BigFix Patch Lead – Enterprise Vulnerability Remediation

Cyber Shell, LLC; Washington (District of Columbia); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health benefits

Life & AD&D insurance

Disability insurance

401(k) plan

Holidays and leave

Certification exams

Tuition reimbursement

Job summary

Cyber Shell, LLC seeks a BigFix Administrator to join a three-person vulnerability remediation surge team supporting a federal agency in downtown Washington, DC. The role focuses on enterprise patching, fixlet authoring, baselines, and remediation reporting to federal audit standards.

On-site in DC five days a week for the first two months, with potential limited telework thereafter. You will deploy patches with BigFix and Intune, coordinate with the vulnerability lead, and document actions in

Qualifications

• Hands-on enterprise patching across environments using BigFix and Intune.
• Author BigFix fixlets and baselines using Relevance language and produce remediation reporting.
• Analyze vulnerabilities and map findings to remediation actions (Tenable/Nessus, Qualys).
• Coordinate with federal vulnerability lead on assignment, tracking, prioritization, and sequencing.
• Remediate third-party software vulnerabilities (Adobe, Java, browsers).
• Document remediation actions in ServiceNow to audit standards.
• On-site in Washington, DC five days per week for the first two months.

Responsibilities

• Develop compensating controls or temporary mitigations when immediate patching poses operational risk.
• Document remediation actions and evidence packages for audits.
• Support follow-up vulnerability scans to verify patching.
• Follow agency change-control processes and contribute to weekly status reports.

Skills

BigFix patching

Intune management

Vulnerability management

Relevance language

Baseline management

Reporting

GPO

DISA STIGs

Third-party patching

Incident/change coordination

Ansible (preferred)

Tools

IBM BigFix

Microsoft Intune

Tenable Nessus

Qualys

ServiceNow ITSM

WSUS/SCCM

Job description

Cyber Shell, LLC seeks a BigFix Administrator to join a three-person vulnerability remediation surge team supporting a federal agency in downtown Washington, DC. The role focuses on enterprise patching, fixlet authoring, baselines, and remediation reporting to federal audit standards.

On-site in DC five days a week for the first two months, with potential limited telework thereafter. You will deploy patches with BigFix and Intune, coordinate with the vulnerability lead, and document actions in