Patch Engineering Lead

About the Role:

The Patch Engineering Lead plays a critical role in maintaining the security and integrity of an organization's IT infrastructure by managing and executing patch management and vulnerability remediation processes. This position ensures that all systems, applications, and devices are up to date with the latest security patches to protect against potential threats and exploits. The role involves continuous monitoring, assessment, and prioritization of vulnerabilities to minimize risk exposure and support compliance with industry standards and regulations. The specialist collaborates closely with IT teams, security analysts, and management to develop and implement effective patching strategies and vulnerability management programs. Ultimately, this role is essential in safeguarding organizational assets and data by proactively addressing security weaknesses before they can be exploited by malicious actors.
Location and Schedule:
Work from home, United States

Monday through Friday local business hours
You know how to:

- Conduct regular vulnerability assessments and scans across the organization's network, systems, and applications to identify security weaknesses.

- Develop, test, and deploy patches and updates in a timely and controlled manner to ensure minimal disruption to business operations.

- Collaborate with IT and security teams to prioritize vulnerabilities based on risk and impact, and coordinate remediation efforts accordingly.

- Maintain detailed documentation of patching activities, vulnerability findings, and remediation status to support audit and compliance requirements.

- Monitor security advisories, vendor notifications, and threat intelligence sources to stay informed about emerging vulnerabilities and patch releases.

- Assist in the development and enforcement of patch management policies, procedures, and best practices.

- Provide technical guidance and support to other teams regarding vulnerability mitigation and patch deployment challenges.

- Effectively identify, analyze, and remediate vulnerabilities by leveraging vulnerability scanning tools and patch management platforms.

- Communicate and collaborate with clients and internal teams to ensure alignment on security priorities.

Minimum Qualifications:

- Proven experience in patch management and vulnerability assessment within a professional IT or cybersecurity environment.

- Familiarity with common vulnerability scanning tools such as Nessus, Qualys, or Rapid7.

- Strong understanding of operating systems (Windows, Linux, macOS) and patch deployment processes.

- Knowledge of network protocols, security principles, and common vulnerabilities and exposures (CVEs).

Preferred Qualifications:

- Experience with automated patch management solutions like Microsoft SCCM, WSUS, or third-party patching tools.

- Understanding of regulatory compliance frameworks such as NIST, HIPAA, or PCI-DSS.

- Experience working in a professional services or consulting environment within the technology sector.

- Strong scripting skills (e.g., PowerShell, Python) to automate patching and vulnerability management tasks.

Technology proficiencies:

- Proficient patching server OSs and hypervisors (Windows Server, Linux, VMware/ESXi), including maintenance windows and rollback.

- Experience patching network/infrastructure firmware (firewalls, switches, routers, out-of-band management).

- Familiar with storage patching/firmware (NAS, SAN, backups) without disrupting availability.

- Hands-on with patch/RMM and observability tools (Automox, N-able, Intune, LogicMonitor).

- Experience with vulnerability scanning/remediation (Tenable, Qualys, Rapid7), prioritized by risk.

- Scripting skills (PowerShell, Python, Bash) for patch automation and reporting.

- Working knowledge of cloud patch management (AWS SSM, Azure Update Manager, GCP).

- Familiar with ITIL change management and ITSM/PSA tools.

- MSP multi-tenant experience managing concurrent pa