Vulnerability & Patch Management Engineer

Vulnerability Management  Manage end-to-end vulnerability assessment and remediation activities across servers, databases, applications, and cloud environments.  Review vulnerability scan results and prioritize remediation based on risk and business impact.  Track vulnerabilities to closure and ensure remediation within defined SLAs.  Validate remediation and maintain accurate vulnerability records. Patch Management  Monitor and enforce patch compliance across Windows, Linux, databases, and applications.  Coordinate with Infrastructure and Application teams to ensure timely deployment of security patches.  Track patch exceptions and ensure appropriate approvals and risk acceptance.  Monitor patch compliance metrics and identify gaps. EOL / EOS Lifecycle Management  Maintain an inventory of End-of-Life (EOL) and End-of-Support (EOS) systems.  Drive upgrade or replacement plans for unsupported technologies.  Assess risks associated with unsupported systems and recommend mitigation measures. Risk & Compliance  Support internal, external, and regulatory audits.  Ensure compliance with organizational security policies and regulatory requirements (RBI, ISO 27001, etc.).  Track remediation of audit observations related to vulnerabilities and patching. Reporting & Governance  Prepare vulnerability, patch compliance, and EOL/EOS dashboards and reports.  Present security metrics and risk posture to management.  Identify recurring issues and recommend process improvements. Stakeholder Coordination  Coordinate with Infrastructure, Cloud, Database, Network, and Application teams to drive remediation activities.  Escalate critical issues and overdue vulnerabilities as required.  Provide guidance on vulnerability remediation and patch prioritization.