're looking for an experienced Senior Lead Vulnerability & Patch Management Engineer to lead enterprise-scale vulnerability remediation and patch management across Azure-first hybrid environments. This is a strategic leadership role involving architecture, automation, governance, and team mentoring.

Key Responsibilities

• Own end-to-end vulnerability remediation and patch management across hybrid and cloud environments.
• Architect and manage patching solutions using SCCM/MECM, Azure Update Manager, WSUS, Intune, and Patch My PC.
• Drive risk-based remediation using CVSS, EPSS, CISA KEV, Microsoft Defender, Qualys, and Tenable.
• Build automation using PowerShell, Azure Automation, Ansible/AWX, and integrate with ServiceNow.
• Lead zero-day vulnerability response and emergency remediation.
• Define SLAs, KPIs, MTTR, executive dashboards, and governance processes.
• Mentor engineering teams and collaborate with Infrastructure, Cloud, Security, and DevOps teams.

Required Skills

• 8+ years in Vulnerability & Patch Management.
• 34 years in a Lead/Architect role.
• Robust expertise in
• SCCM/MECM
• Azure Update Manager
• WSUS
• Microsoft Intune
• Patch My PC
• Microsoft Defender for Cloud & Endpoint
• Qualys or Tenable
• ServiceNow
• Azure Policy & Azure Automation
• PowerShell (Python/Bash is a plus)
• Azure-first hybrid infrastructure
• Working knowledge of AWS Inspector and GCP Security Command Center.

Preferred Certifications

• AZ-104 / AZ-500 / MD-102
• CISSP / CISM / CCSP
• Qualys or Tenable Certifications
• ITIL Foundation

Good to Have

• SOAR & AI-assisted security workflows
• NIST, CIS, ISO 27001, PCI-DSS
• CMDB & Asset Management
• Kubernetes, Docker, IaC Security (Checkov/Terrascan) .