Vulnerability & Patch Management Analyst – Cyber Security Analyst

As the founding entity of RAINBOW PARTNERS, Quanteam is a consulting firm specialized in Banking, Finance, and Financial Services. Through our core human values – proximity, teamwork, diversity, excellence – our 1000 expert consultants, hailing from 35 different nationalities, collaborate across 13 international offices: Paris, Lyon, New York, Montreal, London, Brussels, Luxembourg, Geneva, Lisbon, Porto, Casablanca, Madrid and Singapore.

Quanteam North America is looking for a Vulnerability & Patch Management Analyst to join the IT Security team of a leading Corporate & Investment Bank in New York. You will own and modernize the Americas vulnerability and patch management program, working hand in hand with IT teams in the US

What you will do

• Drive the full vulnerability lifecycle across infrastructure, systems, applications and SDLC: identification, prioritization, remediation
• Run scans, treatment and remediation with enterprise vulnerability tools, and track Plans of Action & Milestones (POA&M)
• Prioritize patch deployments, manage SLA breaches and execute follow-up plans with IT owners
• Build SIEM dashboards and deliver clear KPI/KRI reporting to leadership (Power BI, Excel / Power Query)
• Design and improve VPM procedures, playbooks and runbooks
• Work with the Second Line of Defense and auditors on compliance and audit remediation
• Use scripting and AI to automate manual processes
• Provide backup on cybersecurity projects and incidents, including off-hours support when emergent threats require it

What you bring

• 5 to 9 years in vulnerability management, patch management or a related security role
• Hands-on experience with a vulnerability scanning tool (Qualys, Tenable, Rapid7 or similar)
• SIEM experience, including building dashboards and reports (Splunk, QRadar, Sentinel or similar)
• Strong reporting skills: Power BI, advanced Excel, Power Query, pivot tables
• Scripting experience (PowerShell, Python or similar)
• Solid knowledge of NIST CSF, FFIEC, ISO 27001 and CIS frameworks
• Good understanding of networks (TCP/IP, protocols), Windows, Linux/Unix and VMware
• Ability to present to management and work with cross-functional, international teams
• Bachelor’s degree in Information Security, Computer Science or a related field, or equivalent experience
• CISSP, CISM, GCIH, GCIA or GPEN is a plus

Details

• Location: Midtown Manhattan, hybrid (3 days per week on-site)
• Contract: long-term, immediate start
• Eligibility: W2 only, no C2C