Vulnerability Assessment & Patch Management Engineer

Saint Fox Consultancy (P) Ltd.; Bengaluru; On-site; INR 1,200,000 - 2,400,000; Full time

Benefits offered by this job

Onsite client sites

Professional growth & training

Exposure to ISO 27001, PCI DSS, CIS

Job summary

Saint Fox Consultancy Private Limited in Bengaluru seeks a Vulnerability Assessment & Patch Management Engineer with 3+ years of experience to identify, assess, and remediate security vulnerabilities across enterprise environments.

You will work with scanners like Qualys, Nessus, and InsightVM, and patch tools such as SCCM/MECM, WSUS, and Intune to plan, test, and deploy patches on Windows, Linux, and cloud platforms. Strong analytical and scripting skills are essential.

Qualifications

• 3+ years of experience in vulnerability assessment and patch management.
• Hands-on experience with vulnerability scanners and patch management tools.
• Strong understanding of CVSS, CVE, CWE, MITRE ATT&CK, and CIS Benchmarks.
• Knowledge of Windows and Linux administration.
• Familiarity with Active Directory, networking basics, and cloud platforms (AWS/Azure/GCP).
• Basic scripting knowledge (PowerShell, Bash, Python).
• Strong analytical, troubleshooting, and communication skills.

Responsibilities

• Perform regular vulnerability assessments on servers, endpoints, network devices, and cloud environments.
• Analyze scan results, prioritize risks based on CVSS scores, and recommend remediation actions.
• Plan, test, and deploy security patches for Windows, Linux, and third‑party apps.
• Coordinate with infra and apps teams to ensure timely remediation.
• Track remediation progress and ensure SLA compliance.
• Validate patches and perform post-remediation verification scans.
• Generate vulnerability and patch compliance reports for management and audits.
• Support ISO 27001, PCI DSS, CIS benchmarks compliance.

Skills

CVSS/CVE/CWE

MITRE ATT&CK

CIS Benchmarks

Windows administration

Linux administration

Active Directory

Networking fundamentals

Cloud platforms (AWS/Azure/GCP)

Scripting (PowerShell/Bash/Python)

Analytical thinking & communication

Tools

Qualys

Nessus

Rapid7 InsightVM

Microsoft Defender Vulnerability Management

SCCM/MECM

WSUS

Intune

ManageEngine Endpoint Central

Ivanti

Job description

Saint Fox Consultancy Private Limited | Full time

Vulnerability Assessment & Patch Management Engineer

About the Role: We are seeking a skilled Vulnerability Assessment & PatchManagement Engineer with 3+ years of experience in identifying, assessing,and remediating security vulnerabilities across enterprise environments. Theideal candidate should have hands-on experience with vulnerability scanningtools, patch management solutions, operating systems, and security bestpractices

Key Responsibilities:

• Perform regular vulnerability assessments on servers, endpoints, networkdevices, and cloud environments.
• Analyze vulnerability scan results, prioritize risks based on CVSS scores,and recommend remediation actions.
• Plan, test, and deploy security patches for Windows, Linux, and third-partyapplications.
• Coordinate with infrastructure and application teams to ensure timelyvulnerability remediation.
• Track remediation progress and ensure compliance with organizationalSLAs.
• Validate applied patches and perform post-remediation verification scans.
• Generate vulnerability and patch compliance reports for managementand audit purposes.
• Support security audits and compliance initiatives such as ISO 27001, PCIDSS, and CIS benchmarks.
• Monitor security advisories, vendor bulletins, and emerging threats.
• Maintain documentation for vulnerability management processes andpatch deployment activities

Requirements

Required Skills & Experience:

• Hands-on experience with vulnerability scanners such as Qualys, TenableNessus, Rapid7 InsightVM, or Microsoft Defender VulnerabilityManagement.
• Experience with patch management tools such as Microsoft SCCM/MECM,WSUS, Intune, ManageEngine Endpoint Central, or Ivanti.
• Good understanding of CVSS, CVE, CWE, MITRE ATT&CK, and CISBenchmarks.
• Knowledge of Windows and Linux administration.
• Familiarity with Active Directory, networking fundamentals, and cloudplatforms (AWS/Azure/GCP) is an advantage.
• Basic scripting knowledge (PowerShell, Bash, or Python) is preferred.
• Strong analytical, troubleshooting, and communication skills.

Preferred Certifications:

• CEH (Certified Ethical Hacker)

Why Join St. Fox:

• Opportunity to work onsite at a leading customer location, enabling directengagement with innovative projects.
• A collaborative and dynamic working environment focused on continuouslearning and professional growth.
• Exposure to advanced technologies and ongoing training opportunities.
• Clear career progression pathways supported by experienced leadership.

What We Offer:

• An opportunity to work in a rapidly growing company with potential forpersonal and professional growth.
• Opportunity to work in a rapidly growing company with potential forpersonal and professional growth.
• A collaborative and inclusive culture that values each employee’scontribution towards our goals.
• Competitive compensation package including attractive bonus structuresand benefits

St. Fox is an Equal Opportunity Employer. We celebrate diversity and arecommitted to creating an inclusive environment for all employees.