Cybersecurity Engineer

Title: Cybersecurity Engineer

Duration: Fulltime

Location: Albany, NY

Responsibilities

• Applying systems analysis methods and procedures, including consulting with users to identify and define hardware, software, and system functional requirements.
• Assisting in the design, development, documentation, analysis, testing, and modification of computer systems or programs based on user needs and system design specifications.
• Analyze, test, and deploy patches to address security vulnerabilities
• Provide expert-level patch management and automation support using BigFix in a large enterprise environment.
• Analyze available patches to determine applicability, priority, and suitability for Windows and Linux servers.
• Assess patch impact on system availability, application compatibility, performance, and business operations before deployment.
• Evaluate patch severity, CVEs, vendor advisories, and vulnerability risks to prioritize patching activities.
• Review system inventories, existing patch levels, dependencies, and prerequisites to identify required patches.
• Use BigFix to identify missing patches, assess compliance gaps, and monitor deployment status.
• Plan and coordinate patch deployments based on risk assessments, business criticality, and maintenance windows.
• Test patches and validate system functionality after installation to minimize operational impact.
• Communicate vulnerability risks, patching recommendations, and remediation plans to stakeholders.
• Document patch analysis, deployment activities, testing results, and exceptions.
• Leverage automation and scripting to improve patching efficiency and reduce manual effort.

Requirements

• 2+ years of experience using BigFix for patching.
• Experience patching Linux and Windows servers.
• Experience analyzing system vulnerabilities, identifying security gaps and risks, and recommending appropriate remediation solutions.
• Experience in assessing patch applicability, prioritizing patches, and evaluating the potential impact of patch deployment on enterprise systems.
• Experience generating and compiling vulnerability, patch compliance, and threat reporting metrics.
• Knowledge of Vulnerability Management, security advisories, CVEs, and patch prioritization methodologies.
• Experience using BigFix to assess patch compliance, identify missing patches, and monitor deployment status.
• Understanding of operating system patching, application dependencies, compatibility considerations, and patch testing procedures.
• Proficiency with Microsoft Office and SharePoint.
• Strong analytical, problem-solving, verbal, and written communication skills, with the ability to present technical analysis, risk assessments, and recommendations to technical and non-technical audiences.