Sr. Engineer, Enterprise Patch & Vulnerability Management

Berkley Technology Services LLC; Manassas (VA); Presencial; USD 90.000 - 128.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health, Dental, Vision benefits

Life and Disability coverage

401(k) and Profit-Sharing

Descripción de la vacante

Berkley Technology Services LLC (BTS) in the United States is seeking a Sr. Engineer, Enterprise Patch & Vulnerability Management to lead VIPR, the enterprise patch and vulnerability remediation lifecycle across services, apps, platforms, and infrastructure.

You will coordinate with BTS technology teams, Cybersecurity, Change Management, and operating units to ensure timely remediation per SLAs. The role requires deep technical breadth, strong analytical skills, and collaboration across teams to

Formación

• Bachelor's degree or equivalent in IT, cybersecurity, CS or related field.
• Equivalent experience and/or alternative qualifications will be considered.
• 5+ years of technical experience.
• 3+ years hands-on in enterprise patch management, vulnerability remediation, or infrastructure operations.
• Experience leading technical execution of change across platforms.
• Hands-on experience with patch and vulnerability tooling.
• Experience applying AI, analytics, or automation to operations.
• Working knowledge of public cloud platforms, data, DevOps, SRE, and cybersecurity practices.

Responsabilidades

• Lead technical planning and execution of patch-related changes enterprise-wide.
• Leverage AI-enabled tools to analyze vulnerability data and prioritize remediation.
• Review and manage patch exception requests with risk assessment.
• Act as escalation point for patch-related incidents and failed deployments.
• Provide technical direction to offshore execution pod.
• Drive remediation of high/medium/low vulnerabilities across devices.
• Influence code changes to remediate vulnerabilities with product owners.
• Ensure post-patch validation and evidence collection; enhance automation.
• Develop runbooks and continuous improvement of patching processes.
• Produce management reports on patch compliance and SLA adherence.

Conocimientos

Technical experience

Patch management

AI/automation tools

Incident management

SRE/DevOps awareness

Educación

Bachelor's Degree in IT, Cybersecurity, CS or Information Systems

Herramientas

Patch management tooling

AI analytics tools

Public cloud knowledge

Descripción del empleo

Company Details

Company URL: https://www.berkleytechnologyservices.com/

Company URL: https://www.berkleytechnologyservices.com/

Berkley Technology Services (BTS) is the dynamic technology solution for W. R. Berkley Corporation, a Fortune 500 Commercial Lines Insurance Company. With key locations in Urbandale, IA and Wilmington, DE, BTS provides innovative and customer-focused IT solutions to the majority of WRBC’s 60+ operating units across the globe. BTS’s wide reach ensures that ideas and opinions are considered at every level of the organization to guarantee we find the best solutions possible.

Driven by a commitment to collaboration, BTS acts as consultants to our customers and Operating Units by providing comprehensive solutions that not only address the challenge at hand but proactively plan for the What’s Next in our industry and beyond.

With a culture centered on innovation and entrepreneurial spirit, BTS stands as a community of technology leaders with eyes toward the future -- leaders who truly care about growing not only their team members, but themselves , and take pride in their employees who shine. BTS offers endless ways to get involved and have the chance to grow your career into a wide range of roles you’d never known existed. Come join us as we push forward into the future of industry leading technological solutions.

Berkley Technology Services: Right Team, Right Technology, Simple and Secure.

The Company is an equal employment opportunity employer .

Responsibilities

The Sr. Engineer, Enterprise Patch & Vulnerability Management serves as the technical engineering lead for VIPR (Vulnerability Incident Prevention & Remediation), the enterprise capability accountable for the patch and vulnerability remediation lifecycle across services, applications, platforms, and infrastructure. Reporting to the Sr. Manager, Enterprise Patch & Vulnerability Management, this role leads the technical planning, orchestration, and execution of patch-related changes and partners with BTS technology teams, Cybersecurity, Service Management, Change Management, Application Support, and Operating Unit Technology organizations to ensure patches, vulnerabilities, hardening items, and posture management findings are remediated in a timely manner aligned with established service level agreements (SLAs).

The role is accountable for technical change orchestration and execution, AI-based vulnerability and patch analysis, exception review, and incident escalation. Success requires deep technical breadth across enterprise platforms, strong analytical and troubleshooting skills, operational discipline, and the ability to collaborate with and influence technical teams without direct authority.

Key Functions Include But Are Not Limited To

• Technical Lead - Change Orchestration & Execution: Serve as the technical lead for patch-related change orchestration and execution across the enterprise. Build and sequence automated deployment plans, maintenance windows, dependencies, and rollback procedures; prepare and submit change records; and lead technical execution and bridge coordination during enterprise maintenance events. Coordinate remediation across products onto shared maintenance windows so that systems are touched once rather than repeatedly, reducing end-user disruption and change collisions.


• AI-Based Vulnerability & Patch Analysis: Leverage AI-enabled tools, analytics, and automation to analyze vulnerability scan data, threat intelligence, and patch release information; correlate findings to assets and service owners; predict deployment risk and service impact; identify remediation trends, recurring failures, and root causes; and produce data-driven prioritization recommendations. Ensure AI-generated outputs are validated and used in alignment with BTS security, data, and responsible AI standards.


• Exception Review & Risk Validation: Perform technical review of patch and vulnerability exception requests, validating business justification, compensating controls, residual risk, and remediation timelines. Provide technical recommendations to the Sr. Manager and Cybersecurity, track exceptions to expiration, and ensure exceptions are re-evaluated and closed in alignment with governance expectations.


• Incident Escalation & Response: Act as the escalation point for patch-related incidents, failed deployments, and service degradation following maintenance activities. Triage issues, engage appropriate resolver groups, coordinate rollback or remediation actions, elevate critical issues to technology leadership, and participate in post-incident and problem management reviews to prevent recurrence.


• Offshore Execution Pod Technical Direction: Provide day-to-day technical direction to the offshore execution pod, including remediation wave planning and handoffs, automated testing execution, ticket queue prioritization, evidence quality, and off-hours execution readiness; review pod work for accuracy and completeness.


• Vulnerability Remediation Execution: Partner with teams to drive technical remediation of critical, high, medium, and low vulnerabilities, hardening items, and posture management findings across every device on the network within established SLAs.


• Code Remediation Influence & Enablement: Partner with product owners to influence, prioritize, and drive code changes required to remediate vulnerabilities. Champion and leverage AI-based tools to facilitate code analysis, development of remediation recommendations, and validation of proposed fixes, working with product owners to drive implementation within established remediation SLAs.


• Service Validation and Post-Patch Checkout: Lead tiered service health validation following remediation — from enterprise up/downs to basic and comprehensive automated validation — partnering with product owners and stakeholder teams who define what healthy looks like. Confirm operational readiness, capture remediation evidence, and implement new tests when disruption reveals gaps in coverage.


• Automation and Tooling: Partner with SRE and DevOps team, Platform Engineering, and product owners to design, build, and enhance automated checkout and validation, remediation orchestration, deployment pipelines, and evidence collection using enterprise tools and scripting.


• Reporting and Compliance Support: Review and analyze reporting prepared by the offshore execution pod on patch compliance, vulnerability aging, SLA adherence, deployment success rates, exception status, and incident trends, providing technical insight to support management and executive reporting.


• Documentation and Continuous Improvement: Develop and maintain technical runbooks, standard operating procedures, and knowledge articles; identify opportunities to improve patching reliability, reduce deployment risk, and increase automation coverage.

Qualifications

• Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related discipline.


• Equivalent experience and/or alternative qualifications will be considered.


• 5+ years of technical experience


• 3+ years of hands‑on experience in enterprise patch management, vulnerability remediation, systems engineering, or infrastructure operations


• Experience leading technical execution of enterprise change and maintenance activities across multiple platforms


• Hands‑on experience with patch and vulnerability tooling


• Experience applying AI, analytics, or automation tools to operational or security data


• Working knowledge of public cloud platforms and modern data, integration, platform engineering, DevOps, SRE, and cybersecurity practices.

Core Skills/Competencies

• Patch Management Engineering (P) - plans, sequences, and executes enterprise patch deployments safely and consistently.


• Vulnerability Management (P) - analyzes findings, prioritizes remediation, and drives SLA compliance.


• Change Orchestration & Execution (P) - leads technical change planning, implementation, validation, and rollback across platforms.


• AI and Data Analysis (P) - applies AI‑based tools and analytics to vulnerability, patch, and operational data to inform prioritization and decisions.


• Risk and Exception Analysis (P) - evaluates exposure, compensating controls, and residual risk to support exception decisions.


• Incident Management (P) - triages, escalates, and coordinates resolution of patch‑related incidents.


• Automation and Scripting (N) - improves deployment reliability, reporting, and evidence collection.

Additional Company Details

We do not accept unsolicited resumes from third party recruiting agencies or firms.

Benefits

• Base Salary Range: $90,000 - $127,600


• Benefits: Health, Dental, Vision, Life, Disability, Wellness, Paid Time Off, 401(k) and Profit-Sharing plans.

The actual salary for this position will be determined by a number of factors, including the scope, complexity and location of the role; the skills, education, training, credentials and experience of the candidate; and other conditions of employment.

Sponsorship Details

Sponsorship not Offered for this Role