Job Summary
Responsible for remediating application-level vulnerabilities identified by Qualys and Wiz.io. This role focuses on application patching and configuration fixes; OS patching is managed by Marsh Tech.
Job TitleApplication Patching & Vulnerability Remediation Engineer Role Summary Responsible for remediating application-level vulnerabilities identified by Qualys and Wiz.io. This role focuses on application patching and configuration fixes; OS patching is managed by Marsh Tech.Key Responsibilities\ Own and remediate application vulnerability backlog, prioritizing oldest and highest severity issues.• Plan, test (non prod where available), and deploy application patches and configuration fixes.• Coordinate with application owners and engineering teams for code-level or complex fixes.• Manage change requests in the ticketing system with proper documentation and evidence.• Update vulnerability tracking tools with remediation plans, status, and closure details.• Maintain runbooks, playbooks, and audit evidence to ensure compliance.Required Skills• Experience in application patching and vulnerability remediation• Hands-on exposure to Qualys and/or Wiz.io• Strong understanding of application architectures and dependencies• Familiarity with ITSM / Change Management and ticketing tools (e.g., ServiceNow) • Ability to work cross-functionally and manage remediation to closure Nice to Have• Knowledge of OWASP Top 10m• Experience supporting security audits or compliance reviews"
Key Responsibilities
• Own and remediate application vulnerability backlog, prioritizing oldest and highest severity issues. • Plan, test (non prod where available), and deploy application patches and configuration fixes. • Coordinate with application owners and engineering teams for code-level or complex fixes. • Manage change requests in the ticketing system with proper documentation and evidence. • Update vulnerability tracking tools with remediation plans, status, and closure details. • Maintain runbooks, playbooks, and audit evidence to ensure compliance.
Skill Requirements
• Experience in application patching and vulnerability remediation • Hands-on exposure to Qualys and/or Wiz.io • Strong understanding of application architectures and dependencies • Familiarity with ITSM / Change Management and ticketing tools (e.g., ServiceNow) • Ability to work cross-functionally and manage remediation to closure
Other Requirements
Nice to Have • Knowledge of OWASP Top 10 • Experience supporting security audits or compliance reviews