Cyber Security Analyst

Peer Consulting Resources - Long Island City, NY

Full-time

Onsite - Long Island City, NY

Professional, Scientific, and Technical Services

About the position

The Cyber Security Analyst role is focused on protecting the organization's information systems and data from cyber threats. This position involves identifying and mitigating complex IT threats, monitoring network traffic, and implementing security measures to safeguard cloud infrastructure. The analyst will work both on-site and remotely, collaborating with various teams to ensure compliance with security standards and best practices.

Responsibilities

• Identifying and mitigating complex IT technical threats to computer systems, networks, and data.
• Using technical IT tools and software to monitor, analyze, and defend against cyberattacks.
• Monitoring and analyzing network traffic, configuring firewalls, and conducting vulnerability assessments.
• Managing and protecting endpoints from malware, ransomware, and other threats.
• Investigating security incidents and implementing corrective actions to prevent future occurrences.
• Utilizing SIEM tools to collect, correlate, and analyze security event data for threat detection and responses.
• Monitoring and analyzing emerging threats, vulnerabilities, and attack vectors.
• Performing penetration testing.
• Keeping abreast of the latest security, privacy, and regulatory concerns.
• Advising on changes requested by third parties to security and privacy provisions.
• Collaborating with IT project management to design secure cloud infrastructure plans.
• Performing analysis on the security of cloud services such as AWS, Microsoft Azure, and Google.
• Providing subject matter expertise on cloud security, automation, and virtualization.
• Developing, documenting, and validating policies, processes, and procedures for cloud concepts.
• Developing cloud security metrics to analyze risks and identify opportunities to reduce vulnerabilities.
• Collaborating with the city's Cyber Command Center to obtain cloud solution dispositions.

Requirements

• A bachelor's degree in information technology or Computer Science.
• An industry recognized certification in information security and privacy (e.g., CISSP, GIAC, CISM, CISA, CIPP, CTPRP, CCSP).
• A minimum of three years of experience in an IT or computer-related field, with preference for those with over five years.
• At least three years of hands-on technical experience in cloud administration.
• At least one year of experience with Cloud Cybersecurity efforts aligned with the Risk Management Framework (RMF).
• Experience in Information & Network Security and cybersecurity-related occupations is preferred.
• Experience applying information security and privacy fundamentals and risk management frameworks such as NIST, FISMA, or ISO 27000.
• Technical IT expertise in network protocols, operating systems, programming languages, encryption techniques, and intrusion detection systems.
• Excellent oral and written communication skills to convey technical concepts to all levels of the organization.
• Proficiency in designing and implementing effective information security controls with minimal oversight.
• Strong organizational and prioritization skills.

Nice-to-haves

• Experience with vendor risk management tools.
• Knowledge of SSAE 16, SOC 2, Shared Assessments, and FedRAMP.