Cyber Security Analyst

Srisys - New York, NY

Full-time - Entry Level

New York, NY

Professional, Scientific, and Technical Services

About the position

The Cyber Security Analyst will join the Information Security department to provide cybersecurity policy and technical advisory services, perform vendor risk assessments, and support compliance activities. The role requires strong technical skills in cybersecurity technologies, excellent communication abilities, and the flexibility to handle multiple assignments and be available for emergency response activities.

Responsibilities

• Provide cybersecurity policy and technical advisory services to internal business process area project teams.
• Perform vendor risk assessments in support of internal business process area project teams.
• Support Critical Infrastructure Protection (CIP) readiness and compliance activities.
• Generate regular risk management reports using various security technologies.
• Perform internal vulnerability assessments and ensure remediation of vulnerabilities for business process area infrastructure and web applications.
• May be requested to perform internal penetration testing.
• Support incident response activities.
• Assist on RFP specifications, participate in the technical evaluation of contractor proposals, software, hardware, or services.
• Conduct field investigations, prepare analysis, and provide solutions to cyber security concerns and requests.
• Willing to be flexible and take on technically challenging and complex assignments when requested to do so.
• Participate in the Company’s emergency management processes and storm plans.

Requirements

• High School Diploma/GED with 3 to 5 years of Information Security work experience.
• Associate degree or equivalent technical certification preferred (Computer Science or Engineering with 2 years equivalent work experience).
• Strong technical skills across cyber security technologies including scripting skills and an understanding of network traffic flows and vulnerability management.
• Excellent written and verbal communication skills.
• Strong presentation skills.
• Computer literacy with proficiency in Windows Server, Windows 7/8/10, Microsoft Office Suite (especially Word, Excel, and PowerPoint).
• Experience with intrusion detection/prevention systems and web application/database firewall systems preferred.
• Understanding of Critical Infrastructure Protection (CIP) regulatory requirements desirable.

Nice-to-haves

• Experience with incident response activities.
• Experience in performing internal penetration testing.

Benefits

• Contract to hire opportunity.
• Flexible work assignments.
• Opportunity to work in a dynamic environment.