Vulnerability Assessment & Patch Management Engineer

About the Role

We are seeking a skilled Vulnerability Assessment & Patch Management Engineer with 3+ years of experience in identifying, assessing, and remediating security vulnerabilities across enterprise environments. The ideal candidate should have hands-on experience with vulnerability scanning tools, patch management solutions, operating systems, and security best practices Key Responsibilities:

• Perform regular vulnerability assessments on servers, endpoints, network devices, and cloud environments.
• Analyze vulnerability scan results, prioritize risks based on CVSS scores, and recommend remediation actions.
• Plan, test, and deploy security patches for Windows, Linux, and third-party applications.
• Coordinate with infrastructure and application teams to ensure timely vulnerability remediation.
• Track remediation progress and ensure compliance with organizational SLAs.
• Validate applied patches and perform post-remediation verification scans.
• Generate vulnerability and patch compliance reports for management and audit purposes.
• Support security audits and compliance initiatives such as ISO 27001, PCI DSS, and CIS benchmarks.
• Monitor security advisories, vendor bulletins, and emerging threats.
• Maintain documentation for vulnerability management processes and patch deployment activities Requirements Required Skills & Experience:
• Hands-on experience with vulnerability scanners such as Qualys, Tenable Nessus, Rapid7 InsightVM, or Microsoft Defender Vulnerability Management.
• Experience with patch management tools such as Microsoft SCCM/MECM, WSUS, Intune, Manage. Engine Endpoint Central, or Ivanti.
• Good understanding of CVSS, CVE, CWE, MITRE ATT&CK, and CIS Benchmarks.
• Knowledge of Windows and Linux administration.
• Familiarity with Active Directory, networking fundamentals, and cloud platforms (AWS/Azure/GCP) is an advantage.
• Basic scripting knowledge (Power. Shell, Bash, or Python) is preferred.
• Strong analytical, troubleshooting, and communication skills. Preferred Certifications:
• CompTIA Security+
• Qualys Certified Specialist
• Tenable Certified Professional
• CEH (Certified Ethical Hacker) Benefits Why Join St. Fox:
• Opportunity to work onsite at a leading customer location, enabling direct engagement with innovative projects.
• A collaborative and dynamic working environment focused on continuous learning and professional growth.
• Exposure to advanced technologies and ongoing training opportunities.
• Clear career progression pathways supported by experienced leadership.

What We Offer

• An opportunity to work in a rapidly growing company with potential for personal and professional growth.
• Opportunity to work in a rapidly growing company with potential for personal and professional growth.
• A collaborative and inclusive culture that values each employee’s contribution towards our goals.
• Competitive compensation package including attractive bonus structures and benefits How to Apply: Interested candidates should submit a detailed resume and a cover letter outlining their qualifications and experience relevant to the role applied for. Applications should be sent via our careers portal or to hr@stfox.com St. Fox is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.