Vulnerability Management Engineer Location: Washington, D.C. (Required to be onsite a min of 2 to 3 days)
Clearance: Must possess an active TS clearance
Status: Exempt
Position Summary We are seeking a detail-oriented and proactive Vulnerability Management Engineer (also known as a Patch Management Engineer) to join our team. In this role, you will be responsible for the end-to-end patching and vulnerability remediation lifecycle across enterprise systems. You will primarily use Microsoft Endpoint Configuration Manager (MECM) and IBM BigFix to deploy patches while leveraging Tenable vulnerability reports and Splunk for analysis and reporting. This position requires strong coordination skills and the flexibility to work nights, weekends, and during off-hours maintenance windows to support patching activities with government system owners and internal application support teams.
Key Responsibilities
- Plan, schedule, and execute patching activities using Microsoft MECM and IBM BigFix across servers, workstations, and endpoints.
- Analyze vulnerability scan reports from Tenable and security/event data from Splunk to identify, prioritize, and track remediation of vulnerabilities.
- Develop and maintain patching schedules, maintenance windows, and deployment strategies that balance security requirements with operational needs.
- Coordinate closely with government system owners and application support teams to obtain approvals, schedule changes, communicate impact, and minimize service disruption.
- Work flexible hours, including nights, weekends, and on-call rotations, to perform patching during approved maintenance windows.
- Monitor patch compliance rates, generate metrics and status reports, and present findings to leadership and stakeholders.
- Investigate and resolve patching failures, deployment issues, and exceptions; perform root-cause analysis and implement corrective actions.
- Maintain accurate documentation of patching procedures, configurations, and remediation activities.
- Support vulnerability management program initiatives, including exception handling, risk acceptance processes, and continuous improvement efforts.
- Collaborate with security, infrastructure, and application teams to ensure patches are tested and deployed in a controlled manner.
Required Qualifications
- 5+ years of hands-on experience in vulnerability management, patch management, or systems administration with a security focus.
- BS degree in computer science or related field
- Must have a TS clearance
- Must have a M365A certification
- Proven experience deploying and managing patches using Microsoft Endpoint Configuration Manager (MECM / SCCM).
- Strong working knowledge of IBM BigFix for endpoint patching and compliance.
- Experience reading, interpreting, and acting on vulnerability reports from Tenable (Tenable.sc or Nessus).
- Familiarity with Splunk for searching logs, creating reports, and monitoring patching-related events.
- Solid understanding of the vulnerability management lifecycle (scanning, prioritization, remediation, and verification).
- Excellent communication and stakeholder management skills, with the ability to coordinate effectively with government customers and technical teams.
- Demonstrated ability to work independently and manage competing priorities in a dynamic environment.
- Willingness and ability to work nights, weekends, and during off-hours as required for patching activities.
Preferred Qualifications
- Experience supporting government or regulated environments (NIST, FISMA, RMF, etc.).
- Scripting/automation experience (PowerShell preferred; Python a plus) to streamline patching processes.
- Knowledge of multiple operating systems (Windows Server/Desktop and Linux).
- Relevant certifications such as CompTIA Security+, Microsoft certifications (e.g., MD-102, AZ-800/801), or Tenable-certified credentials are highly preferred
- Experience with change management processes and ITIL frameworks.
- Prior experience working directly with government system owners or in a contractor support role.
Our Benefits- Inclusive and supportive work environment
- Competitive compensation package
- Professional growth through annual subsidy for trainings, certifications, professional memberships as well as mentorships and job shadowing
- Medical, dental, vision, 401(K) with company match
- Flexible Paid Time Off Program, 11 holidays, paid parental leave, military leave, and government shutdown leave
- Rewards and recognition through peer awards, service year awards, spot bonuses, and annual company awards
- Wellness and mental health benefits
- Commuter benefits
- Flexible work options
