Analyst, AACU Patch and Vulnerability Management

Intro

Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you’ll travel the world, grow your expertise and become the best version of you.  As you embark on a new journey, you’ll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life.  Feel free to enrich both your personal and work life and hop on board!

Why you'll love this job

This job is within the American Airlines Credit Union.  It supports the patch and vulnerability management (PVM) processes across American Airlines Credit Union’s technology infrastructure. The role is responsible for performing patching activities, analyzing vulnerability data, and assisting in remediation efforts to ensure security, compliance, and operational continuity. Other responsibilities include overseeing the governance and compliance aspects of the Patch and Vulnerability Management (PVM) program, performing tracking, reporting, evaluation and escalation regarding the status of the PVM program, facilitating governance and steering committees, and prioritizing patch risks over time to ensure the organization's security posture remains robust and compliant with industry standards.

What you'll do

• Execute patch deployment activities across servers, desktops, network devices, and other IT assets under the guidance of the PVM Manager
• Collaborate with Information Security, Infrastructure, and Application teams to coordinate patching efforts based on risk assessments and criticality
• Utilize patch management tools (e.g., Microsoft SCCM, WSUS, Ivanti, Tanium) to apply and verify patches in accordance with defined schedules
• Use vulnerability scanning tools (e.g., Tenable Nessus, Qualys, Rapid7) to assist in identifying and assessing system vulnerabilities
• Assist in analyzing scan results, tracking remediation progress, and escalating high-risk issues to the manager or relevant teams
• Monitor and report on the status of the PVM program, including patch compliance metrics, vulnerability remediation timelines, and risk assessments
• Develop and maintain dashboards and reports to provide visibility into the PVM program's effectiveness and areas for improvement
• Facilitate governance and steering committee meetings related to vulnerability management, ensuring alignment with organizational objectives and regulatory requirements
• Track aging vulnerabilities and coordinate with relevant teams to ensure timely remediation, escalating issues as necessary
• Assist in developing and enforcing policies, standards, and procedures related to patch and vulnerability management
• Stay informed about emerging threats, vulnerabilities, and regulatory changes that may impact the organization's security posture
• Support audits and assessments by providing necessary documentation and evidence of compliance with security frameworks such as PCI, NCUA, FFIEC, and others
• Help develop and maintain compliance reports and dashboards that monitor patch status and adherence to SLAs
• Participate in planning and execution of maintenance windows and rollback testing
• Document patching activities, exceptions, and remediation steps for audit and compliance purposes
• Stay current on relevant threat intelligence, vendor patch releases, and industry best practices
• Maintain awareness of regulatory standards (e.g., PCI, NCUA, FFIEC) related to patch and vulnerability management
• Participate in continuous improvement initiatives to enhance automation, accuracy, and efficiency in patching workflows
• Support after-hours patching and emergency response efforts as needed
• Perform other duties as assigned
• The selected candidate will be responsible for ensuring the security and confidentiality of all account and related information which is part of their work and for ensuring that his/her work is in compliance with all applicable laws and regulations including, but not limited to, the Bank Secrecy Act.

All you'll need for success

Minimum Qualifications- Education & Prior Job Experience

• High school diploma or GED
• Four or more years of technology work experience directly relevant to the listed duties; college coursework in Computer Science, Information Security or a related field may be considered to offset a portion of the required work experience
• Hands-on experience with patch deployment and/or vulnerability management tools
• Basic knowledge of operating systems (Windows/Linux) and networking concepts
• Understanding of patching processes and security vulnerabilities

Preferred Qualifications- Education & Prior Job Experience

• Bachelor’s Degree in Computer Science, Information Security or a related field
• Familiarity with ITIL change management and production environment practices
• Exposure to cloud environments and patching in hybrid infrastructures

Skills, Licenses & Certifications

• Skilled in Microsoft Office software (e.g., Word, Excel, Access, PowerPoint) gained through either work experience with the software or education and hands-on use of the software
• Experience with basic reporting/dashboard tools
• Technical understanding of operating systems, network fundamentals, and endpoint security
• Strong analytical skills to assess vulnerability risk and prioritize action
• Strong communication skills to coordinate with technical teams and document findings
• Ability to effectively collaborate and function as an integral part of a team
• Detail-orientation with strong organizational and time management skills
• Ability to work independently with minimal supervision, self-motivate and follow established procedures
• Flexibility to participate in after-hours support and critical updates
• Ability to maintain satisfactory performance and attendance
• Ability to pass applicable American Airlines and Credit Union pre-hire compliance checks

What you'll get

Feel free to take advantage of all that American Airlines has to offer: 

• Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network.
• Health Benefits: On day one, you’ll have access to your health, dental, prescription and vision benefits to help you stay well. And that’s just the start, we also offer virtual doctor visits, flexible spending accounts and more. 
• Wellness Programs: We want you to be the best version of yourself – that’s why our wellness programs provide you with all the right tools, resources and support you need.
• 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year.
• Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more

Feel free to be yourself at American

From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Employee Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world.

Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life’s journey? Feel free to be yourself at American.