Vulnerability & Patch Management Analyst

Salary: $74,000 - 92,000 per year Requirements:

• 5–9 years of experience in vulnerability management, patch management, or a related security role
• Hands-on experience with vulnerability scanning tools such as Qualys, Tenable, Rapid7, or similar
• SIEM experience, including creating dashboards and reports with Splunk, QRadar, Sentinel, or similar
• Strong reporting skills, including Power BI, advanced Excel, Power Query, and pivot tables
• Scripting experience with PowerShell, Python, or similar
• Solid knowledge of NIST CSF, FFIEC, ISO 27001, and CIS frameworks
• Good understanding of networks and TCP/IP protocols, Windows, Linux/Unix, and VMware
• Ability to present to management and collaborate with cross-functional, international teams
• Bachelors degree in Information Security, Computer Science, or a related field, or equivalent experience
• CISSP, CISM, GCIH, GCIA, or GPEN certification is a plus

• Manage the full vulnerability lifecycle across infrastructure, systems, applications, and the SDLC, including identification, prioritization, and remediation
• Run vulnerability scans and coordinate treatment and remediation using enterprise tools; track Plans of Action & Milestones (POA&Ms)
• Prioritize patch deployments, manage SLA breaches, and coordinate follow-up plans with IT owners
• Build SIEM dashboards and provide clear KPI/KRI reporting to leadership using tools such as Power BI and Excel/Power Query
• Develop and improve vulnerability and patch management procedures, playbooks, and runbooks
• Work with the Second Line of Defense and auditors on compliance and audit remediation
• Use scripting and AI to automate manual processes
• Provide backup support for cybersecurity projects and incidents, including off-hours support when emergent threats require it

• AI
• Excel
• Support
• Linux
• Power BI
• Power Query
• PowerShell
• Python
• Security
• Splunk
• TCP/IP
• Unix
• VMware
• Windows

More:

We are Quanteam, a consulting firm specializing in Banking, Finance, and Financial Services and the founding entity of RAINBOW PARTNERS. Our 1,000 expert consultants represent 35 nationalities and work across 13 international offices. Quanteam North America is seeking a Vulnerability & Patch Management Analyst for the IT Security team of a leading Corporate & Investment Bank in New York. In this role, you will own and modernize the Americas vulnerability and patch management program in collaboration with US IT teams. The position is based in Midtown Manhattan with a hybrid schedule of three on-site days per week. This is a long-term contract with an immediate start; applicants must be eligible to work on a W2 basis, as C2C arrangements are not accepted.

last updated 42 week of 2026