Job Closed
This listing is no longer active.
Vulnerability Management & Patching Specialist
Location
United States + 121 moreAll locations: United States | Canada | Brazil | Colombia | Argentina | Chile | Venezuela | Bolivia | Ecuador | French Guiana | Guyana | Paraguay | Peru | Suriname | Uruguay | Mexico | Costa Rica | El Salvador | Guatemala | Honduras | Nicaragua | Panama | Dominican Republic | Puerto Rico | Bahamas | Guadeloupe | Haiti | Jamaica | Martinique | Montserrat | United Kingdom | Germany | France | Estonia | Portugal | Hungary | Poland | Ukraine | Romania | Bulgaria | Czechia | Slovakia | Belarus | Moldova | Sweden | Greece | Belgium | Italy | Ireland | Switzerland | Netherlands | Finland | Malta | Denmark | Lithuania | Croatia | Spain | Austria | Bosnia And Herzegovina | Iceland | Luxembourg | North Macedonia | Montenegro | Norway | Serbia | Slovenia | Albania | Cyprus | Latvia | Monaco | South Africa | Egypt | Algeria | Angola | Benin | Botswana | Burkina Faso | Burundi | Cameroon | Cabo Verde | Central African Republic | Chad | Congo | Côte D'ivoire | Democratic Republic of the Congo | Equatorial Guinea | Eritrea | Ethiopia | Gabon | Gambia | Ghana | Guinea | Guinea-bissau | Kenya | Lesotho | Liberia | Libya | Madagascar | Malawi | Mali | Mauritania | Mauritius | Mayotte | Morocco | Mozambique | Namibia | Niger | Nigeria | Réunion | Rwanda | Senegal | Seychelles | Sierra Leone | Somalia | Sudan | Eswatini | Tanzania | Togo | Tunisia | Uganda | Zambia | Zimbabwe
Posted
95 days ago
Salary
$25 / year
Seniority
Mid Level
No structured requirement data.
Job Description
Vulnerability Management & Patching Specialist
Ip Glass
This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more. Role Description The Vulnerability Management & Patching Specialist is responsible for delivering vulnerability identification, risk‑based prioritisation, remediation coordination, and patch compliance across multiple customer environments in a managed services model. The role operates within clearly defined service scopes and shared‑responsibility agreements, using tools such as Tenable and patch management platforms (e.g. ManageEngine Patch Manager Plus or equivalent) to reduce customer risk while meeting contractual SLAs, regulatory obligations, and operational stability requirements. Core Responsibilities - Vulnerability Management - Perform scheduled and ad‑hoc vulnerability scans across customer environments using Tenable or equivalent platforms, in line with contracted service scope. - Analyse scan results to: - Validate findings and eliminate false positives. - Assess risk based on severity, exploitability, and asset criticality. - Determine remediation ownership under the shared‑responsibility model. - Prioritise vulnerabilities according to customer SLAs, regulatory requirements, and threat exposure. - Track vulnerabilities through their lifecycle, from detection to remediation, mitigation, exception, or risk acceptance. - Support SOC escalation workflows for critical or actively exploited vulnerabilities. - Patch Management - Plan, coordinate, and execute patching activities where patching is included in the managed service scope. - Use ManageEngine Patch Manager Plus or equivalent tools to: - Automate patch deployment. - Schedule maintenance windows. - Enforce approval workflows. - Monitor patch success and compliance. - Support emergency and zero‑day patching in response to high‑risk vulnerabilities. - Ensure patching activities minimise customer impact through testing, staged rollouts, and rollback planning. - Maintain patch baselines across servers, endpoints, and supported applications, aligned to customer contracts. - Service Delivery, Governance & Reporting - Produce customer‑facing vulnerability and patch reports, including: - Outstanding vulnerabilities by risk level. - Patch compliance status. - SLA performance and remediation trends. - Provide clear remediation guidance to customers where patching responsibility remains client‑owned. - Maintain accurate documentation of: - Patch schedules and deployment outcomes. - Vulnerability exceptions and compensating controls. - Risk acceptances and approvals. - Support customer audits, cyber‑insurance, and regulatory evidence requests. Qualifications - 3–5 years’ experience in vulnerability management, patch management, SOC, or MSSP operations. - Hands‑on experience with vulnerability management tools, such as: - Tenable Vulnerability Management / Tenable Security Center. - Qualys or equivalent (transferable skills accepted). - Experience with patch management platforms, such as: - ManageEngine Patch Manager Plus. - SCCM, WSUS, BigFix, Tanium, or similar. - Strong understanding of: - CVEs, CVSS, exploitability, and risk‑based remediation. - Windows and Linux patching models. - Third‑party application patching. - Experience working in multi‑tenant, SLA‑driven environments. - Familiarity with ITIL processes, particularly Change, Incident, and Problem Management. - Relevant certifications (preferred but not mandatory): - Tenable certifications. - Security+ or equivalent. - ITIL Foundation. Personal Attributes - Strong organisational skills to manage multiple customers concurrently. - Ability to clearly communicate risk, remediation status, and ownership boundaries to customers. - Comfortable operating in high‑pressure, incident‑driven scenarios. - Detail‑oriented with a strong focus on evidence, reporting accuracy, and audit readiness. - Proactive mindset focused on continuous service improvement.
Job Requirements
- 3–5 years’ experience in vulnerability management, patch management, SOC, or MSSP operations.
- Hands‑on experience with vulnerability management tools, such as: Tenable Vulnerability Management / Tenable Security Center.
- Qualys or equivalent (transferable skills accepted).
- Experience with patch management platforms, such as: ManageEngine Patch Manager Plus.
- SCCM, WSUS, BigFix, Tanium, or similar.
- Strong understanding of: CVEs, CVSS, exploitability, and risk‑based remediation.
- Windows and Linux patching models.
- Third‑party application patching.
- Experience working in multi‑tenant, SLA‑driven environments.
- Familiarity with ITIL processes, particularly Change, Incident, and Problem Management.
- Relevant certifications (preferred but not mandatory): Tenable certifications.
- Security+ or equivalent.
- ITIL Foundation.
- Personal Attributes
- Strong organisational skills to manage multiple customers concurrently.
- Ability to clearly communicate risk, remediation status, and ownership boundaries to customers.
- Comfortable operating in high‑pressure, incident‑driven scenarios.
- Detail‑oriented with a strong focus on evidence, reporting accuracy, and audit readiness.
- Proactive mindset focused on continuous service improvement.
Related Guides
Related Categories
Related Job Pages
More Security Analyst Jobs
Cyber Security Analyst
Sigma Software GroupWe support enterprises, product houses, and startups with custom software solutions development and IT consulting.
• Provide technical support to customers in real time, delivering clear and professional responses • Analyze logs, graphs, and dashboards, isolating and investigating data using tools like Kibana/OpenSearch • Manage and own customer cases and internal tickets in Jira Service Management (JSM) • Perform back-office tasks, including adding fingerprints of attacks after analyzing the attack's identifiers • Write and optimize SQL queries for data retrieval, analysis, and manipulation in BigQuery/Snowflake • Communicate with global customers, ensuring timely responses and effective issue resolution • Work in a shift-based schedule, including weekends
Senior Security Control Assessor
Arlo Solutions LLCArlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions. Our reputation reflects the high quality of the talented Arlo Solutions team and the consultants working in partnership with our customers. Our mission is to understand and meet the needs of both our customers and consultants by delivering quality, value-added solutions. The Department of Defense’s (DoD) Chief Digital and Artificial Intelligence Office (CDAO) is at the forefront of supporting the DoD with the adoption of innovative technologies such as data, analytics, and artificial intelligence to help accelerate predictions, forecasts, and interpretations for both strategic and tactical decisions across the enterprise.
This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more. Role Description The Department of Defense’s (DoW) Office of the Undersecretary of War for Research and Engineering (OUSW (R&E)) is at the forefront of supporting the DoW with the adoption of innovative technologies such as data, analytics, and artificial intelligence to help accelerate predictions, forecasts, and interpretations for both strategic and tactical decisions across the enterprise. The Security Control Assessor (SCA) plays a pivotal role in comprehensively understanding the cybersecurity posture of a given capability within OUSW (R&E). SCAs must go beyond a mere compliance focus on controls to articulate the inherent risks of systems. Success in this position requires expertise in statutory guidance such as: - NIST 800 series - DoW 8500.01 - DoW 8140.03 - ISO 27001 - COBIT - DoW RMF - Operation Vulcan Logic (OVL) The Senior SCA provides authoritative risk determinations and recommendations critical for the Authorizing Official (AO) to grant an Authority to Operate (ATO). Their assessments integrate technical rigor with regulatory compliance, ensuring a robust security posture and informing strategic decision-making. Work Location: Full time remote. Candidates in the Washington DC Metropolitan preferred. Travel requirements will vary with location, however, expect approximately 10% to 25%. Clearance: Top Secret with SCI eligibility Qualifications - Strong background in information security systems management (ISSM), risk management, and governance, risk and compliance (GRC). - Strong client focus and commitment to continuous improvement. - Ability to proactively network and establish relationships. - Experience supporting and assessing risks within a CI/CD DevSecOps environment. - Expansive knowledge with integrating IaaS, PaaS, and SaaS offerings into government cloud environments (e.g., AWS, AZURE & GCP). - Experience assessing STIGs, Cloud Compliance Guides, and System Mission Owner responsibilities within Government Cloud Environments. - Expert understanding of NIST 800 series guidelines, DoW 8500.01, DoW 8140.03, ISO 27001, COBIT, DoW RMF, OVL, and current cybersecurity best practices. - Excellent communication/presentation skills briefing senior military and government civilian leadership. - Experienced with writing policies, guides, procedures. - Experience in hands-on with eMASS, Xacta and/or other GRC tools. - Experience with Federal and FedRamp A&A Processes. - Experienced and comfortable advising at the Senior Executive Service (SES) level of customers. Requirements - Must have an active Top-Secret Clearance SCI eligible. - Bachelor’s degree in computer science/information technology, or other related degree fields (master’s degree is preferred or at least 10 years of related experience). - At least 10+ years of cybersecurity experience including a senior technical or management role; Project or Program Management experience a plus. - At least one IAT/IAM or equivalent security certifications (e.g., CISSP, CCSP, CISM, CISA, or CASP). Company Description We are proud to be an Affirmative Action and Equal Opportunity Employer and as such, we evaluate qualified candidates in full consideration without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, national origin, age, disability status, protected veteran status, and any other protected status.
Senior Investigator, Aetna SIU (Must reside in Ohio)
CVS HealthBringing our heart to every moment of your health.
We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary As a Senior Investigator you will conduct high level, complex investigations of known or suspected acts of healthcare fraud and abuse. Routinely handles cases that are sensitive or high profile, those that are national in scope, complex cases, or cases involving multiple perpetrators or intricate healthcare fraud schemes. - Investigates to prevent payment of fraudulent claims submitted to the Medicaid lines of business - Researches and prepares cases for clinical and legal review - Documents all appropriate case activity in case tracking system - Facilitates feedback with providers related to clinical findings - Initiates proactive data mining to identify aberrant billing patterns - Makes referrals, both internal and external, in the required timeframe - Facilitates the recovery of money lost as a result of fraud matters - Provides on the job training to new Investigators and provides guidance for less experienced or skilled Investigators. - Assists Investigators in identifying resources and best course of action on investigations - Serves as back up to the manager as necessary - Cooperates with federal, state, and local law enforcement agencies in the investigation and prosecution of healthcare fraud and abuse matters. - Demonstrates high level of knowledge and expertise during interactions and acts confidently when providing testimony during civil and criminal proceedings - Gives presentations to internal and external customers regarding healthcare fraud matters and Aetna's approach to fighting fraud - Provides input regarding controls for monitoring fraud related issues within the business units Required Qualifications - Must live in the state of Ohio - 4+ years investigative experience in the area of healthcare fraud, waste and abuse matters. - Working knowledge of medical coding; CPT, HCPCS, ICD10 - Proficiency in Microsoft Office with advanced skills in Excel (must know how to do pivot tables). - Strong analytical and research skills. - Proficient in researching information and identifying information resources. - Strong verbal and written communication skills. - The ability to understand and analyze health care claims and coding - Ability to travel up to 10% (approx. 2-3x per year, depending on business needs) Preferred Qualifications - Previous Medicaid/Medicare investigatory experience - Previous Behavioral Health experience - Exercises independent judgement and uses available resources and technology in developing evidence, supporting allegations for fraud and abuse. - Credentials such as certification from the Association of Certified Fraud Examiners (CFE), or an accreditation from the National Health Care Anti-Fraud Association (AHFI) - Knowledge of Aetna's policies and procedures. - Knowledge and understanding of complex clinical issues. - Competent with legal theories. - Strong communication and customer service skills. - Ability to effectively interact with different groups of people at different levels in any situation. Education Bachelor's degree or equivalent experience ( A bachelor's degree, or an associate's degree with an additional four+ years working on health care fraud, waste, and abuse investigations and audits; Anticipated Weekly Hours 40 Time Type Full time Pay Range The typical pay range for this role is: $46,988.00 - $91,800.00 This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong. Great benefits for great people We take pride in our comprehensive and competitive mix of pay and benefits – investing in the physical, emotional and financial wellness of our colleagues and their families to help them be the healthiest they can be. In addition to our competitive wages, our great benefits include: - Affordable medical plan options, a 401(k) plan (including matching company contributions), and an employee stock purchase plan. - No-cost programs for all colleagues including wellness screenings, tobacco cessation and weight management programs, confidential counseling and financial coaching. - Benefit solutions that address the different needs and preferences of our colleagues including paid time off, flexible work schedules, family leave, dependent care resources, colleague assistance programs, tuition assistance, retiree medical access and many other benefits depending on eligibility. For more information, visit https://jobs.cvshealth.com/us/en/benefits We anticipate the application window for this opening will close on: 04/01/2026 Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.
• Apply knowledge of concepts, processes, practices, and procedures on technical assignments • Support enterprise Cybersecurity standards • Develop and implement Cybersecurity standards and procedures in accordance with government regulations • Coordinate, develop, and recommend security processes • Recommend Cybersecurity solutions to support customers’ requirements • Identify and report security violations • Recommend and satisfy Cybersecurity requirements based upon the analysis of CSPP, policy, regulatory, and resource demands • Support customers at the highest levels in the development and implementation of processes and policies • Analyze and make recommendations of security requirements for computer systems which may include mainframes, workstations, and personal computers • Support design, development, engineering, and implementation of solutions that meet CSPP requirements • Analyze general Cybersecurity-related technical problems and provide basic engineering and technical support in solving these problems • Support vulnerability/risk analysis of computer systems and applications during all phases of the system development life cycle • Ensure that all information systems are functional and secure • Support efforts for critical processes outside of normal hours to include nights, weekends, and holidays • Deploy rapid response to quickly resolve cyber events • Communicate with senior customer stakeholders on reporting metrics (e.g., number of events, average time to respond, affected applications or platforms, etc.)


