Sr. Patching and Vulnerability Management Analyst (Hybrid)
Kinder Morgan, Inc. · Houston, TX
- On site
- Full-time
- $100,000 / year
- Houston, TX
Job highlights
- Manage enterprise patch and vulnerability remediation.
- Engineer and support SCCM/MECM infrastructure.
- Execute monthly patch cycles and urgent patching.
- Prioritize remediation based on risk and impact.
- Automate tasks using PowerShell scripting.
About the role
Sr. Patching and Vulnerability Management Analyst
Kinder Morgan is seeking a skilled Sr. Patching and Vulnerability Management Analyst to support enterprise-wide patch management and vulnerability remediation across Windows servers and endpoints. This role operates as part of a collaborative team of SCCM/MECM and security professionals, contributing to the design, optimization, and execution of patching strategies. The ideal candidate brings strong technical expertise, automation skills, and a proactive approach to improving patch compliance and reducing security risk while working closely with peers, security teams, and infrastructure teams. Experience handling zero-day threats, third-party patching, and risk-based prioritization is essential.
About The Role
This role plays an important part in maintaining the organization’s security posture by helping ensure systems are patched, compliant, and protected against emerging threats—working as part of a broader team dedicated to infrastructure reliability and cybersecurity.
What You Will Do
Essential Duties and Responsibilities
SCCM / MECM Engineering & Support
- Support the design, maintenance, and optimization of Microsoft Endpoint Configuration Manager (SCCM/MECM) infrastructure
- Monitor SCCM client health and assist in resolving performance and reliability issues
- Troubleshoot client, deployment, and update-related issues in collaboration with the team
- Contribute to improvements in SCCM architecture, scalability, and performance
Patch Management Operations
- Participate in the end-to-end Windows patch lifecycle (assessment, testing, deployment, validation, and reporting)
- Execute monthly patch cycles (Patch Tuesday), including support for out-of-band and urgent patching activities
- Assist in implementing phased deployment strategies (pilot groups and production rollouts)
- Help ensure patch deployments minimize business disruption
Vulnerability Management
- Support vulnerability assessment and remediation efforts by analyzing vulnerability data (CVE, CVSS scoring)
- Assist in prioritizing remediation activities based on risk and business impact
- Partner with cybersecurity teams to align patching activities with threat intelligence
- Contribute to reducing exposure to critical and high-risk vulnerabilities
Automation & Process Improvement
- Develop and maintain PowerShell scripts to automate routine patching and operational tasks
- Identify opportunities to improve efficiency and reduce manual processes
- Support continuous improvement of patch management procedures and standards
Compliance, Auditing & Reporting
- Help ensure all endpoints are properly inventoried and compliant with patching policies
- Assist with compliance tracking, reporting, and audit support activities
- Perform routine validation checks to ensure adherence to security standards
Incident Support & Troubleshooting
- Provide support for patch-related incidents and endpoint issues
- Troubleshoot failed deployments, update issues, and client health problems
- Participate in after-hours support for patching windows or critical issues as needed
Collaboration & Governance
- Work within established change management processes
- Collaborate with team members, security, and infrastructure teams on patching activities
- Contribute to documentation of processes, procedures, and system configurations
- Share knowledge and best practices within the team
What You Need
Required Qualifications
- Bachelor’s degree in Computer Science, Information Systems, Engineering, or related field (or equivalent experience)
- 3-5+ years of experience with Microsoft Endpoint Configuration Manager (SCCM/MECM)
- Experience supporting enterprise Windows patching environments
- Experience handling zero-day and out-of-band patching scenarios
- Strong knowledge of: Windows Server and Windows 10/11, Windows Update processes and troubleshooting
- Proficiency in PowerShell scripting and automation
- Experience with: Vulnerability remediation processes, Risk-based patch prioritization, CVE / CVSS scoring concepts
- Solid understanding of: Active Directory, DNS, DHCP, Networking fundamentals
- Strong troubleshooting skills across SCCM and Windows update issues
Preferred Qualifications
- Experience with Microsoft Intune / Endpoint Manager (co-management)
- Familiarity with Vulnerability Management tools
- Understanding of hybrid environments (on-premises and cloud)
- Experience with cloud platforms such as Microsoft Azure
- Experience with virtualization platforms: VMware, Hyper-V, Citrix
- Experience with alternative patching and endpoint management tools (beyond SCCM) is a plus
Why Join Kinder Morgan
Kinder Morgan is a large energy infrastructure company operating in North America. Access to reliable, affordable energy is a critical component for improving lives around the world. We are committed to providing energy transportation and storage services in a safe, efficient, and environmentally responsible manner for the benefit of the people, communities, and businesses we serve.
Kinder Morgan provides equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, sex, pregnancy, childbirth and related medical conditions, gender (including gender identity and expression), sexual orientation, national origin, ancestry, citizenship status, age, physical or mental disability, genetic information, marital status, military or veteran status, family status, status as an individual authorized to work in the U.S., or any other status protected by law. For more information about Kinder Morgan, our culture, opportunities available, and to join our Talent Community, please visit our careers site at www.kindermorgan.com.
Key skills/competency
- Sr. Patching and Vulnerability Management Analyst
- SCCM/MECM
- Vulnerability Management
- Patch Management
- PowerShell Scripting
- Windows Server
- Security Risk
- CVE/CVSS
- Endpoint Security
- Troubleshooting
Skills & topics
- Patch Management
- Vulnerability Management
- SCCM
- MECM
- PowerShell
- Windows Server
- Endpoint Security
- Cybersecurity
- IT Operations
- Analyst
How to get hired
- Tailor your resume: Highlight SCCM/MECM, PowerShell, and vulnerability management experience.
- Quantify achievements: Use numbers to show impact on patch compliance or risk reduction.
- Prepare for technical questions: Review SCCM, Windows updates, and PowerShell scripting.
- Understand the business: Research Kinder Morgan's role in energy infrastructure.
- Showcase collaboration: Emphasize teamwork with security and infrastructure teams.
Technical preparation
Behavioral questions
Frequently asked questions
- What are the key responsibilities for a Sr. Patching and Vulnerability Management Analyst at Kinder Morgan?
- The key responsibilities include supporting enterprise-wide patch management and vulnerability remediation for Windows servers and endpoints, managing SCCM/MECM infrastructure, executing patch cycles, and automating tasks with PowerShell. You'll also contribute to risk-based prioritization of remediation efforts and collaborate with security and infrastructure teams.
- What technical skills are most important for this Sr. Patching and Vulnerability Management Analyst role at Kinder Morgan?
- Essential technical skills include 3-5+ years of experience with Microsoft Endpoint Configuration Manager (SCCM/MECM), proficiency in PowerShell scripting for automation, strong knowledge of Windows Server and Windows Update processes, and experience with vulnerability remediation, CVE/CVSS scoring, and Active Directory.
- What is the typical career path for a Sr. Patching and Vulnerability Management Analyst at Kinder Morgan?
- While specific paths vary, this role can lead to senior technical specialist positions, team lead roles in infrastructure or security operations, or management positions within cybersecurity and IT operations. Experience gained here is highly transferable within the energy sector and IT security.
- How does Kinder Morgan approach vulnerability management and patching?
- Kinder Morgan focuses on an end-to-end Windows patch lifecycle, including assessment, testing, deployment, and validation, with a strong emphasis on risk-based prioritization. They support regular patch cycles, urgent patching for zero-day threats, and collaborate closely with cybersecurity teams to align efforts with threat intelligence.
- Is this Sr. Patching and Vulnerability Management Analyst role remote or hybrid at Kinder Morgan?
- This role is listed as hybrid, indicating a blend of on-site and remote work. Specific schedules and expectations would typically be discussed during the interview process.
- What kind of experience is needed for the Sr. Patching and Vulnerability Management Analyst role at Kinder Morgan?
- We are looking for candidates with a Bachelor's degree (or equivalent experience) and 3-5+ years of experience in supporting enterprise Windows patching environments, specifically with SCCM/MECM and PowerShell automation. Experience with zero-day threats and risk-based prioritization is crucial.
Similar roles
Open positions we recommend based on this role.