Vulnerability & Patch Management Engineer

Vulnerability Management Manage end-to-end vulnerability assessment and remediation activities across servers, databases, applications, and cloud environments. Review vulnerability scan results and prioritize remediation based on risk and business impact. Track vulnerabilities to closure and ensure remediation within defined SLAs. Validate remediation and maintain accurate vulnerability records. Patch Management Monitor and enforce patch compliance across Windows, Linux, databases, and applications. Coordinate with Infrastructure and Application teams to ensure timely deployment of security patches. Track patch exceptions and ensure appropriate approvals and risk acceptance. Monitor patch compliance metrics and identify gaps. EOL / EOS Lifecycle Management Maintain an inventory of End-of-Life (EOL) and End-of-Support (EOS) systems. Drive upgrade or replacement plans for unsupported technologies. Assess risks associated with unsupported systems and recommend mitigation measures. Risk & Compliance Support internal, external, and regulatory audits. Ensure compliance with organizational security policies and regulatory requirements (RBI, ISO 27001, etc.). Track remediation of audit observations related to vulnerabilities and patching. Reporting & Governance Prepare vulnerability, patch compliance, and EOL/EOS dashboards and reports. Present security metrics and risk posture to management. Identify recurring issues and recommend process improvements. Stakeholder Coordination Coordinate with Infrastructure, Cloud, Database, Network, and Application teams to drive remediation activities. Escalate critical issues and overdue vulnerabilities as required. Provide guidance on vulnerability remediation and patch prioritization. Vulnerability Management Manage end-to-end vulnerability assessment and remediation activities across servers, databases, applications, and cloud environments. Review vulnerability scan results and prioritize remediation based on risk and business impact. Track vulnerabilities to closure and ensure remediation within defined SLAs. Validate remediation and maintain accurate vulnerability records. Patch Management Monitor and enforce patch compliance across Windows, Linux, databases, and applications. Coordinate with Infrastructure and Application teams to ensure timely deployment of security patches. Track patch exceptions and ensure appropriate approvals and risk acceptance. Monitor patch compliance metrics and identify gaps. EOL / EOS Lifecycle Management Maintain an inventory of End-of-Life (EOL) and End-of-Support (EOS) systems. Drive upgrade or replacement plans for unsupported technologies. Assess risks associated with unsupported systems and recommend mitigation measures. Risk & Compliance Support internal, external, and regulatory audits. Ensure compliance with organizational security policies and regulatory requirements (RBI, ISO 27001, etc.). Track remediation of audit observations related to vulnerabilities and patching. Reporting & Governance Prepare vulnerability, patch compliance, and EOL/EOS dashboards and reports. Present security metrics and risk posture to management. Identify recurring issues and recommend process improvements. Stakeholder Coordination Coordinate with Infrastructure, Cloud, Database, Network, and Application teams to drive remediation activities. Escalate critical issues and overdue vulnerabilities as required. Provide guidance on vulnerability remediation and patch prioritization.