Vulnerability Assessment & Patch Management Engineer

About the Role: We are seeking a skilled Vulnerability Assessment & Patch Management Engineer with 3+ years of experience in identifying, assessing, and remediating security vulnerabilities across enterprise environments. The ideal candidate should have hands-on experience with vulnerability scanning tools, patch management solutions, operating systems, and security best practices

Key Responsibilities:

• Perform regular vulnerability assessments on servers, endpoints, network devices, and cloud environments.

• Analyze vulnerability scan results, prioritize risks based on CVSS scores, and recommend remediation actions.

• Plan, test, and deploy security patches for Windows, Linux, and third-party applications.

• Coordinate with infrastructure and application teams to ensure timely vulnerability remediation.

• Track remediation progress and ensure compliance with organizational SLAs.

• Validate applied patches and perform post-remediation verification scans.

• Generate vulnerability and patch compliance reports for management and audit purposes.

• Support security audits and compliance initiatives such as ISO 27001, PCI DSS, and CIS benchmarks.

• Monitor security advisories, vendor bulletins, and emerging threats.

• Maintain documentation for vulnerability management processes and patch deployment activities

Requirements

Required Skills & Experience:

• Hands-on experience with vulnerability scanners such as Qualys, Tenable Nessus, Rapid7 InsightVM, or Microsoft Defender Vulnerability Management.

• Experience with patch management tools such as Microsoft SCCM/MECM, WSUS, Intune, ManageEngine Endpoint Central, or Ivanti.

• Good understanding of CVSS, CVE, CWE, MITRE ATT&CK, and CIS Benchmarks.

• Knowledge of Windows and Linux administration.

• Familiarity with Active Directory, networking fundamentals, and cloud platforms (AWS/Azure/GCP) is an advantage.

• Basic scripting knowledge (PowerShell, Bash, or Python) is preferred.

• Strong analytical, troubleshooting, and communication skills.

Preferred Certifications:

• CompTIA Security+

• Qualys Certified Specialist

• Tenable Certified Professional

• CEH (Certified Ethical Hacker)

Benefits

Why Join St. Fox:

• Opportunity to work onsite at a leading customer location, enabling direct engagement with innovative projects.

• A collaborative and dynamic working environment focused on continuous learning and professional growth.

• Exposure to advanced technologies and ongoing training opportunities.

• Clear career progression pathways supported by experienced leadership.

What We Offer:

• An opportunity to work in a rapidly growing company with potential for personal and professional growth.

• Opportunity to work in a rapidly growing company with potential for personal and professional growth.

• A collaborative and inclusive culture that values each employee's contribution towards our goals.

• Competitive compensation package including attractive bonus structures and benefits

How to Apply:

Interested candidates should submit a detailed resume and a cover letter outlining their qualifications and experience relevant to the role applied for. Applications should be sent via our careers portal or to hr@stfox.com

St. Fox is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.