Sr. Engineer, Enterprise Patch & Vulnerability Management

Company Details Company URL: Berkley Technology Services (BTS) is the dynamic technology solution for W. R. Berkley Corporation, a Fortune 500 Commercial Lines Insurance Company. With key locations in Urbandale, IA and Wilmington, DE, BTS provides innovative and customer-focused IT solutions to the majority of WRBC’s 60+ operating units across the globe. BTS’s wide reach ensures that ideas and opinions are considered at every level of the organization to guarantee we find the best solutions possible.   Driven by a commitment to collaboration, BTS acts as consultants to our customers and Operating Units by providing comprehensive solutions that not only address the challenge at hand but proactively plan for the “What’s Next” in our industry and beyond.   With a culture centered on innovation and entrepreneurial spirit, BTS stands as a community of technology leaders with eyes toward the future -- leaders who truly care about growing not only their team members, but themselves, and take pride in their employees who shine. BTS offers endless ways to get involved and have the chance to grow your career into a wide range of roles you'd never known existed. Come join us as we push forward into the future of industry leading technological solutions.   Berkley Technology Services: Right Team, Right Technology, Simple and Secure.  The Company is an equal employment opportunity employer. Responsibilities The Sr. Engineer, Enterprise Patch & Vulnerability Management serves as the technical engineering lead for VIPR (Vulnerability Incident Prevention & Remediation), the enterprise capability accountable for the patch and vulnerability remediation lifecycle across services, applications, platforms, and infrastructure. Reporting to the Sr. Manager, Enterprise Patch & Vulnerability Management, this role leads the technical planning, orchestration, and execution of patch-related changes and partners with BTS technology teams, Cybersecurity, Service Management, Change Management, Application Support, and Operating Unit Technology organizations to ensure patches, vulnerabilities, hardening items, and posture management findings are remediated in a timely manner aligned with established service level agreements (SLAs).The role is accountable for technical change orchestration and execution, AI-based vulnerability and patch analysis, exception review, and incident escalation. Success requires deep technical breadth across enterprise platforms, strong analytical and troubleshooting skills, operational discipline, and the ability to collaborate with and influence technical teams without direct authority.Key functions include but are not limited to:Technical Lead – Change Orchestration & Execution: Serve as the technical lead for patch-related change orchestration and execution across the enterprise. Build and sequence automated deployment plans, maintenance windows, dependencies, and rollback procedures; prepare and submit change records; and lead technical execution and bridge coordination during enterprise maintenance events. Coordinate remediation across products onto shared maintenance windows so that systems are touched once rather than repeatedly, reducing end-user disruption and change collisions.AI-Based Vulnerability & Patch Analysis: Leverage AI-enabled tools, analytics, and automation to analyze vulnerability scan data, threat intelligence, and patch release information; correlate findings to assets and service owners; predict deployment risk and service impact; identify remediation trends, recurring failures, and root causes; and produce data-driven prioritization recommendations. Ensure AI-generated outputs are validated and used in alignment with BTS security, data, and responsible AI standards.Exception Review & Risk Validation: Perform technical review of patch and vulnerability exception requests, validating business justification, compensating controls, residual risk, and remediation timelines. Provide technical recommendations to the Sr. Manager and Cybersecurity, track exceptions to expiration, and ensure exceptions are re-evaluated and closed in alignment with governance expectations.Incident Escalation & Response: Act as the escalation point for patch-related incidents, failed deployments, and service degradation following maintenance activities. Triage issues, engage appropriate resolver groups, coordinate rollback or remediation actions, escalate critical issues to technology leadership, and participate in post-incident and problem management reviews to prevent recurrence.Offshore Execution Pod Technical Direction: Provide day-to-day technical direction to the offshore execution pod, including remediation wave planning and handoffs, automated testing execution, ticket queue prioritization, evidence quality, and off-hours execution readiness; review pod work for accuracy and completeness.Vulnerability Remediation Execution: Partner with teams to drive technical remediation of critical, high, medium, and low vulnerabilities, hardening items, and posture management findings across every device on the network within established SLAs.Code Remediation Influence & Enablement: Partner with product owners to influence, prioritize, and drive code changes required to remediate vulnerabilities. Champion and leverage AI-based tools to facilitate code analysis, development of remediation recommendations, and validation of proposed fixes, working with product owners to drive implementation within established remediation SLAs.Service Validation and Post-Patch Checkout: Lead tiered service health validation following remediation — from enterprise up/downs to basic and comprehensive automated validation — partnering with product owners and stakeholder teams who define what healthy looks like. Confirm operational readiness, capture remediation evidence, and implement new tests when disruption reveals gaps in coverage.Automation and Tooling: Partner with SRE and DevOps team, Platform Engineering, and product owners to design, build, and enhance automated checkout and validation, remediation orchestration, deployment pipelines, and evidence collection using enterprise tools and scripting.Reporting and Compliance Support: Review and analyze reporting prepared by the offshore execution pod on patch compliance, vulnerability aging, SLA adherence, deployment success rates, exception status, and incident trends, providing technical insight to support management and executive reporting.Documentation and Continuous Improvement: Develop and maintain technical runbooks, standard operating procedures, and knowledge articles; identify opportunities to improve patching reliability, reduce deployment risk, and increase automation coverage. Qualifications Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related discipline.Equivalent experience and/or alternative qualifications will be considered.5+ years of technical experience3+ years of hands-on experience in enterprise patch management, vulnerability remediation, systems engineering, or infrastructure operationsExperience leading technical execution of enterprise change and maintenance activities across multiple platformsHands-on experience with patch and vulnerability toolingExperience applying AI, analytics, or automation tools to operational or security dataWorking knowledge of public cloud platforms and modern data, integration, platform engineering, DevOps, SRE, and cybersecurity practices.Core Skills/Competencies:Patch Management Engineering (P) - plans, sequences, and executes enterprise patch deployments safely and consistently.Vulnerability Management (P) - analyzes findings, prioritizes remediation, and drives SLA compliance.Change Orchestration & Execution (P) - leads technical change planning, implementation, validation, and rollback across platforms.AI and Data Analysis (P) - applies AI-based tools and analytics to vulnerability, patch, and operational data to inform prioritization and decisions.Risk and Exception Analysis (P) - evaluates exposure, compensating controls, and residual risk to support exception decisions.Incident Management (P) - triages, escalates, and coordinates resolution of patch-related incidents.Automation and Scripting (N) - improves deployment reliability, reporting, and evidence collection. Additional Company Details We do not accept unsolicited resumes from third party recruiting agencies or firms.The company offers a competitive compensation plan and robust benefits package for full time regular employees which for this role include:• Base Salary Range: $90,000 - $127,600• Benefits: Health, Dental, Vision, Life, Disability, Wellness, Paid Time Off, 401(k) and Profit-Sharing plans.The actual salary for this position will be determined by a number of factors, including the scope, complexity and location of the role; the skills, education, training, credentials and experience of the candidate; and other conditions of employment. Sponsorship Details Sponsorship not Offered for this Role Job SummaryID: 2026-14831Date Posted: 3 days ago(11/6/2026 6:46 PM)Company: Berkley Technology Services LLCPrimary Location: US-DE-WilmingtonLoc2: IA, Urbandale - 11201 Douglas AvenueLoc3: VA, ManassasCategory: Information Technology