Tier 1 JSOC Analyst/Information Technology Specialist 3 (Information Security), ref 5774-Tier 1

Minimum Qualifications

Bachelor’s degree* with at least 15 credit hours in cyber security, information assurance, or information technology; and two years of information technology experience, including one year of information security or information assurance experience**.

Substitution: bachelor’s degree candidates without at least 15 course credits in cyber security, information assurance, or information technology require an additional year of general information technology experience to qualify. Appropriate information security or information assurance experience may substitute for the bachelor’s degree on a year-for-year basis; an associate’s degree requires an additional two years of general information technology experience. Experience solely in information security or information assurance may substitute for the general information technology experience.

Preferred Qualifications

Bachelor's Degree with a concentration or major in Information Security, Cyber Security, Digital Forensics, Information Assurance, or a related field. Certifications in one or more of the following areas:Certificate in Computer Network Defense (e.g., GCIA, GCED, GDAT, GPPA, GCDA, GMON, GWEB, CND, ECIH, GCIH)Certificate in Cyber Threat Intelligence (e.g., CTIA, GCTI, CCIP, CSTIR) o Certificate in Digital Forensics (e.g., ACE, GCFA, GCFE, GREM, GNFA)Certificate in Penetration Testing (e.g., GPEN, CEH, GAWN, GWAPT, LPT) 2+ years’ experience in technical writing. 2+ years’ experience in the following areas:applying and implementing network and/or system securityinformation security incident responselog analysis (e.g., firewall logs, DNS logs, proxy logs, IPS/IDS logs)using SIEM technologies to support in-depth investigations Possess a working knowledge in the following areas:computer networks, intrusion detection systems, routers, firewalls, operating systems, network vulnerability assessments, web application vulnerability assessments, computer programming and scriptingnetwork security solutions (e.g., intrusion detection/prevention systems, firewalls) o system administrationvulnerability managementcomputer programming and scriptingInformation Security (CIA triad, Information Classification, Risk Management, Incident Response, Vulnerability Management, Security Architecture & Engineering) Excellent speaking and writing skills. Able to clearly articulate information technology and information security concepts to a varied audience to facilitate wide understanding. Demonstrated critical thinking, problem solving and analytical skills.

Duties Description

The position will report to the NYS ITS Director of Cyber Command in support of the Joint Security Operations Center (JSOC) activities. The New York JSOC will serve as a First-of-its-Kind hub for data sharing and cyber coordination across New York State, New York City, the five major upstate cities, local and regional governments, critical infrastructure and federal partners. The incumbent will be a member of a team that performs intake and initial triage of cyber security events. They will receive computer security alerts from various NYS infrastructures and will work to review, classify, prioritize, and escalate these alerts to the appropriate stakeholders.

Duties Include, But Are Not Limited To

Participate in the identification, triage, and escalation of security events. Monitor multiple sources (phone, email, automated systems, etc.) for new security events. Follow all established procedures, workflows, and tasks related to JSOC activities. Ensure identified incidents are escalated efficiently. Ensure that tickets are properly created and tracked in the ticket management system, and in a timely manner. Ensure that trusted third party notifications are forwarded to the appropriate stakeholders. Participate in the development and revision of standard operating procedures and workflows. Create written technical reports and executive summaries related to cyber security incidents and events. Maintain an adequate level of current knowledge and proficiency in information security through annual Continuing Professional Education (CPE) credits directly related to information security. Perform the full range of supervisory responsibilities and additional duties as assigned.

Additional Comments

Additional details on work shift will be discussed at time of interview.

Background check and fingerprinting are required.

Benefits of Working for NYS

Generous benefits package, worth 65% of salary, including:

Holiday & Paid Time Off Thirteen (13) paid holidays annually Up to thirteen (13) days of paid vacation leave annually Up to five (5) days of paid personal leave annually Up to thirteen (13) days of paid sick leave annually for PEF Up to three (3) days of professional leave annually to participate in professional development

Health Care Benefits

Eligible employees and dependents can pick from a variety of affordable health insurance programs Family dental and vision benefits at no additional cost

Additional Benefits

New York State Employees’ Retirement System (ERS) Membership NYS Deferred Compensation Access to NY 529 and NY ABLE College Savings Programs, as well as U.S. Savings Bonds Public Service Loan Forgiveness (PSLF) Up to 50% telecommuting And many more.