Patch Engineering Lead

This is a fully remote position, open to applicants in United States.

📋 Description

• Perform routine vulnerability assessments and scans across networks, systems, and applications.

• Create, test, and implement patches and updates in a timely and controlled fashion.

• Reduce disruptions to business operations during the patch deployment process.

• Work alongside IT and security teams to prioritize vulnerabilities based on risk and impact.

• Oversee vulnerability remediation efforts.

• Maintain documentation of patching activities, vulnerability discoveries, and remediation statuses for compliance and audit purposes.

• Stay updated on security advisories, vendor notifications, and threat intelligence sources.

• Assist in formulating and enforcing patch management policies, procedures, and best practices.

• Provide technical support and guidance regarding vulnerability mitigation and patch deployment.

• Identify, analyze, and fix vulnerabilities utilizing scanning tools and patch management platforms.

• Communicate and collaborate with clients and internal teams regarding security priorities.

• Engage in a typical hiring process that includes application screening, a 20-minute introductory screening, a technical interview, a VP-level interview, and reference checks.

⛳️ Requirements

• Demonstrated experience in patch management and vulnerability assessment within a professional IT or cybersecurity setting.

• Familiarity with vulnerability scanning tools such as Nessus, Qualys, or Rapid7.

• Strong knowledge of Windows, Linux, and macOS operating systems along with patch deployment processes.

• Understanding of network protocols, security principles, and common vulnerabilities and exposures (CVEs).

• Experience with automated patch management solutions like Microsoft SCCM, WSUS, or third-party patching tools.

• Knowledge of compliance frameworks such as NIST, HIPAA, or PCI-DSS.

• Background in a professional services or consulting role within the technology sector.

• Proficient scripting skills in PowerShell or Python.

• Expertise in patching server operating systems and hypervisors, including Windows Server, Linux, and VMware/ESXi.

• Experience in patching network and infrastructure firmware for firewalls, switches, routers, and out-of-band management.

• Familiarity with storage patching and firmware for NAS, SAN, and backup systems.

• Practical experience with Automox, N-able, Intune, and LogicMonitor.

• Knowledge of Tenable, Qualys, and Rapid7 for vulnerability scanning and remediation.

• Scripting abilities using PowerShell, Python, or Bash.

• Working knowledge of AWS SSM, Azure Update Manager, and GCP cloud patch management.

• Familiarity with ITIL change management and ITSM/PSA tools.

• MSP multi-tenant experience managing simultaneous patch cycles across clients.

• Relevant certifications such as CompTIA Security+, CISSP, or CEH.

• Availability Monday through Friday during local business hours.

• NexusTek participates in E-Verify for all US employees.

🏝️ Benefits

• Four weeks of accrued PTO annually.

• Seven paid national holidays.

• Options for medical, dental, and vision coverage.

• Company-paid life insurance.

• Company-paid short- and long-term disability insurance.

• Optional critical illness and accident benefits.

• Optional Legal Shield and identity theft protection.

• Discretionary annual 401k matching plan.

• Generous employee referral bonus program.

• Employee Assistance Program.

• Access to over 90,000+ courses through ADP My Learning.

• StandOut employee engagement tools.

• Eligibility to apply for a Pluralsight license.

• Eligibility to apply for NexusTek Technical Academy or Leadership Academy.

• Opportunity to work from home.

• Virtual interview process.