Job Responsibilities include but are not limited to:

• Continuous Monitoring of system activities from a variety of sources, respond to alerts, and investigate anomalies and suspicious activities.
• Prepare and track support tickets for vulnerability remediations, and interface with technical staff to ensure security objectives are achieved.
• Review suspected phishing submissions and report on any trends.
• Assist in Incident Response activities as an Incident Reporter and/or Incident Handler as defined by the organization's Incident Response Plan.
• Interface with security vendors to ensure all applications and services are configured correctly and functioning optimally.
• Monitor threat intelligence and investigate new Common Vulnerabilities and Exposures (CVEs) that could impact the security of the NYC data and systems.
• Provide training and guidance to employees on cybersecurity best practices.
• Collaborate with other departments to ensure security measures are integrated into all aspects of the business.
• Perform remediation work related to external assessments of NYC Security posture (Compromise assessment, penetration test).
• Prepare and deliver weekly senior leadership metric reports on KPIs within the Vulnerability Management and Security Operations Center
• Perform end of year compliance and audit assessments - User access review, State & Federal Surveys, Insurance questionnaires
• Proactively monitor health of all Cybersecurity technology deployments and agents to ensure visibility of NYC's systems and networks
• Create documentation and contribute to knowledge base of Security Operations Center & Vulnerability Management Program to ensure continuity of operations
• Stay up to date with the latest cybersecurity trends and threats.
• Critical thinking with the ability to correlate technical information from a variety of sources and derive trends and other meaningful interpretations.
• Ability to diagnose networking and operating system events and formulate strategies to block and prevent attacks.
• Ability to interpret cybersecurity control objectives and measure real world effectiveness of those controls.
• Produce meaningful reports from a variety of sources.
• High degree of initiative, dependability, and ability to work with little supervision.
• Effective oral & written communication skills, including the ability to present technical information to non-technical audiences.
• Other reasonable duties as assigned.

Requirements:

Minimum Requirements for Cybersecurity Analyst (Jr.)

• Minimum of two years of experience in information security.
• Bachelor's degree in an information security or technology-related field, or equivalent work or education-related experience.
• Entry-level cybersecurity certification such as CompTIA Security+, GIAC Information Security Fundamentals (GISF), or (ISC)2 Systems Security Certified Practitioner (SSCP).
• Knowledge of information security management frameworks such as the NIST Cybersecurity Framework, NIST Special Publication 800-171, or CIS 18 Critical Security Controls.

This position is contingent on the satisfactory completion of a background check.

Preferred Requirements

Don't meet every requirement? At NY Creates we are dedicated to building a welcoming workplace. If you are excited about working for NY Creates but your experience doesn't exactly align perfectly with the job description, we encourage you to apply anyway, you might still be a perfect fit or a fit for another role at NY Creates.

Benefits

• Medical, Vision, and Dental
• Competitive Pay and PTO
• Flexible Heath Spending and Dependent Care Accounts
• Basic / Optional Life Insurance
• Post-Retirement Health Insurance
• Employer contribution of 7% of earnings to a Basic Retirement plan after meeting one year of service.
• Optional employee contributed retirement account

Location: 257 Fuller Road, Albany, NY 12203

Salary Range: $60,000 - $75,000

**Posted salary rates are determined upon experience and education

Additional Information:

NOTE: Some positions require access to export-controlled commodities, technical data, technology, software, or restricted programs where U.S. Government authorization may be required.

For positions requiring such access, offers of employment are contingent upon the employer being able to obtain the necessary authorization, including, if required, an export license from the U.S. Department of Commerce's Bureau of Industry and Security, the U.S. Department of State's Directorate of Defense Trade Controls, or other government agencies. The decision to pursue an export license application is at The Research Foundation for SUNY's sole discretion. Proof of status may be required prior to employment in connection with necessary authorizations.

Employment is with the Research Foundation for SUNY. The Research Foundation is an Equal Opportunity Employer, including individuals with disabilities and protected veterans.

In compliance with the Americans with Disabilities Act (ADA), if you have a disability and require a reasonable accommodation to apply please call Human Resources at 518-437-8686.

PDN-a08bde49-193b-46d4-9339-9b86278943c2