Responsibilities
The Sr. Manager, Enterprise Patch & Vulnerability Management serves as the technical engineering lead for VIPR (Vulnerability Incident Prevention & Remediation), the enterprise capability accountable for the patch and vulnerability remediation lifecycle across services, applications, platforms, and infrastructure. Reporting to the Sr. Manager, Enterprise Patch & Vulnerability Management, this role leads the technical planning, orchestration, and execution of patch-related changes and partners with BTS technology teams, Cybersecurity, Service Management, Change Management, Application Support, and Operating Unit Technology organizations to ensure patches, vulnerabilities, hardening items, and posture management findings are remediated in a timely manner aligned with established service level agreements (SLAs).
The role is accountable for technical change orchestration and execution, AI-based vulnerability and patch analysis, exception review, and incident escalation. Success requires deep technical breadth across enterprise platforms, strong analytical and troubleshooting skills, operational discipline, and the ability to collaborate with and influence technical teams without direct authority.
Key functions include but are not limited to:
- Technical Lead – Change Orchestration & Execution: Serve as the technical lead for patch-related change orchestration and execution across the enterprise. Build and sequence automated deployment plans, maintenance windows, dependencies, and rollback procedures; prepare and submit change records; and lead technical execution and bridge coordination during enterprise maintenance events. Coordinate remediation across products onto shared maintenance windows so that systems are touched once rather than repeatedly, reducing end-user disruption and change collisions.
- AI-Based Vulnerability & Patch Analysis: Leverage AI-enabled tools, analytics, and automation to analyze vulnerability scan data, threat intelligence, and patch release information; correlate findings to assets and service owners; predict deployment risk and service impact; identify remediation trends, recurring failures, and root causes; and produce data-driven prioritization recommendations. Ensure AI-generated outputs are validated and used in alignment with BTS security, data, and responsible AI standards.
- Exception Review & Risk Validation: Perform technical review of patch and vulnerability exception requests, validating business justification, compensating controls, residual risk, and remediation timelines. Provide technical recommendations to the Sr. Manager and Cybersecurity, track exceptions to expiration, and ensure exceptions are re-evaluated and closed in alignment with governance expectations.
- Incident Escalation & Response: Act as the escalation point for patch-related incidents, failed deployments, and service degradation following maintenance activities. Triage issues, engage appropriate resolver groups, coordinate rollback or remediation actions, escalate critical issues to technology leadership, and participate in post-incident and problem management reviews to prevent recurrence.
- Offshore Execution Pod Technical Direction: Provide day-to-day technical direction to the offshore execution pod, including remediation wave planning and handoffs, automated testing execution, ticket queue prioritization, evidence quality, and off-hours execution readiness; review pod work for accuracy and completeness.
- Vulnerability Remediation Execution: Partner with teams to drive technical remediation of critical, high, medium, and low vulnerabilities, hardening items, and posture management findings across every device on the network within established SLAs.
- Code Remediation Influence & Enablement: Partner with product owners to influence, prioritize, and drive code changes required to remediate vulnerabilities. Champion and leverage AI-based tools to facilitate code analysis, development of remediation recommendations, and validation of proposed fixes, working with product owners to drive implementation within established remediation SLAs.
- Service Validation and Post-Patch Checkout: Lead tiered service health validation following remediation — from enterprise up/downs to basic and comprehensive automated validation — partnering with product owners and stakeholder teams who define what healthy looks like. Confirm operational readiness, capture remediation evidence, and implement new tests when disruption reveals gaps in coverage.
- Automation and Tooling: Partner with SRE and DevOps team, Platform Engineering, and product owners to design, build, and enhance automated checkout and validation, remediation orchestration, deployment pipelines, and evidence collection using enterprise tools and scripting.
- Reporting and Compliance Support: Review and analyze reporting prepared by the offshore execution pod on patch compliance, vulnerability aging, SLA adherence, deployment success rates, exception status, and incident trends, providing technical insight to support management and executive reporting.
- Documentation and Continuous Improvement: Develop and maintain technical runbooks, standard operating procedures, and knowledge articles; identify opportunities to improve patching reliability, reduce deployment risk, and increase automation coverage.
Qualifications
- Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related discipline.
- Equivalent experience and/or alternative qualifications will be considered.
- 5+ years of technical experience
- 3+ years of hands-on experience in enterprise patch management, vulnerability remediation, systems engineering, or infrastructure operations
- Experience leading technical execution of enterprise change and maintenance activities across multiple platforms
- Hands-on experience with patch and vulnerability tooling
- Experience applying AI, analytics, or automation tools to operational or security data
- Working knowledge of public cloud platforms and modern data, integration, platform engineering, DevOps, SRE, and cybersecurity practices.
Core Skills/Competencies:
- Patch Management Engineering (P) - plans, sequences, and executes enterprise patch deployments safely and consistently.
- Vulnerability Management (P) - analyzes findings, prioritizes remediation, and drives SLA compliance.
- Change Orchestration & Execution (P) - leads technical change planning, implementation, validation, and rollback across platforms.
- AI and Data Analysis (P) - applies AI-based tools and analytics to vulnerability, patch, and operational data to inform prioritization and decisions.
- Risk and Exception Analysis (P) - evaluates exposure, compensating controls, and residual risk to support exception decisions.
- Incident Management (P) - triages, escalates, and coordinates resolution of patch-related incidents.
- Automation and Scripting (N) - improves deployment reliability, reporting, and evidence collection.
Additional Company DetailsWe do not accept unsolicited resumes from third party recruiting agencies or firms. The company offers a competitive compensation plan and robust benefits package for full time regular employees which for this role include: • Base Salary Range: $127,050 - $181,500 • Benefits: Health, Dental, Vision, Life, Disability, Wellness, Paid Time Off, 401(k) and Profit-Sharing plans. The actual salary for this position will be determined by a number of factors, including the scope, complexity and location of the role; the skills, education, training, credentials and experience of the candidate; and other conditions of employment.
Sponsorship DetailsSponsorship not Offered for this Role
