Patch Management Analyst

Company Description

Role Description

Engagement Details

•  Role: Patch Management Analyst
•  Number of Resources: 2
•  Minimum Experience: 3 years in patch / vulnerability management
•  Engagement Duration: 2.5 years (30 months)
•  Work Model: Onsite)
• Key Responsibilities:
•  Monitor vendor advisories, security bulletins, and CVE feeds to identify applicable patches.
•  Assess patch severity, impact, and applicability to the client environment.
•  Plan, schedule, and execute patch deployments across Windows, Linux, endpoints, and third-party
• applications in line with change management policies.
•  Validate post-deployment system health and perform rollback when required.
•  Correlate vulnerability scanner outputs (Tenable Nessus, Qualys, Rapid7) with available patches and
• remediation workflows.
•  Track open vulnerabilities and remediation SLAs; report on closure rates.
•  Coordinate compensating controls for non-patchable vulnerabilities with system and application owners.
•  Maintain patch baselines, approved patch lists, and deployment schedules.
•  Operate patching tools and consoles (WSUS / SCCM / MECM / Intune, ManageEngine Patch Manager Plus,
• Ivanti, BigFix, or equivalent).
•  Raise and manage Change Requests (CRs) in line with ITIL practices.
•  Produce weekly and monthly patch compliance, vulnerability, and exception reports.
•  Support internal and external audits (ISO 27001, NCA ECC, PCI DSS) with patching evidence.
•  Investigate patch-related incidents and failures; perform root cause analysis and corrective actions.
•  Execute emergency out-of-band patching for zero-day and critical threats.
•  Coordinate with SOC, Infrastructure, and Application teams during security incidents requiring rapid
• remediation.
• Required Qualifications:
•  Minimum 3 years of hands-on experience in patch management, vulnerability management, or systems administration with a patching focus.
•  Proven experience in enterprise environments with a mix of Windows Server, Linux (RHEL / CentOS / Ubuntu), and virtualization platforms (VMware, Hyper-V).
•  Demonstrated experience operating at least one enterprise patch management platform.
•  Strong knowledge of Windows and Linux patching mechanisms, dependencies, and reboot management.
•  Working knowledge of vulnerability scanners and ability to interpret scan reports.
•  Familiarity with scripting for automation and reporting (PowerShell, Bash, or Python).
•  Understanding of Active Directory, Group Policy, and software distribution mechanisms.
•  Awareness of common security frameworks (CIS Benchmarks, NIST, ISO 27001) and how they relate to
• patching.
• Certifications (any of the following):
•  CompTIA Security+
•  ITIL Foundation v4
•  Microsoft Certified: Endpoint Administrator Associate / Azure Administrator
•  Red Hat Certified System Administrator (RHCSA)
•  Vendor certifications on the deployed patch management tool
• Education:
•  Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent practical experience).