Vulnerability & Patch Management Lead — NYC Hybrid

Michael Page; New York (NY); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health benefits from day-1

Job summary

Michael Page is seeking a Cybersecurity/Vulnerability Analyst in New York City to manage the vulnerability and patch management lifecycle, identify risks, and track remediation. The role includes developing security reporting and improving vulnerability management processes.

The position requires 3 days onsite each week in Midtown, NYC, with collaboration across Americas and international teams. 5+ years in related roles and strong SIEM, reporting, and vulnerability tooling capabilities are

Qualifications

• Minimum 5 years in vulnerability management, patch management, or related security role.
• Experience overseeing POA&Ms.
• Strong understanding of vulnerabilities and risk impact on systems and infrastructure.
• Hands-on with vulnerability management tools including scanning, treatment and remediation.
• Experience with SIEM dashboards and reports.

Responsibilities

• Manage full vulnerability and patch lifecycle across infrastructure, systems, apps, and SDLC.
• Analyze event data for attack indicators and breaches.
• Prioritize patches based on risk and manage SLA breaches.
• Develop and deliver vulnerability/patch reporting for leadership and tech teams.
• Create and adapt KPIs/KRIs for a risk-based vulnerability program.

Skills

Vulnerability management

Patch management

SIEM experience

Reporting & data analysis

Power BI

Excel / Power Query

Scripting

Communication

Auditing & controls

Education

Bachelor's degree in Information Assurance / Information Security / Computer Science

Tools

Power BI

SIEM tools

Vulnerability scanners

Excel

Job description

Michael Page is seeking a Cybersecurity/Vulnerability Analyst in New York City to manage the vulnerability and patch management lifecycle, identify risks, and track remediation. The role includes developing security reporting and improving vulnerability management processes.

The position requires 3 days onsite each week in Midtown, NYC, with collaboration across Americas and international teams. 5+ years in related roles and strong SIEM, reporting, and vulnerability tooling capabilities are