Cyber Security Analyst

Nyc Parks - New York, NY

Full-time - Entry Level

New York, NY

About the position

The Cyber Security Analyst at NYC Parks is responsible for defending against cybersecurity incidents, identifying, analyzing, communicating, and containing incidents as they occur. This role requires a strong technical background, excellent communication skills, and familiarity with both traditional and emerging security technologies. The position involves day-to-day operations as well as participation in cybersecurity-related projects.

Responsibilities

• Assist Parks IT in liaising with the citywide NYC Office of Technology and Innovation (OTI) to mitigate security threats in a timely manner.
• Respond to alerts and events that could threaten the Agency's information technology security posture.
• Characterize and analyze network traffic and server/cloud performance metrics to identify anomalous activity and potential threats.
• Complete appropriate patching on various systems, including workstations, servers, and network equipment such as switches and routers.
• Analyze identified malicious activity to determine means, method, and details of exploitations against agency systems and applications.
• Evaluate commercial software in conjunction with OTI for safe use by NYC Parks.
• Reimage/restore devices and equipment to previous known good states after an incident.
• Validate, analyze, investigate, and mitigate reported trouble tickets or incidents from OTI.
• Ensure Parks staff are taking and following Cyber Security Training.
• Ensure new software is developed following citywide security standards and protocols.
• Follow up on incident reports and app scan reports to ensure proper mitigation is taking place in a timely manner.
• Conduct network monitoring and intrusion detection analysis using various computer network defense tools.
• Conduct log-based and endpoint-based threat detection to protect against threats from multiple sources.
• Correlate activity across assets and environments to identify patterns of anomalous or suspicious activity.
• Support the creation of business continuity/disaster recovery plans, including conducting disaster recovery tests and publishing test results.
• Research emerging threats and vulnerabilities to aid in the identification of incidents.
• Provide users with incident response support, including mitigating actions and facilitating forensic analysis when necessary.
• Perform security standards testing against computers or IT equipment before implementation.
• Coordinate with OTI and Parks IT on providing IT inventory and performing Parks security audits.

Requirements

• A baccalaureate degree from an accredited college including or supplemented by twenty-four (24) semester credits in cyber security, network security, computer science, or a related area; or
• A four-year high school diploma and three years of satisfactory experience in relevant areas; or
• Education and/or experience equivalent to the above, with college education substituting for required experience.

Nice-to-haves

• Experience in IT audit, enterprise risk management, penetration testing, or as a junior security operations analyst.
• Experience with regulatory compliance and information security management frameworks.
• Strong decision-making capabilities and problem-solving skills.
• Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), or Certified Information Security Manager (CISM).
• Familiarity with CISA Binding Operational Directives and NIST Framework.

Benefits

• Health Care Coverage
• Pension
• Professional Development
• Employee discounts on attractions
• Free membership to recreation centers