Security Professional – Vulnerability & Patch Management

About the role

The Security Professional will lead end‑to‑end vulnerability management, patch lifecycle, and application packaging for servers and workstations. You will ensure timely remediation of vulnerabilities through automated patching, packaging, and deployment across enterprise assets while maintaining compliance.

Key responsibilities

• Develop, customize, and validate MSI/MST/MSIX packages using AdminStudio, InstallShield, and ORCA.
• Convert legacy EXE installers into silent MSI/IntuneWin formats for streamlined deployment.
• Perform application discovery, dependency mapping, and compatibility testing for Windows 10/11 environments.
• Coordinate testing and deployment of packaged applications through SCCM and Intune.
• Lead the enterprise Vulnerability Management Program using Qualys VMDR, ensuring detection, prioritization, and remediation.
• Manage monthly patch cycles for Windows servers (SCCM) and workstations (Intune), validating Microsoft and third‑party patches before production rollout.
• Handle zero‑day vulnerability incidents with accelerated validation and rollout.
• Drive automation of vulnerability‑to‑patch correlation workflows using Python and PowerShell.

Required profile

• Strong knowledge of Windows 10/11 operating environments.
• Experience collaborating with cybersecurity, infrastructure, and endpoint teams.

Required skills

• Qualys VMDR
• Rapid7 InsightVM
• SCCM
• Intune
• WSUS
• AdminStudio
• ORCA
• InstallShield
• MSIX Packaging Tool
• PowerShell scripting
• Python scripting
• MSI/MSIX packaging and deployment