SOC Analyst (IT Sr Associate 1) - Provisional

$91,298 - $91,298/Yr

CUNY - New York, NY

Full-time - Mid Level

Hybrid - New York, NY

Educational Services

About the position

The I.T. Senior Associate position at CUNY involves performing highly complex professional work in various technology-related disciplines. The role requires a range of responsibilities in development, programming, communications, and technical support, depending on the specific needs of the Information Technology area. I.T. Senior Associates are expected to diagnose, evaluate, oversee, and resolve complex projects, exercising independent initiative and judgment. They may also serve in lead roles on complex programs or projects and can act as direct supervisors of a unit or group. In this role, the I.T. Senior Associate will be part of the Office of Computing and Information Services (CIS), which supports the IT and telecommunications needs of CUNY's 25 colleges. The CIS is responsible for enterprise IT and applications, developing new technologies, maintaining the university's network, and operating the Data Center and Service Desk. The office also safeguards IT assets, operates the Cyber Security Operations Center (SOC), and develops disaster recovery plans. The SOC is crucial for monitoring, detecting, analyzing, and responding to cybersecurity threats in real-time, ensuring the protection of CUNY's IT assets and sensitive information. The I.T. Senior Associate will report to the SOC Director and will be responsible for assessing, securely designing, maintaining, and sustaining CUNY's wide area and local area networks. The incumbent will implement remediation for identified security gaps and participate in strategic projects aimed at modernizing CUNY's network infrastructure to combat cybersecurity threats. This position is hybrid, allowing for both remote and on-site work, and is provisional, requiring passing a civil service examination for permanent status.

Responsibilities

• Coordinates computer security incident responses with and for colleges and the CUNY enterprise; aligns incident response procedures and makes recommendations regarding business processes and practices to reduce risks.
• Writes detailed incident response reports and documents the nature of incidents and actions taken.
• Provides support to campus IT staff and Information Security customers, assisting with reducing incidents and vulnerabilities by performing campus security risk assessments.
• Partners with management to establish consistent processes to ensure the health and stability of cybersecurity platforms and configurations based on observed security patterns.
• Analyzes security logs to determine and identify threats and potential patterns of malicious activity.
• Develops tools, scripts, and queries to look for certain anomalous behavior on the network.
• Creates documentation and runbooks for Security Operations Center (SOC) activities.
• Provides and maintains service to users and website operators, and incident response team to help share cybersecurity knowledge.
• Operates and reviews maintenance of all cybersecurity tools, software suites, devices, appliances, and systems.
• Coordinates development of cyber security assessment practice services and simulates security threats to achieve specific goals.
• Participates in incident response drills and exercises.
• Collaborates proactively with technology partners/stakeholders to ensure all technology security components are integrated into CUNY enterprise architecture.
• Develops ongoing technology risk reports, monitors key trends, and defines metrics to regularly measure control effectiveness.

Requirements

• High School Diploma, G.E.D., or equivalent.
• Ten years of full-time work experience in a computer or technology-related position; or an Associate's degree plus eight years of experience; or a Bachelor's degree plus six years of experience in a computer or technology-related position.
• Demonstrated English Language proficiency.
• A Motor Vehicle Driver's license, valid in New York State, may be required for some positions.

Nice-to-haves

• General knowledge of application installation, configurations, and deployments in enterprise environments.
• Knowledge of cybersecurity systems design process, technical mitigation, risk management tools, techniques, methodologies, frameworks, evaluations, assessments, and reporting.
• Knowledge of network, applications, and information security technical vulnerability testing and tools.
• Ability to work effectively in designing, building, and deploying automation for vulnerability discovery efforts and device security compliance.
• Relevant soft skills to influence a cross-functional team to accomplish goals.
• Strong written and verbal skills to report relevant risks to diverse groups across all levels of university constituencies.
• Proficiency with all Microsoft Office Suite tools (Word, Excel, Visio, Outlook, PowerPoint, and Teams).

Benefits

• Health plans
• Competitive retirement/pension benefits
• Savings plans
• Tuition waivers for CUNY graduate study
• Generous paid time off
• Access to academic, arts, and athletic programs on campuses
• Opportunity to participate in a diverse academic community.