Cyber Security Analyst

$95,000 - $100,000/Yr

City of New York - New York, NY

Full-time - Entry Level

New York, NY

Executive, Legislative, and Other General Government Support

About the position

The Cyber Security Analyst position at the Department of Parks & Recreation involves safeguarding the agency's information technology systems against security threats. The role requires proactive monitoring, analysis, and response to potential security incidents, ensuring compliance with citywide security standards, and collaborating with the NYC Office of Technology and Innovation (OTI).

Responsibilities

• Assist Parks IT in liaising with the NYC Office of Technology and Innovation (OTI) to mitigate security threats.
• Respond to alerts and events that could threaten the Agency's information technology security posture.
• Characterize and analyze network traffic and server/cloud performance metrics to identify anomalous activity and potential threats.
• Complete appropriate patching on various systems, including workstations, servers, and network equipment.
• Analyze identified malicious activity to determine means, method, and details of exploitations against Agency systems and applications.
• Evaluate commercial software for safe use by NYC Parks in conjunction with OTI.
• Reimage/restore devices and equipment to previously known good states after an incident.
• Validate, analyze, investigate, and mitigate reported trouble tickets or incidents from OTI.
• Ensure Parks staff are taking and following Cyber Security Training.
• Ensure new software is developed following citywide security standards and protocols.
• Follow up on incident reports and app scan reports to ensure proper mitigation is taking place in a timely manner.
• Conduct network monitoring and intrusion detection analysis using various computer network defense tools.
• Conduct log-based and endpoint-based threat detection to protect against threats from multiple sources.
• Correlate activity across assets and environments to identify patterns of anomalous or suspicious activity.
• Support the creation of business continuity/disaster recovery plans and conduct disaster recovery tests.
• Research emerging threats and vulnerabilities to aid in incident identification.
• Provide users with incident response support and facilitate forensic analysis when necessary.
• Perform security standards testing against IT equipment before implementation.
• Coordinate with OTI and Parks IT on providing IT inventory and performing security audits.

Requirements

• A baccalaureate degree from an accredited college including or supplemented by twenty-four (24) semester credits in cyber security, network security, computer science, or related areas; or
• A four-year high school diploma and three years of satisfactory experience in relevant areas; or
• Equivalent education and/or experience as described above.

Nice-to-haves

• Experience in IT audit, enterprise risk management, or as a junior security operations analyst.
• Experience with regulatory compliance and information security management frameworks.
• Strong decision-making capabilities and problem-solving skills.
• Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), or Certified Information Security Manager (CISM).
• Familiarity with NIST Framework, McAfee/CrowdStrike/Rapid7, and Azure or AWS.

Benefits

• Public Service Loan Forgiveness eligibility.
• Diversity and inclusion commitment in the workplace.