Sr. Patching and Vulnerability Management Analyst (Cybersecurity)

Location: Hybrid in Houston, Texas, or Colorado Springs, Colorado, United States

Company

hirify.global is a large energy infrastructure company providing energy transportation and storage services across North America.

What you will do

• Support the design, maintenance, optimization, and troubleshooting of SCCM/MECM infrastructure and client health.
• Manage the Windows patch lifecycle, including assessment, testing, phased deployment, validation, reporting, and monthly Patch Tuesday cycles.
• Support urgent, out-of-band, and zero-day patching activities while minimizing business disruption.
• Analyze CVE and CVSS data and prioritize vulnerability remediation based on risk and business impact.
• Develop and maintain PowerShell automation for patching and operational tasks.
• Support compliance reporting, audits, incident troubleshooting, change management, and process documentation.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field, or equivalent experience.
• 3–5+ years of experience with Microsoft Endpoint Configuration Manager (SCCM/MECM) in enterprise Windows patching environments.
• Experience handling zero-day and out-of-band patching scenarios.
• Strong knowledge of Windows Server, Windows 10/11, Windows Update processes, and troubleshooting.
• Proficiency in PowerShell scripting and automation, vulnerability remediation, risk-based prioritization, and CVE/CVSS concepts.
• Understanding of Active Directory, DNS, DHCP, networking fundamentals, and SCCM deployment issues; candidates must be authorized to work in the United States.

Nice to have

• Experience with Microsoft Intune/Endpoint Manager, co-management, vulnerability management tools, hybrid environments, and Microsoft Azure.
• Experience with VMware, Hyper-V, Citrix, or alternative patching and endpoint management tools.

Culture & Benefits

• Collaborative work with SCCM/MECM, cybersecurity, infrastructure, and security teams.
• Participation in established change management, governance, documentation, and knowledge-sharing practices.
• After-hours support may be required during patching windows or critical incidents.
• Equal employment opportunity is provided in accordance with applicable law.