Principal Patching and Vulnerability Consultant

The Judge Group; Chicago (IL); Hybrid; USD 130,000 - 170,000; Full time

Job summary

The Judge Group is seeking a strategic leader to oversee enterprise patching and vulnerability management across hybrid environments, including on-premises and AWS cloud. You will partner with infrastructure, platform engineering, and security teams to strengthen cyber resilience and accelerate remediation.

Qualifications include 7+ years in vulnerability/patch management, a bachelor’s degree in CS/Engineering/IT, and CISSP or equivalent certification preferred.

Qualifications

• 7+ years in vulnerability or patch management, IT ops, or cybersecurity.
• Strong server, network, and cloud admin background in hybrid environments.
• Proven success leading enterprise remediation and cross-functional influence.
• Bachelor’s degree in CS/Engineering/IT or equivalent experience.
• CISSP or related credentials preferred.

Responsibilities

• Lead enterprise patch management and remediation programs across servers, networks, and cloud.
• Design workflows, automation strategies, and governance to improve effectiveness.
• Integrate Qualys and SVR to increase visibility and remediation efficiency.
• Develop patching strategies for rapid, risk-based remediation in 24/7 environments.
• Provide technical leadership across on-prem and AWS cloud ecosystems.
• Identify automation opportunities and drive security-focused operational improvements.
• Mentor cross-functional teams and promote knowledge sharing.

Skills

Vulnerability Management

Patch Lifecycle

Hybrid Infrastructure Security

Zero-Day Response

Automation & Workflows

Security Leadership

Cross-functional Collaboration

Cloud Security (AWS)

Education

Bachelor's degree in Computer Science, Engineering, or IT

CISSP or equivalent certification

Tools

Qualys

ServiceNow SVR

Job description

Serve as the strategic leader for enterprise-wide patching and vulnerability management initiatives across hybrid infrastructure environments, including on-premises systems and AWS cloud platforms. Partner closely with infrastructure, platform engineering, and security teams to strengthen the organization's cyber resilience, accelerate remediation efforts, and drive operational excellence.

Key Responsibilities:

• Lead and coordinate enterprise patch management and vulnerability remediation programs across server, network, and cloud environments, ensuring alignment, accountability, and consistent execution.
• Design and enhance workflows, automation strategies, and governance frameworks that improve vulnerability management effectiveness and streamline operations.
• Drive integration and optimization of security technologies, including Qualys and ServiceNow Security Vulnerability Response (SVR), to increase visibility, tracking, and remediation efficiency.
• Develop and mature patching strategies that support rapid, risk-based vulnerability remediation while maintaining stability in highly available, 24/7 production environments.
• Provide technical leadership across both traditional infrastructure and AWS cloud ecosystems, establishing consistent security and patching standards across all platforms.
• Identify opportunities for automation, process improvement, and innovation to reduce remediation timelines and strengthen overall operational security posture.
• Mentor and collaborate with cross-functional teams, fostering knowledge sharing, continuous learning, and a culture of security-focused operations.

Core Expertise:

• Vulnerability Management & Risk-Based Remediation
• Enterprise Patch Lifecycle Management
• Hybrid Infrastructure Security (On-Premises & AWS)
• Qualys Vulnerability Management
• ServiceNow Security Vulnerability Response (SVR)
• Zero-Day & Critical Vulnerability Response
• Security Automation & Workflow Optimization
• Cross-Functional Leadership & Stakeholder Management

Qualifications:

• 7+ years of experience in vulnerability management, patch management, IT operations, or cybersecurity.
• Strong background in server, network, and cloud administration with expertise in securing complex hybrid environments.
• Proven success leading enterprise remediation efforts and influencing cross-functional teams without direct authority.
• Bachelor's degree in Computer Science, Engineering, Information Technology, or equivalent experience.
• Industry certifications such as CISSP, ITIL, or related credentials preferred.