Vulnerability Assessment & Patch Management Engineer

About the Role: We are seeking a skilled Vulnerability Assessment & Patch Management Engineer with 3+ years of experience in identifying, assessing, and remediating security vulnerabilities across enterprise environments. The ideal candidate should have hands-on experience with vulnerability scanning tools, patch management solutions, operating systems, and security best practices Key Responsibilities: • Perform regular vulnerability assessments on servers, endpoints, network devices, and cloud environments. • Analyze vulnerability scan results, prioritize risks based on CVSS scores, and recommend remediation actions. • Plan, test, and deploy security patches for Windows, Linux, and third-party applications. • Coordinate with infrastructure and application teams to ensure timely vulnerability remediation. • Track remediation progress and ensure compliance with organizational SLAs. • Validate applied patches and perform post-remediation verification scans. • Generate vulnerability and patch compliance reports for management and audit purposes. • Support security audits and compliance initiatives such as ISO 27001, PCI DSS, and CIS benchmarks. • Monitor security advisories, vendor bulletins, and emerging threats. • Maintain documentation for vulnerability management processes and patch deployment activities Requirements Required Skills & Experience: • Hands-on experience with vulnerability scanners such as Qualys, Tenable Nessus, Rapid7 InsightVM, or Microsoft Defender Vulnerability Management. • Experience with patch management tools such as Microsoft SCCM/MECM, WSUS, Intune, ManageEngine Endpoint Central, or Ivanti. • Good understanding of CVSS, CVE, CWE, MITRE ATT&CK, and CIS Benchmarks. • Knowledge of Windows and Linux administration. • Familiarity with Active Directory, networking fundamentals, and cloud platforms (AWS/Azure/GCP) is an advantage. • Basic scripting knowledge (PowerShell, Bash, or Python) is preferred. • Strong analytical, troubleshooting, and communication skills. Preferred Certifications: • CompTIA Security+ • Qualys Certified Specialist • Tenable Certified Professional • CEH (Certified Ethical Hacker) Benefits Why Join St. Fox: • Opportunity to work onsite at a leading customer location, enabling direct engagement with innovative projects. • A collaborative and dynamic working environment focused on continuous learning and professional growth. • Exposure to advanced technologies and ongoing training opportunities. • Clear career progression pathways supported by experienced leadership. What We Offer: • An opportunity to work in a rapidly growing company with potential for personal and professional growth. • Opportunity to work in a rapidly growing company with potential for personal and professional growth. • A collaborative and inclusive culture that values each employee’s contribution towards our goals. • Competitive compensation package including attractive bonus structures and benefits How to Apply: Interested candidates should submit a detailed resume and a cover letter outlining their qualifications and experience relevant to the role applied for. Applications should be sent via our careers portal or to hr@stfox.com St. Fox is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.