Job Description Summary
We are seeking a highly skilled and detail-oriented Vulnerability and Patch Management Specialist to serve as the technical lead for vulnerability management across multiple technology platforms. This role is responsible for implementing, managing, and maintaining the patch management lifecycle and vulnerability management infrastructure, with a strong focus on tools such as Rapid7 Nexpose and BigFix.
GENERAL DUTIES & RESPONSIBILITIES
- As a Member of Vulnerability Management and patching team, following will be general duties.
- Perform regular vulnerability scans using tools like Qualys, Tenable, or Rapid7.
- Analyze scan results, prioritize vulnerabilities based on risk, and coordinate remediation efforts.
- Collaborate with system owners and application teams to ensure timely patching and mitigation.
- Track and report on vulnerability remediation metrics and compliance status.
- Maintain vulnerability management documentation and procedures.
- Administer and maintain IBM BigFix infrastructure for patch deployment and compliance reporting.
- Develop and test custom fixlets, baselines, and automation scripts.
- Schedule and deploy OS and third-party patches across Windows, Linux, and Mac environments.
- Monitor patch deployment success/failure and troubleshoot issues.
- Generate compliance reports and dashboards for internal and audit purposes.
EDUCATION REQUIREMENTS
Bachelor’s degree in technical discipline or the equivalent combination of education, training, or work experience.
GENERAL KNOWLEDGE, SKILLS & ABILITIES
- Knowledge of multiple operating systems and related utilities and hardware
- Knowledge of storage management, TCP/IP, network monitoring and tools and technical writing principles and practices
- Effective analytical, problem solving, installation and maintenance skills
- Ability to work independently as well as within a team
- Ability to communicate effectively verbally and in writing
- Ability to establish and maintain effective working relationships with employees, vendors, clients and public.
Privacy Statement
FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.
Sourcing Model
Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.
#pridepass