Cyber Security Analyst II

Nesco Resource•New York, NY

6d•Hybrid

About The Position

The Cyber Security Analyst II will manage and optimize the vulnerability and patch management process across the IT landscape. This consulting engagement focuses on proactively identifying, monitoring, prioritizing, and remediating security vulnerabilities. The analyst will work with cross-functional teams across the Americas platform and Head Office to develop and implement vulnerability and patch management strategies, lead daily operations and program improvements, and provide expert guidance. The position follows Natixis US CIB’s in-office policy: three days a week in the office, including two Mondays and two Fridays per month. Off-hours support may be needed to address emerging threats.

Requirements

5–9 years of experience.
Proven experience in vulnerability management, patch management, or related security roles, including oversight of Plans of Action and Milestones (POAM).
Ability to use AI to automate manual processes and tasks.
Strong understanding of common security vulnerabilities and their impact on systems and infrastructure.
Experience with vulnerability management and SIEM tools, including creating SIEM dashboards and reports and conducting vulnerability scans, treatment, and remediation.
Familiarity with security and IT audit frameworks and standards, including NIST and FFIEC handbooks.
Experience with reporting and analysis tools, including Power BI, advanced Excel/Power Query, datasets, and pivot tables.
Scripting experience.
Ability to enhance existing procedures, playbooks, runbooks, and other documentation.
Strong understanding of network devices and architecture, TCP/IP, network protocols, server operating systems, and vulnerability scanning.
Understanding of internal control concepts and policies, with a focus on improving process and procedure manuals and documentation.
Knowledge of cybersecurity frameworks such as ISO 27001, NIST CSF, and CIS.
Knowledge of Windows, Linux/Unix, VMware, IDS/IP, and forensic discovery.
Strong communication and collaboration skills, including preparing management presentation materials and working effectively with cross-functional teams.
Strong interpersonal and communication skills and ability to work effectively with a wide range of constituencies in a diverse community.

Responsibilities

Analyze cybersecurity event data and other data sources for indicators of attack and potential security breaches; produce reports and assist with incident coordination.
Coordinate with defense teams to keep security monitoring systems online, up to date, and operational.
Manage the full vulnerability and patch management lifecycle, including identifying, prioritizing, and remediating vulnerabilities across infrastructure, systems, applications, and SDLC.
Deliver consistent vulnerability and patch management reporting to leadership and relevant teams, including KPIs and risk indicators.
Collaborate with IT stakeholders across the Americas, Head Office, and international platforms.
Assess vulnerability impact and risk to inform remediation strategy.
Prioritize patch deployments, manage SLA breaches, and develop and execute follow-up plans.
Design and enhance vulnerability and patch management procedures, processes, and strategy.
Participate in vulnerability assessments and track software and system updates.
Strengthen compliance and adherence to security best practices and approved tools; liaise with Second Line of Defense and auditors.
Assist IT teams with timely vendor patch acquisition and deployment.
Monitor patch management effectiveness and implement improvements.
Stay current on industry best practices and emerging threats.
Provide backup support for cybersecurity projects, incidents, and audit remediation.
Provide off-hours support as needed to address emerging threats.