Sr Analyst, Vulnerability Management

Optimum•Town of Oyster Bay, NY

About The Position

We are Optimum, a leader in the fast-paced world of connectivity, and we're on the hunt for enthusiastic professionals to join our team! We understand that connectivity isn't just a luxury anymore – it's a necessity that empowers lives, fuels businesses, and drives innovation. A career at Optimum means you'll be enabling progress and enhancing lives by providing reliable, high-speed connectivity solutions that keep the world connected. We owe our success to our amazing product, commitment to our people and the connections we make in every community. If you are resourceful, collaborative, team-oriented and passionate about delivering consistent excellence, Optimum is the Company for you! We are Optimum!Job SummaryThe Senior Vulnerability Management Analyst is responsible for identifying, assessing, prioritizing, and driving remediation of security vulnerabilities across the organization’s infrastructure, applications, and endpoints. This role partners closely with IT operations, engineering, architecture, and security teams to ensure timely patching, risk reduction, risk remediation, and compliance with security standards and regulatory requirements. The role requires an individual with strong communication and organizational skills, and the technical capability to understand, interpret, and prioritize vulnerability findings.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience
Minimum 5 years of experience in vulnerability management, patch management, or security operations
Strong understanding of operating systems (Windows, Linux), networking, and enterprise infrastructure
Demonstrated experience with vulnerability scanning tools (e.g., Tenable, Qualys, Rapid7, CrowdStrike Exposure Management) in a complex network environment
Familiarity with patch management tools and platforms (e.g., SCCM, Intune, WSUS, JAMF, Ansible)
Knowledge of CVE, CVSS, NIST, CIS benchmarks, and common threat vectors
Ability to clearly communicate technical risk to non-technical stakeholders, by assessing and focusing on business impact

Nice To Haves

At least 1 security certifications such as Security+, CISSP, CEH, GSEC, or equivalent
Experience with cloud platforms and cloud-native vulnerability tools.
Experience with integrating into CI/CD pipeline to remediate vulnerabilities, prior to code entering production
Scripting or automation experience
Experience supporting compliance frameworks (ISO 27001, SOC 2, PCI DSS,)

Responsibilities

Conduct continuous vulnerability scanning across servers, endpoints, cloud environments, network devices, and applications
Conduct targeted network scanning for non-traditional devices
Analyze vulnerability scan results to identify risk severity, exploitability, and business impact
Prioritize vulnerabilities using risk-based frameworks (e.g., CVSS, threat intelligence, asset criticality)
Track vulnerabilities from identification through remediation and validation
Monitor emerging threats, zero-day vulnerabilities, and vendor advisories
Manage patching activities for operating systems, applications, firmware, and third-party software
Work with IT operations and system owners to schedule, test, and deploy patches in alignment with change management processes
Validate patch deployments and confirm remediation through rescanning
Maintain patch compliance metrics and remediation SLAs
Produce regular vulnerability and patch status reports for technical teams and executive stakeholders
Track KPIs such as, SLA compliance, organization wide exposure, % remediation Support internal and external audits by providing evidence of vulnerability and patch management activities
Administration of vulnerability management reporting and tracking tools, including maintaining integrations with on prem, cloud, and code vulnerability management platforms
Collaborate with Threat Management and Security Operations teams to identify emerging industry threats and implement protections to safeguard our organization
Works closely with the Vulnerability Management Program Manager to assist in day-to-day program operations, as well as long term strategic program development
Mentor and uplift junior level staff
Establish remediation workflows with infrastructure, cloud, endpoint, and application teams
Serve as subject matter expert when establishing and maintaining vulnerability management policies, standards, and procedures
Identify opportunities to automate scanning, reporting, and remediation processes
Participate in incident response activities related to vulnerability exploitation
Support Governance team in audit and penetration testing by addressing findings and implementing remediations or compensating controls in a timely manner
Participate in additional projects and tasks, at the direction of Security Leadership