Vulnerability Management Analyst

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title

Vulnerability Management Analyst

Location(s)

Richmond, VA

(Hybrid

3 days per week)

Job Summary

The Endpoint Engineer will support enterprise software deployment, endpoint patch management, and vulnerability remediation activities. The role involves reviewing endpoint vulnerability metrics, deploying targeted software updates and patches, troubleshooting deployment failures, and performing root-cause analysis. The engineer will help maintain a secure, compliant, and reliable endpoint environment.

Responsibilities

• Engineer, modify, package, and deploy commercial off-the-shelf (COTS) software across enterprise endpoint environments.
• Develop and maintain software deployment packages using Microsoft Intune, Endpoint Configuration Manager (MECM/SCCM), or similar endpoint management platforms.
• Perform compatibility testing and configuration adjustments to ensure reliable software installation and operation across diverse device profiles.
• Automate software deployment workflows to improve efficiency, consistency, and scalability.
• Collaborate with application owners and security teams to evaluate software update requirements, dependencies, and risks.
• Support enterprise patch management processes, including testing, scheduling, deploying, and validating operating system and third-party updates.
• Monitor vulnerability reports from tools such as Rapid7, Qualys, Tenable, and Microsoft Defender for Endpoint.
• Assist in prioritizing and remediating endpoint-related security vulnerabilities.
• Troubleshoot software deployment failures, patching issues, and endpoint configuration problems.
• Perform root-cause analysis and implement corrective actions.
• Maintain documentation for software packaging standards, deployment procedures, endpoint baselines, and change management activities.
• Implement and enforce endpoint hardening policies, compliance settings, and configuration baselines.
• Collaborate with infrastructure, security, and service desk teams to improve endpoint reliability, security, and user satisfaction.
• Evaluate new technologies, software updates, and automation opportunities to optimize endpoint management operations.

Required Qualifications

• Experience with enterprise software packaging, deployment, and endpoint management.
• Experience with Microsoft Intune, MECM/SCCM, or similar endpoint management platforms.
• Knowledge of enterprise patch management, software updates, and vulnerability remediation.
• Experience troubleshooting deployment failures, patching issues, and endpoint configuration problems.
• Understanding of endpoint security, hardening policies, compliance settings, and configuration baselines.
• Ability to perform root-cause analysis and document corrective actions.

Preferred Qualifications

• Experience with vulnerability management tools such as Rapid7, Qualys, Tenable, or Microsoft Defender for Endpoint.
• Experience automating software deployment workflows.
• Ability to collaborate with application owners, security teams, infrastructure teams, and service desk personnel.

Work Arrangement

• Hybrid work arrangement.
• Onsite attendance required three days per week: Tuesday, Wednesday, and Thursday.
• Local Richmond, Virginia candidates are preferred due to weekly onsite requirements.
• Candidates must physically reside within the United States for the duration of the assignment.

Skills

Skill

Required / Desired

Amount

of Experience

Expertise Rating

Move

Experience and proficiency with Windows 11 operating systems and monthly/annual updates

Required

4

Years

Experience and proficiency with Microsoft Office 365 applications and monthly updates

Required

4

Years

Experience and proficiency using an Endpoint Management System

Required

4

Years

Experience and proficiency using a Workstation Imaging Solution

Required

4

Years

Experience and proficiency using a Service Management Ticketing System

Required

4

Years

Proven analytical and problem-solving abilities

Required

4

Years

Excellent verbal and written communication skills

Required

4

Years

Ability to work independently with minimal direction and as a team

Required

4

Years

Ability to work effectively with end users, technical staff, and senior staff providing exception customer service

Required

4

Years

Experience with Microsoft InTune and Autopilot

Desired

4

Years

Experience with Microsoft GraphAPI

Desired

4

Years

Experience with PatchMyPC

Desired

4

Years

Experience with ServiceNow

Desired

4

Years

Experience with PowerShell

Desired

4

Years

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.