Windows Vulnerability Remediation Engineer

Role Description We are seeking a highly skilled Windows Vulnerability Remediation Engineer to join our Cybersecurity and Infrastructure team. In this role, you will be responsible for identifying, analyzing, prioritizing, remediating, and validating security vulnerabilities across enterprise Windows server environments. You will work closely with Infrastructure, Security Operations, Endpoint Management, and Application teams to ensure timely remediation of vulnerabilities while maintaining system stability, compliance, and business continuity. The ideal candidate will have strong expertise in Windows Server administration, enterprise patch management, vulnerability management platforms, PowerShell automation, and Microsoft security technologies. Key Responsibilities Vulnerability Management • Analyze and remediate vulnerabilities identified through Qualys, Tanium, Microsoft Defender Vulnerability Management (MDVM), or similar vulnerability assessment tools. • Prioritize remediation activities based on: • CVSS Scores • Exploitability • Threat Intelligence • Business Criticality • Validate vulnerability findings and identify false positives. • Coordinate with application and infrastructure teams to drive remediation through closure. • Manage vulnerability exceptions and document risk acceptance where required. Windows Patch Management • Manage patching and remediation across: • Windows Server 2012 / 2016 / 2019 / 2022 • VMware ESXi Hosts • Perform: • Monthly Patch Tuesday deployments • Emergency and out-of-band patching • Zero-day vulnerability remediation • Patch testing and validation • Rollback planning and execution • Troubleshoot failed patch deployments and ensure successful remediation. • Maintain enterprise patch compliance within defined SLAs. Security Hardening • Implement and maintain Windows security configurations aligned with: • CIS Benchmarks • Microsoft Security Baselines • Perform security hardening activities including: • Registry configuration • Windows services optimization • Local security policies • Protocol hardening • Authentication security improvements Vulnerability Remediation Remediate Security Issues Including • Missing Microsoft Security Updates • Unsupported or End-of-Life Software • TLS/SSL Weak Cipher and Protocol Issues • SMBv1 Removal and SMB Security Updates • NTLM Hardening • Remote Code Execution (RCE) Vulnerabilities • Privilege Escalation Vulnerabilities • Registry Misconfigurations • Windows Authentication Weaknesses • Configuration Drift Automation & Scripting • Develop PowerShell scripts to automate: • Patch deployment • Vulnerability remediation • Compliance reporting • System validation • Leverage Tanium automation capabilities where applicable. • Continuously improve remediation efficiency through automation. Reporting & Compliance • Generate dashboards and reports for: • Patch Compliance • Vulnerability Aging • SLA Adherence • Executive Security Metrics • Risk Reduction Trends • Track remediation progress and ensure adherence to security SLAs. • Support internal and external security audits. • Maintain remediation documentation and evidence for compliance requirements. Incident & Security Response • Support cybersecurity incident response activities. • Participate in zero-day vulnerability assessments and emergency remediation efforts. • Assist with vulnerability investigations and security assessments. • Collaborate with Security Operations during active incidents. Required Technical Skills Operating Systems • Windows Server 2012, 2016, 2019, 2022 • VMware ESXi Microsoft Technologies • Active Directory • Group Policy (GPO) • DNS • DHCP • IIS • Failover Clustering • Hyper-V • PowerShell Vulnerability Management • Qualys • Tanium • Microsoft Defender Vulnerability Management (MDVM) Patch Management • WSUS • Azure Update Manager • Microsoft Endpoint Configuration Manager (MECM/SCCM) (preferred) Scripting & Automation • PowerShell • Windows Automation • Tan