Qualys

Patch Research Engineer

India · Work style not stated · Full time

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

EmployerQualys
LocationIndia
Work styleWork style not stated
Employment typeFull time
Employer posted17 Aug 2026

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

Patch Research Engineer

Apple macOS Patch Catalogue Engineer — Patch Content Development

Location: Pune, India

Experience Required: 3–8 years (Patch Management / Vulnerability Content Development / macOS Systems Administration)

Role Overview

We are seeking a skilled Apple macOS Patch Catalogue Engineer to design, develop, validate, and maintain macOS patch metadata and deployment catalogues in support of enterprise patch management solutions. This role is responsible for building and sustaining an in-house macOS patch content repository covering both Apple OS updates and third-party applications — ensuring accurate detection logic, reliable installation behavior, compliance reporting, and consistent deployment across enterprise environments.

Show full description

Key Responsibilities

1. Patch Catalogue Development

Research and analyze security advisories published by Apple Inc. for macOS and related products.
Create structured, schema-compliant macOS patch metadata (version, architecture, detection, installation, and compliance fields).
Build and maintain a centralized macOS patch catalogue repository.

2. macOS Update & Security Monitoring

Continuously track new releases of macOS and other supported Apple and third-party products.
Monitor Apple security bulletins and release notes to identify patch-relevant changes as they are published.

3. Detection & Compliance Logic

Develop and validate detection logic using macOS system profiling commands and utilities.
Apply working knowledge of OS builds, application bundles (.app), and package receipts (.pkg) to construct accurate version-detection rules.
Write and maintain automation scripts in Bash, Zsh, and Python to support content generation and validation.

4. QA & Validation

Perform lab-based testing across all supported macOS versions and architectures.
Validate installation success, rollback scenarios, dependency handling, and fail-safe behavior for every patch.
Ensure patch content is stable and does not introduce regressions or system-level side effects.

5. Third-Party macOS Application Patching

Build accurate patch metadata for third-party macOS applications.
Develop packaging and deployment workflows for DMG, PKG, and ZIP installer formats.

Required Skills

Strong understanding of macOS architecture, filesystem structure, and system internals.
Practical experience with:

macOS software update mechanisms (Software Update, softwareupdate CLI)
PKG/DMG packaging and installer behavior
Launch Daemons and macOS system services

Mandatory scripting proficiency in Bash and Python (Zsh a plus).
Experience with Jamf Pro, Kandji, Intune, Munki, or Google Workspace would be a plus.
Experience with Mac vulnerability management and Mac patch management.
Solid understanding of CVE/NVD data, vulnerability severity scoring (CVSS), and patch supersedence logic.
Experience with enterprise patch management tools is preferred (e.g., Ivanti Patch for Endpoint Manager, ManageEngine Patch Manager Plus, or similar platforms).
Familiarity with Apple's MDM (Mobile Device Management) framework and Apple Business Manager.
Knowledge of Secure Token and FileVault handling.
Clear understanding of the architectural differences between Apple Silicon (ARM64) and Intel-based macOS systems.

See how well you match this job Apply on the employer’s site ↗

Check your resume against this job Free, no sign-up. Nothing you paste is stored.

Staying safe while you apply

Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
Prepare honestly.
Build interview stories and application drafts from your own evidence.
Keep track.
Save the role and record your own application status and follow-ups.

Create a free workspace or log in.