13 vulnerability analyst jobs at 12 companies in New York City, NY

1mo
Save
Mark Applied
Hide
Cybersecurity Threat & Vulnerability Analyst
Newark or New Jersey or New York or Pennsylvania or Connecticut or Delaware
$98k-$133k/yr RemoteFull Time
Horizon Blue Cross Blue Shield of New Jersey
Horizon Blue Cross Blue Shield of New Jersey: Provides health insurance and managed care products in New Jersey.
5+ YOE5+ years information security experience with 3+ years focused on vulnerability identification, assessment, and remediation; HS diploma required; bachelors preferred; required/ preferred security certifications (CISSP, GCTI, GIAC, CompTIA Security+, CEH); strong knowledge of vulnerability management, CVSS, OS platforms, and threat intelligence.
Nessus, Qualys, InsightVM (Nexpose), Recorded Future, ThreatConnect/ThreatStream, H-ISAC, NJCCIC, Microsoft PowerPoint, Visio, Microsoft Excel
1w
Save
Mark Applied
Hide
Vulnerability Management SME / Product Analyst
New York City or New Jersey
$81k-$92k/yr HybridFull Time
Capgemini
CapgeminiEuronext Paris: CAP: Provides global IT consulting and digital transformation services.
8+ YOERequires 8+ years in vulnerability management, cybersecurity, or product analysis; expertise in vulnerability lifecycles, risk prioritization, requirements gathering, stakeholder management, and enterprise security platforms.
ServiceNow Vulnerability Response, Qualys, Tenable, Rapid7, CVE, CVSS, CWE, CPE, KEV, EPSS
4w
Save
Mark Applied
Hide
Cyber Defense Analyst
Hoboken, New Jersey, United States
OnsiteFull Time
EY
EY: Global firm providing audit, tax, and professional consulting services.
8+ YOEMinimum 8 years in vulnerability/exposure/offensive security/security engineering; deep understanding of attack paths and misconfigurations; ability to build scalable vulnerability detection and validation solutions and communicate with senior stakeholders.
1mo
Save
Mark Applied
Hide
Business Analyst
Dublin or New York City or Los Angeles or Boston
$85k-$136k/yr HybridFull Time
Ross Stores
Ross StoresNASDAQ: ROST: Operates an off-price retail chain selling clothing and home goods.
3+ YOEUndergraduate degree or equivalent experience; 3–5 years in vulnerability remediation or security operations; strong Linux, Java remediation, reporting, communication, threat analysis, and enterprise process optimization skills.
Linux, Java
2w
Save
Mark Applied
Hide
Cyber Security Analyst
New York City, New York, United States
$115k-$141k/yr OnsiteFull Time
City of New York
City of New York: Provides municipal services and administration for New York City.
4+ YOEBachelor's degree plus related experience, 4+ years IT/infrastructure or datacenter/cloud engineering experience, expertise in incident response, forensics, vulnerability management, IAM, audits, and security operations.
Qualys, Wiz, Rapid7, Veracode, HCL AppScan, Snyk, CrowdStrike, Microsoft Defender, SolarWinds SEM, ServiceNow, Jira, GitHub Enterprise Copilot Security, GitHub Copilot, BitSight, Security Scorecard, Shodan, Air Table, Miro, Canva, SurveyMonkey, SIEM
1mo
Save
Mark Applied
Hide
Cyber Security Analyst
Paterson, New Jersey, United States
$90k-$100k/yr OnsiteFull Time
Paterson Public Schools
Paterson Public Schools: Provides public K-12 education services to the Paterson community.
Bachelor of Science in Engineering or Computer Science (or equivalent experience). Experience with security assessment tools, vulnerability scanning, penetration testing, network and server management, and security platforms. Strong communication and problem-solving skills.
NMAP, Procmon, Azure, GCP, AWS, VMWare, Palo Alto, Cisco, Avaya, Extreme, HP, MS Exchange, Office 365, Microsoft Windows, Microsoft Server, Mac OS, Linux, IOS, Android, ChromeOS
2w
Save
Mark Applied
Hide
Cyber Compliance Analyst
Berkeley Heights or Omaha
$90k-$144k/yr OnsiteFull Time
Fiserv
FiservNew York Stock Exchange: FI: Provides financial technology and payment processing services to institutions.
4+ YOE4+ years supporting cybersecurity/risk/compliance programs, experience with vulnerability management, penetration testing, change governance, scripting/reporting, translating technical content for business/regulatory audiences, bachelor's degree or equivalent.
3mo
Save
Mark Applied
Hide
Information Security Analyst
Toms River or Red Bank
OnsiteFull Time
OceanFirst Bank
OceanFirst BankNASDAQ: OCFC: Regional bank offering commercial, retail, and wealth management services.
4+ YOEBachelor's or equivalent experience; minimum 4 years in IT/InfoSec with disaster recovery/IT audit experience; hands-on SIEM/XDR/SOAR, detection, log ingestion, SOAR workflows, vulnerability management, IAM, incident response; industry certs desired.
SIEM, SOAR, XDR, IDS/IPS, Endpoint Security, Firewalls, Cloud Proxy, Network Access Control, IAM, MITRE ATT&CK, ATLAS, D3FEND, Artificial Intelligence (AI)
2mo
Save
Mark Applied
Hide
Information Security Analyst
Krakow or Hyderabad or New York City or Chicago or London or Singapore or Hong Kong or Tokyo or United States or Europe or Asia
HybridFull Time
Pico
Pico: Provides managed infrastructure and data services to financial markets.
5+ YOE5+ years IT experience in information security; experience with firewall/IDS, SIEM, Linux, cloud (AWS/GCP), Fortinet and Firepower; risk and vulnerability assessment experience; bachelor's degree or equivalent; CCNA/CISSP/cloud security certs desirable.
IDS, Firepower IDS, Fortinet, SIEM, TCP/IP, Linux, Identity and Access Management (IAM), AWS, GCP, SANS, GIAC, COBIT, NIST
2w
Save
Mark Applied
Hide
Senior Analyst, Tech GRC M&A (25878)
Long Island City, New York, United States
$90k-$135k/yr OnsiteFull Time
Estée Lauder Companies
Estée Lauder CompaniesNYSE: EL: Manufacturer and marketer of prestige beauty and skincare products.
Experience in application security, secure SDLC, vulnerability assessment (SAST/DAST/IAST), threat modeling, CI/CD and cloud/container security, strong programming/scripting skills, and ability to consult across technical teams.
C#, C/C++, Java, JavaScript, PowerShell, Python, REST, SOAP, SOA, Bitbucket, Jenkins, JIRA, Artifactory, Nexus, git, Application Engine, SQL, Ansible, DeMisto, Docker, Kubernetes, SAST, DAST, IAST
2w
Save
Mark Applied
Hide
Artificial Intelligence (AI) Offensive Security Analyst
Tampa or Irving or Jacksonville or Jersey City or New York City
$87k-$212k/yr HybridFull Time
Citi
CitiNYSE: C: Global diversified financial services holding.
5+ YOERequires penetration testing or vulnerability assessment experience, AI and LLM literacy, security testing tools, OWASP knowledge, clear technical writing, and a bachelor's degree or equivalent practical experience.
Burp Suite, nuclei, nmap, OWASP Top 10, OWASP LLM Top 10, MITRE ATLAS, Garak, PyRIT, PromptBench, Inspect AI, Large Language Models (LLMs), MITRE ATT&CK Framework
2w
Save
Mark Applied
Hide
Senior Analyst, Tech GRC M&A
Long Island City, New York, United States
$90k-$135k/yr OnsiteFull Time
The Estée Lauder Companies
The Estée Lauder CompaniesNYSE: EL: Manufactures and markets prestige skincare, makeup, and fragrance products.
Experienced application security professional versed in SDLC/DevSecOps, vulnerability assessment (SAST/DAST/IAST), threat modeling, CI/CD and cloud/container security; strong programming/scripting skills and ability to mentor teams.
C#, C/C++, Java, JavaScript, PowerShell, Python, REST, SOAP, SAST, DAST, IAST, Bitbucket, Jenkins, JIRA, Artifactory, Nexus, git, Ansible, DeMisto, Docker, Kubernetes
6d
Save
Mark Applied
Hide
Corporate
Irvine or Chicago or Houston or Jersey City
$90k-$95k/yr HybridFull Time
Kura Sushi USA
Kura Sushi USANASDAQ: KRUS: Operates a chain of technology-driven revolving sushi restaurants.
5+ YOEBachelor's degree in cybersecurity, computer science, IT, or related field; 5+ years of cybersecurity experience; security certifications, incident response, cloud security, compliance, SIEM, vulnerability testing, and scripting skills.
Security Information and Event Management (SIEM), Splunk, Google Security Operations, QRadar, ArcSight, Optro, AuditBoard, Cross Comply, Amazon Web Services (AWS), Azure, Google Cloud Platform (GCP), Netskope, CheckPoint, Zscaler, BigID, Microsoft Purview, Python, PowerShell, Bash, NIST, ISO 27001, CIS, CCPA, PCI DSS, SOX, GDPR, Artificial Intelligence (AI), Identity & Access Management (IAM), Systems Development Life Cycle (SDLC), System and Organizational Controls (SOC), Intrusion Prevention System (IPS), Intrusion Detection System (IDS)