Cyber Network Security Engineer

Vulnerability and Patch Management Engineer

PRINCIPAL DUTIES & RESPONSIBILITIES

· Collaborate with managed security service providers to optimize patch and vulnerability management tools, improving coverage and accuracy.

· Manage and enhance patching processes for Windows Servers, workstations, and cloud environments.

· Actively verify, test, and apply security patches across all systems.

· Conduct routine audits of servers and endpoints to ensure compliance with security standards and configuration guidelines.

· Develop and maintain PowerShell scripts to automate patching and remediation tasks.

· Maintain detailed documentation of patching procedures, system configurations, and change history.

· Lead vulnerability assessments and coordinate remediation efforts with IT and security teams.

· Provide escalation support for server and workstation-related issues.

· Ensure adherence to IT governance, policies, and change management procedures.

· Promote a culture of continuous improvement by identifying new risks and recommending mitigation strategies.

· Mentor and train junior team members on patching and vulnerability management practices.

· Assist in generating reports and metrics for management and board-level review.

JOB SPECIFICATIONS

· Bachelor's or Associate Degree in Computer Science, Cybersecurity, Computer Engineering, or related discipline.

· Minimum of 3 years of hands-on experience in patch management and vulnerability remediation.

· Strong experience with Windows Server environments, endpoint patching, and cloud platforms (e.g., Azure, AWS).

· Familiarity with container security and cloud-native security best practices.

· In-depth understanding of web-based threats and mitigation techniques.

· Proven track record of implementing risk reduction strategies.

· Proficient in PowerShell scripting and automation.

· Strong analytical and problem-solving skills with attention to detail.

· Excellent communication skills, with the ability to convey technical concepts to non-technical stakeholders.

· Relevant certifications (e.g., CompTIA Security , Microsoft Certified: Azure Security Engineer, CISSP) are a plus.