Title– Patch Engineer (Endpoint Vulnerability Analysis and Remediation)

Location – India . Shift 5 PM to 2 AM IST (M-F)

Position Summary
We are seeking a highly skilled Patch Engineer to join our Enterprise Patch Management and Vulnerability Remediation team. This role requires identifying, analyzing, testing, and deploying available software security updates for workstation and server Operating Systems , Third-party and Open-Source applications to reduce organizational cyber risk

The ideal candidate will have robust experience in workstation operating systems, vulnerability remediation, software composition analysis (SCA) scans, and Third-party Common Off the Shelf (COTS) software remediation. This position requires close collaboration with security, application teams, software vendors, and infrastructure teams to ensure vulnerabilities are remediated within established service level agreements (SLAs).

Top skills Required: Vulnerability analysis , deploy solution via Bigfix / MEMCM , App packaging

Experience with application packaging will be an advantage.

Key Responsibilities

- Analyze software composition analysis (SCA) vulnerability scan reports to identify vulnerable open-source libraries and third-party software components deployed across the enterprise assets
- Investigate reported vulnerabilities by validating affected software, installation paths, versions, dependencies, and business impact.
- Develop remediation plans to address vulnerabilities while minimizing operational risk and business disruption
- Research vendor security advisories, release notes, and remediation guidance to determine the appropriate software versions required to resolve identified software vulnerabilities
- Coordinate with software vendors to open support cases, validate fixes, obtain technical guidance, and resolve product-specific security issues if required




- Test software updates, patches, and new application versions in lower environments first to ensure functionality, compatibility, and security before enterprise deployment.
- Perform workstation / server operating system patching and support enterprise vulnerability remediation initiatives. Validate successful remediation by confirming vulnerabilities are no longer detected through follow-up scans and compliance reporting
- Document remediation activities, testing results, implementation procedures, known issues, and deployment recommendations
- Partner with Information Security, Vulnerability Management, Application Support, Desktop Engineering /Packaging, and Infrastructure teams to meet remediation timelines
- Monitor emerging security vulnerabilities, vendor advisories, and software lifecycle changes that could impact enterprise applications.
- Participate in incident response and urgent security patch deployments for critical and zero-day vulnerabilities

Required Qualifications

- Bachelor’s degree in computer science, Information Technology, Cybersecurity, or equivalent professional experience
- 7+ years of experience in enterprise patch management, endpoint engineering, application packaging, or vulnerability remediation
- Strong knowledge of Windows workstation and server operating systems and enterprise endpoint management
- Strong experience in patch compliance and endpoint management tools like BigFix , MEMCM




- Experience analyzing vulnerability reports from software composition analysis (SCA) tools and vulnerability scanners
- Solid understanding of open-source software components, third-party application security, Common Vulnerabilities and Exposures (CVEs), and software dependency management
- Experience with application packaging technologies such as MSI, MSIX, InstallShield, Admi Studio, BigFix Enterprise and Workstation + or similar packaging tools
- Experience deploying applications using enterprise management platforms such as BigFix, Microsoft Intune, MECM/Configuration Manager, or similar endpoint management solutions
- Strong troubleshooting and root cause analysis skills with the ability to identify affected software and installation locations
- Experience working with software vendors to resolve security vulnerabilities and validate remediation options.
- Strong experience working in MS excel with knowledge in excel formulas and reporting for large data set handling
- Excellent documentation, communication, and cross-functional collaboration skills.

Preferred Qualifications

- Package and deploy third-party application updates using enterprise software distribution tools like BigFix , MEMCM while following enterprise change management processes
- Exposure with vulnerability management platforms such as Qualys, Tenable, Rapid7, or Microsoft Defender Vulnerability Management
- Knowledge of scripting languages such as PowerShell or Python to automate packaging and remediation activities
- Experience supporting regulatory compliance requirements and vulnerability remediation SLAs
- Build effective partnerships with security teams, software vendors, and application owners to accelerate remediation and improve overall endpoint security.

Pay: ₹1,800,000.00 - ₹2,000,000.00 per year

Work Location: Remote

📌 Patch Engineer (Endpoint Vulnerability Analysis and Remediation) (India)
🏢 Digital iTechnology
📍 India