Cyber Security Analyst II – Vulnerability amp; Patch Management

About the role

We are seeking an experienced Vulnerability Patch Management Analyst to strengthen cybersecurity operations, manage vulnerability remediation, and drive risk-based patch management initiatives.

Tasks

• Manage the end-to-end vulnerability and patch management lifecycle
• Identify, assess, prioritize, and remediate security vulnerabilities
• Monitor patching SLAs, track remediation progress, and manage SLA breaches
• Develop KPIs, KRIs, dashboards, and management reports
• Support vulnerability assessments, security incidents, and audit remediation
• Improve vulnerability management procedures, playbooks, and runbooks
• Collaborate with IT infrastructure, security, audit, and risk teams
• Use AI to automate manual processes and improve operational efficiency

Requirements

• 8–10 Years
• Vulnerability Management and Patch Management
• SIEM tools, vulnerability scanning, treatment, and remediation
• POAM (Plans of Action and Milestones)
• Power BI, Advanced Excel, Power Query, datasets, and Pivot Tables
• Scripting and process automation
• NIST CSF, ISO 27001, CIS, and FFIEC frameworks
• Windows, Linux/Unix, VMware, TCP/IP, network architecture, IDS/IPS
• IT audit, compliance, reporting, and documentation
• Candidates should have strong analytical, communication, and stakeholder management skills
• Visa: H4,GC EAD,USC ,H1B

Schedule

• 3 days in the office, with 2 Mondays and 2 Fridays per month specified by the client
• Hybrid

How to apply

• Candidates should have availability for off-hours support when required.

Location

• New York, NY