Vulnerability & Patch Management Engineer

Vulnerability Management

 Manage end-to-end vulnerability assessment and remediation activities across servers, databases, applications, and cloud

environments.

 Review vulnerability scan results and prioritize remediation based on risk and business impact.

 Track vulnerabilities to closure and ensure remediation within defined SLAs.

 Validate remediation and maintain accurate vulnerability records.

Patch Management

 Monitor and enforce patch compliance across Windows, Linux, databases, and applications.

 Coordinate with Infrastructure and Application teams to ensure timely deployment of security patches.

 Track patch exceptions and ensure appropriate approvals and risk acceptance.

 Monitor patch compliance metrics and identify gaps.

EOL / EOS Lifecycle Management

 Maintain an inventory of End-of-Life (EOL) and End-of-Support (EOS) systems.

 Drive upgrade or replacement plans for unsupported technologies.

 Assess risks associated with unsupported systems and recommend mitigation measures.

Risk & Compliance

 Support internal, external, and regulatory audits.

 Ensure compliance with organizational security policies and regulatory requirements (RBI, ISO 27001, etc.).

 Track remediation of audit observations related to vulnerabilities and patching.

Reporting & Governance

 Prepare vulnerability, patch compliance, and EOL/EOS dashboards and reports.

 Present security metrics and risk posture to management.

 Identify recurring issues and recommend process improvements.

Stakeholder Coordination

 Coordinate with Infrastructure, Cloud, Database, Network, and Application teams to drive remediation activities.

 Escalate critical issues and overdue vulnerabilities as required.

 Provide guidance on vulnerability remediation and patch prioritization.