Vulnerability & Patch Engineer

Role Overview

Alongside partners with organizations to drive digital transformation and build high-performing tech teams.*****Mission:*****Ensure effective and automated vulnerability remediation, delivering permanent fixes and preventing recurrence across Windows environments.****Responsibilities

• Manage patching of Windows endpoints (Azure/Intune and SCCM)
• Remediate OS and application vulnerabilities
• Automate fixes and develop self-healing solutions
• Analyze vulnerabilities using Tenable
• Perform targeted interventions (e.g., PsExec)
• Test and validate in lab environments (VMs)
• Monitor vulnerabilities in Linux (Rocky 8) and macOS in coordination with other teams
• Handle reporting, audit evidence, and vendor follow-up

Requirements

Technical Requirements

• Strong knowledge of Windows systems
• Experience with large-scale patch management
• Strong troubleshooting skills
• Experience with Azure/Intune and SCCM
• Hands-on experience with Tenable

Automation & Scripting

• Strong proficiency in PowerShell
• Remediation scripting
• Automation of recurring fixes
• Development of self-healing solutions
• Building internal tools

Nice to Have

• Knowledge of Linux and macOS vulnerability management
• Strong communication with vendors and technical teams
• Familiarity with ITSM processes

Profile

• Strong ownership and autonomy
• Ability to solve complex problems
• Continuous improvement mindset
• Attention to detail and strong communication skills

Tech Stack

• Azure
• ITSM
• Linux
• MacOS

Benefits

• Employment Contract;
• Health Insurance;
• Meal Card;
• Hybrid Work (Twice a week at the Porto office).