Job Summary

We are looking for a Windows Server Engineer with experience in Vulnerability Assessment and Penetration Testing (VAPT) remediation and Windows patch management. The candidate will be responsible for ensuring the security, compliance, and stability of Windows server infrastructure by managing vulnerability remediation, security patch deployment, and hardening activities across enterprise environments.

Key Responsibilities

Manage end-to-end Windows Server patching activities across development, test, and production environments.

Plan, schedule, deploy, and validate monthly Microsoft security updates and out-of-band patches.

Analyze VAPT reports generated from security scanning tools such as Qualys, Tenable, Rapid7, or Microsoft Defender Vulnerability Management.

Remediate operating system vulnerabilities within defined SLAs.

Coordinate with application owners and infrastructure teams to resolve security findings without impacting business services.

Perform Windows Server hardening in accordance with organizational security standards and CIS Benchmarks.

Validate successful vulnerability remediation through rescans and compliance reporting.

Investigate failed patches and implement appropriate remediation measures.

Monitor server health after patch deployment and resolve any issues arising from patch installation.

Maintain patch compliance dashboards and provide periodic reports to management.

Support security audits and compliance requirements by providing evidence of patching and vulnerability remediation.

Create and maintain standard operating procedures (SOPs), runbooks,



and technical documentation.

Participate in maintenance windows and planned weekend activities as required.

Collaborate with cybersecurity, infrastructure, and application teams to improve overall security posture.

Required Technical Skills

Robust administration experience with Windows Server 2012, 2016, 2019, and 2022.

Hands-on experience in Windows patch management.

Experience with vulnerability remediation based on VAPT findings.

Good understanding of Microsoft security updates and Windows security architecture.

Knowledge of CIS Benchmarks and Windows hardening practices.

Experience with patch management tools such as WSUS, MECM/SCCM, Azure Update Manager, or equivalent enterprise solutions.

Familiarity with vulnerability management tools such as Qualys, Tenable Nessus, Rapid7 InsightVM, or Microsoft Defender Vulnerability Management.

Experience with Active Directory, Group Policy, DNS, DHCP, and IIS administration.

Ability to troubleshoot patch installation failures and Windows operating system issues.

Good understanding of PowerShell scripting for automation and reporting.

- Working knowledge of VMware and Hyper-V environments is desirable.

Preferred Skills

Experience in Azure IaaS or hybrid cloud environments.

Knowledge of ITIL processes and ServiceNow.

Experience with automation tools such as PowerShell or Ansible.

Exposure to endpoint security and antivirus solutions.

- Basic knowledge of Linux server administration is an added advantage.

Interested candidate please share profile to [email protected]

📌 Windows compliance (Mumbai)
🏢 Wipro
📍 Mumbai