Vulnerability & Patch Management Engineer

TechDefence Labs; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

TechDefence Labs in Mumbai invites a Vulnerability & Patch Management Engineer to lead end-to-end vulnerability assessment and remediation across servers, databases, applications, and cloud environments.

The role focuses on reviewing scan results, prioritizing remediation by risk, tracking closure within SLAs, and coordinating patch deployment with Infrastructure and App teams. You will support audits and ensure RBI, ISO 27001 compliance, with dashboards and governance reporting.

Qualifications

• Experience managing vulnerability assessments across multi-platform environments.
• Experience deploying and tracking patches across Windows, Linux, databases, apps.
• Familiarity with regulatory audits and security controls (RBI, ISO 27001) is a plus.

Responsibilities

• Lead end-to-end vulnerability assessment and remediation across servers, databases, apps and cloud.
• Review scan results, prioritize remediation by risk and business impact.
• Track vulnerabilities to closure and ensure remediation within defined SLAs.
• Monitor patch compliance across Windows, Linux, databases and applications; coordinate with Infra/Apps teams.

Skills

Vulnerability management

Patch management

Audit support

Governance reporting

Stakeholder coordination

Job description

Vulnerability & Patch Management Engineer

7-11

Full-Time

Vulnerability Management

Manage end-to-end vulnerability assessment and remediation activities across servers, databases, applications, and cloud

Review vulnerability scan results and prioritize remediation based on risk and business impact.

Track vulnerabilities to closure and ensure remediation within defined SLAs.

Validate remediation and maintain accurate vulnerability records.

Patch Management

Monitor and enforce patch compliance across Windows, Linux, databases, and applications.

Coordinate with Infrastructure and Application teams to ensure timely deployment of security patches.

Track patch exceptions and ensure appropriate approvals and risk acceptance.

Monitor patch compliance metrics and identify gaps.

EOL / EOS Lifecycle Management

Maintain an inventory of End-of-Life (EOL) and End-of-Support (EOS) systems.

Drive upgrade or replacement plans for unsupported technologies.

Assess risks associated with unsupported systems and recommend mitigation measures.

Support internal, external, and regulatory audits.

Ensure compliance with organizational security policies and regulatory requirements (RBI, ISO 27001, etc.).

Track remediation of audit observations related to vulnerabilities and patching.

Reporting & Governance

Prepare vulnerability, patch compliance, and EOL/EOS dashboards and reports.

Present security metrics and risk posture to management.

Identify recurring issues and recommend process improvements.

Stakeholder Coordination

Coordinate with Infrastructure, Cloud, Database, Network, and Application teams to drive remediation activities.

Escalate critical issues and overdue vulnerabilities as required.

Provide guidance on vulnerability remediation and patch prioritization.