Principal Security Patch Management Engineer (Bengaluru)

Position: Principal Security Patch Management Engineer (Endpoint) Shift: 2:00 PM 10:00 PM IST Experience: 710 years overall; 5+ years in Endpoint Vulnerability Management Mandatory Skills Endpoint Vulnerability Management Endpoint Patch Management Microsoft Intune JAMF Microsoft Defender Automox (preferred) PowerShell Windows & Mac Endpoint Management Valuable-to-Have Skills Python Bash Scripting Qualys AWS Cyber Essentials Audit Experience Additional Acceptable Tools Patch My PC Other enterprise patch management tools ------------------------------------------------------------------------------------------------------ Job Summary We are seeking an experienced Principal Security Patch Management Engineer to lead the enterprise Endpoint Vulnerability Remediation and Patch Management program. The role is responsible for developing and executing patch management strategies, reducing organizational cyber risk, driving automation, and ensuring timely remediation of security vulnerabilities across endpoints, cloud infrastructure, and enterprise applications. As a technical leader, you will collaborate with Security Operations, Infrastructure, Cloud Engineering, DevOps, Application Owners, and Compliance teams to establish governance, optimize patch deployment processes, and improve the organizations overall security posture. Key Responsibilities - Lead the enterprise Endpoint Patch and Vulnerability Management program. - Develop and maintain patch management policies, standards, and operational procedures. - Define patch prioritization based on CVSS scores, exploitability, threat intelligence, business criticality, and risk. - Manage operating system and application patching across Windows, macOS, virtual machines, cloud platforms, firmware, and third-party software. - Coordinate emergency patch deployments for zero-day vulnerabilities and critical/high-severity security incidents. - Integrate vulnerability scanning tools with patch management platf .