Cybersecurity Analyst Levels 3-5

$95,929 - $127,050/Yr

Metropolitan Transportation Authority - New York, NY

Full-time - Mid Level

New York, NY

Transit and Ground Passenger Transportation

About the position

The Cybersecurity Analyst position at the Metropolitan Transportation Authority (MTA) is designed to provide critical technical expertise in the detection, analysis, and response to cybersecurity events. This role involves early detection, prevention, response, containment, and guidance for remediation of threats against the MTA, operating on a 24/7 basis. Analysts will work within the Cyber Security Operation Center (CSOC) and utilize various technology and analytic tools to monitor security incidents, conduct risk assessments, and collaborate with multiple stakeholders to enhance the overall security posture of the organization.

Responsibilities

• Conduct security monitoring and intrusion detection analysis using various technology and analytic tools.
• Correlate events and activities across systems to identify trends of unauthorized use.
• Review alerts and data from sensors and document formal, technical incident reports.
• Respond to computer security incidents according to established policies and procedures.
• Provide technical guidance to first responders for handling information security incidents.
• Communicate investigation findings to relevant business units to improve information security posture.
• Validate and maintain incident response plans and processes to address potential threats.
• Monitor relevant information sources to stay updated on current attacks and trends.
• Analyze potential impact of new threats and communicate risks to detection engineering functions.
• Perform root-cause analysis to document findings and participate in root-cause elimination activities.

Requirements

• Bachelor's degree in computer science or related fields.
• 2+ years of relevant experience for Level 3; 3+ years for Level 4; 5+ years for Level 5.
• Understanding of Operating Systems and Hardware.
• Advanced understanding of TCP/IP and Internet technologies.
• Scripting or programming skills (PERL, Python, PowerShell) preferred.
• CISSP or other advanced security-related certification preferred but not required.

Nice-to-haves

• Certifications in technology subdomains (Cloud, Applications, Infrastructure, Security Technology) preferred.
• Experience with installing, maintaining, and troubleshooting technology systems.

Benefits

• Eligible for telework (currently 2 days per week).
• Competitive salary range based on level of experience.