Cybersecurity Operations Center Analyst

$76,200 - $76,200/Yr

New York Independent System Operator - Rensselaer, NY

Full-time - Entry Level

Rensselaer, NY

Utilities

About the position

The Cybersecurity Operations Center Analyst at NYISO is responsible for providing continuous security monitoring and response to cyber threats and incidents affecting the organization's computing environments. This role is critical in ensuring the reliability of the electricity system by collaborating with IT groups to oversee security measures and keep stakeholders informed about evolving threats. Analysts will work in shifts to maintain 24x7x365 coverage of the Cybersecurity Operations Center (CSOC).

Responsibilities

• Provide around the clock monitoring, analysis, and response to cybersecurity events and trends of security log data.
• Maintain records of security monitoring and incident response activities, utilizing case management and ticketing technologies.
• Provide incident response support, including triage and remediation.
• Investigate and document events to aid incident responders and managers on security issues.
• Recognize potential, successful, and unsuccessful intrusion attempts and escalate intrusions to the CSIRT.
• Analyze sourced intelligence of attacker tactics, techniques, and procedures (TTPs).
• Provide threat and vulnerability research and analysis.
• Execute defined standard operating procedures and event job aides for successful task completion.
• Integrate and share information with other analysts.
• Recommend changes to Standard Operating Procedures and other similar documents.
• Generate end-of-shift reports for documentation and knowledge transfer to subsequent on-shift personnel.
• Other duties as assigned.

Requirements

• At least 1 year of experience as a Cyber Security Analyst or related role.
• Knowledge of various security methodologies and processes, and technical security solutions (firewall, intrusion detection systems, and SIEM platforms).
• Knowledge of TCP/IP Protocols, network analysis, and network/security fundamentals.
• Knowledge of common Internet protocols and web technologies.
• Ability to multi-task, prioritize, and manage time effectively.
• Strong attention to detail.
• Excellent interpersonal skills and professional demeanor.
• Excellent verbal and written communication skills.
• Excellent customer service skills.
• Proficient in Microsoft Office.

Nice-to-haves

• Experience administrating various operating systems (e.g., Windows, OS X, Linux).
• Working knowledge of network communications and routing protocols (e.g., TCP, UDP, ICMP, BGP, MPLS).
• Experience working with various event logging systems and proficiency with security event log analysis.
• Previous experience with SIEM platforms that perform log collection, analysis, correlation, and alerting.
• Experience in analyzing net flow data and packet capture (PCAP).

Benefits

• Competitive salaries
• Comprehensive benefits package
• Flexible work arrangements (both in-office and remote)
• Innovative reward programs