Vulnerability & Patch Management Analyst (HYBRID, NYC)

Cybersecurity/Vulnerability Analyst

We're seeking a Cybersecurity/Vulnerability Analyst to manage the vulnerability and patch management lifecycle, including identifying vulnerabilities, prioritizing risk, and tracking remediation. This person will also develop security reporting and improve vulnerability management processes. This role requires 3-days onsite each week in Midtown, NYC.

Responsibilities include managing the full vulnerability and patch management lifecycle, analyzing cybersecurity event data, assessing vulnerabilities, prioritizing patch deployments, monitoring vulnerability remediation efforts, conducting vulnerability scans, developing and delivering vulnerability and patch management reporting, designing and maintaining vulnerability and patch management procedures, coordinating the development and maintenance of the organization's patch management strategy, assisting IT teams with acquiring and deploying vendor patches and software/system updates, collaborating with IT and security stakeholders, strengthening compliance with cybersecurity standards, supporting cybersecurity projects, security incidents, and audit remediation activities, ensuring security monitoring systems remain online, current, and operational, identifying opportunities to use AI to automate manual cybersecurity processes and tasks, and providing off-hours support when needed to address emerging security threats.

MPI does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, marital status, or based on an individual's status in any group or class protected by applicable federal, state or local law. MPI encourages applications from minorities, women, the disabled, protected veterans and all other qualified applicants.

The successful applicant will have a minimum of 5 years of experience in vulnerability management, patch management, cybersecurity, or a related security role, experience overseeing Plans of Action and Milestones (POA&M), strong understanding of common cybersecurity vulnerabilities, hands-on experience with vulnerability management tools, experience working with SIEM tools, strong experience with reporting and data analysis tools, experience working with datasets and pivot tables, scripting experience, experience creating and enhancing cybersecurity documentation, deep understanding of network devices and architecture, knowledge of Windows, Linux/Unix, VMware, IDS/IP, and forensic discovery, strong understanding of internal controls, knowledge of cybersecurity and IT audit frameworks and standards, ability to create management-level presentation materials and clearly communicate cybersecurity risks, findings, and recommendations, strong communication and collaboration skills, ability to use AI to automate manual processes and tasks, a bachelor's degree in Information Assurance, Information Security, Computer Science, a related field, and/or equivalent professional experience, and CISSP, CISM, GCIH, GCIA, or GPEN certification is preferred but not required.