Vulnerability Management Engineer // Endpoint Patching

Philadelphia, PennsylvaniaOpen to RemoteFull Time$115k - $135kA well-established wealth management firm is seeking a Vulnerability Management Engineer to join its cybersecurity team. In this role, you will own the end-to-end vulnerability management program with a strong emphasis on hands-on endpoint patching and system hardening across a Windows-dominant enterprise environment. You will lead remediation efforts, drive patch compliance, and collaborate with infrastructure and IT operations teams to reduce the organization's attack surface.This position is ideal for someone who thrives in a technical, execution-focused role and takes pride in getting vulnerabilities closed — not just tracked. You will work closely with IT, cloud, and business stakeholders to ensure timely remediation while maintaining the stability of critical financial systems. The ideal candidate combines deep Windows patching expertise with a solid understanding of vulnerability prioritization and risk-based decision-making.The organization is committed to fostering a diverse and inclusive workplace where all employees are treated equitably and with respect.Required Skills & Experience3+ years of experience in vulnerability management, endpoint security, or a related IT/information security roleBachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related discipline (or equivalent experience)Hands-on experience with patch management platforms in a Windows environment (e.g., WSUS, SCCM/MECM, Intune, or equivalent)Proficiency with vulnerability scanning tools such as Tenable Nessus, Qualys, or Rapid7 InsightVMStrong understanding of Windows OS hardening standards and CIS BenchmarksAbility to prioritize and communicate risk-based remediation recommendations to both technical teams and leadershipExperience coordinating remediation activities across infrastructure, desktop engineering, and application teamsStrong written and verbal communication skills across technical and non-technical audiencesSelf-directed and organized, with the ability to manage competing priorities in a fast-paced environmentStrong analytical and problem-solving skills with a continuous improvement mindsetDesired Skills & ExperienceExperience supporting patching and hardening in a regulated financial services or wealth management environmentFamiliarity with STIG compliance and Group Policy (GPO) for Windows endpoint configurationExposure to Active Directory security hardening and privileged account hygieneExperience working with ticketing and workflow platforms (e.g., ServiceNow, Jira) for remediation trackingKnowledge of cloud vulnerability management (Azure or M365 environments)Understanding of CVSS scoring, exploit intelligence feeds, and risk-based patch prioritization frameworksRelevant certifications such as CompTIA Security+, CySA+, GCWN, or similarWhat You Will Be DoingOwning the full vulnerability management lifecycle — from scan and discovery through prioritization, remediation coordination, and validationExecuting and coordinating endpoint patching across the Windows fleet, including workstations and servers, using enterprise patch management toolingApplying and maintaining system hardening configurations in line with CIS Benchmarks, STIGs, and internal security baselinesAnalyzing scan results and translating findings into clear, actionable remediation guidance tailored to asset criticality and business riskPartnering with IT operations, desktop engineering, and server teams to plan and execute patch deployments with minimal disruptionTracking and reporting on patch compliance, SLA adherence, and remediation progress for leadership and audit audiencesIdentifying hardening gaps across the Windows environment and driving improvement projects to close themSupporting exception management processes, including risk acceptance documentation and compensating control reviewContributing to policy and procedure development around patch management and endpoint configuration standardsParticipating in security operations activities such as vulnerability-related incident response and threat intelligence correlationTech Breakdown45% Vulnerability Scanning, Analysis & Remediation Coordination30% Endpoint Patching & Windows Hardening15% Reporting, Metrics & Compliance10% Security Operations Support & Process ImprovementDaily Responsibilities35% Executing and tracking patch deployments and hardening tasks across endpoint and server infrastructure25% Reviewing scan results, prioritizing findings, and coordinating remediation with IT teams20% Producing compliance reports and remediation dashboards for leadership and audit stakeholders10% Managing exceptions, documenting risk acceptances, and updating hardening baselines10% Contributing to process improvements, runbooks, and team collaborationThe OfferYou will receive the following benefits:Competitive salary commensurate with experienceMedical, dental, and vision insurance401(k) with company matchPaid time off and company holidaysRemote-first work environment with flexibilityOpportunities for professional development and certification supportExposure to enterprise security tooling in a complex financial services environmentCollaborative, mission-driven team cultureApplicants must be currently authorized to work in the US on a full-time basis now and in the future.