Project specification
Project expertise
Description
A company is looking for an experienced Cyber Security Specialist to take responsibility for the end-to-end patching and vulnerability management process. The goal of the project is to ensure the security of the IT infrastructure and effectively remediate vulnerabilities. The role includes coordinating across different teams, automating processes, and ensuring compliance and management reporting.
- Vulnerability Management: CVE, CVSS and EPSS assessments, risk and exploitability analyses, vulnerability prioritization
- Windows Patch Management: Management of Windows servers, WSUS, Microsoft Configuration Manager, Azure Update Manager, PowerShell scripting
- Linux Patch Management: Patch management for RHEL, SUSE, Ubuntu, repository management, kernel updates
- AWS: Use of AWS Systems Manager, Patch Manager, compliance reporting
- Azure: Hybrid patching with Azure Update Manager, Azure Arc, Defender for Cloud
- Application Patching: Middleware, databases, web servers, Java, .NET, Tomcat, JBoss, WebLogic, IIS, SQL Server
- Vulnerability Scanner: Working with tools such as Tenable, Qualys, Rapid7, Greenbone, Microsoft Defender Vulnerability Management
- Automation: PowerShell, Python, Ansible, Terraform for pre- and post-checks
- Change and ITSM: ServiceNow, ITIL, change, incident and problem management
- Testing and Rollback: Patch rings, regression tests, backup/snapshot, rollback strategies
- Reporting: Patch compliance, exposure, MTTR, aging, dashboards
- Governance: ISO 27001, NIST SP 800-40, BSI IT-Grundschutz, audit-ready patch evidence
Requirements
- Extensive experience in vulnerability management and patching processes
- Knowledge of Windows, Linux, AWS and Azure patch management
- Experience with application patching and middleware technologies
- Expertise in automation tools such as PowerShell, Python, Ansible or Terraform
- Familiarity with ITSM tools such as ServiceNow and ITIL processes
- Ability to carry out testing, rollbacks and disaster recovery
- Experience with reporting and dashboards for patch compliance
- Knowledge of governance standards such as ISO 27001, NIST SP 800-40 and BSI IT-Grundschutz
- Excellent communication skills in German; English skills are an advantage
Not applying this time?
Get notified about similar projects matching your experience.
Frequently asked questions
The project is based in Munich, Germany.
The project preferably starts in November 2026 and is planned to end in December 2026 (1 month).
The project requires a commitment of 100% capacity (full-time).
The project offers 90 - 95% remote work.
The project requires the following languages: German (Advanced) and English (Advanced).
The project is related to the following industry: Information Technology.
The project covers the following business area: Information Technology.
Yes! Recommend a freelancer for the project and earn 30% of FRATCH's profits every time they get placed — for the duration of that project. Simply share your invite link with a colleague to get started.
To apply for the project, click the Apply button on the project page to submit your profile for review. We will forward your resume to the client and get back to you within a few days.
Join other experts who are already part of our network
