Cyber Security Analyst - 640837

About the position

The Cyber Security Analyst Level II position at the NYC Department of Consumer and Worker Protection (DCWP) involves implementing cybersecurity policies and standards to protect the agency's information technology systems. The role focuses on defending against cybersecurity incidents, analyzing threats, and ensuring compliance with citywide security protocols. The analyst will work on both day-to-day operations and cybersecurity projects, collaborating with various departments to enhance the agency's security posture.

Responsibilities

• Assist in liaising with the NYC Office of Technology and Innovation (OTI) to mitigate security threats in a timely manner.
• Respond to alerts and events that could threaten the Agency's information technology security posture.
• Characterize and analyze network traffic and server/cloud performance metrics to identify anomalous activity and potential threats.
• Complete appropriate patching on various systems, including workstations, servers, and network equipment.
• Analyze identified malicious activity to determine means, method, and details of exploitations against agency systems and applications.
• Evaluate commercial software for safe use by NYC DCWP in conjunction with OTI.
• Guide ITOPS in reimaging/restoring devices and equipment after an incident.
• Validate, analyze, investigate, and mitigate reported trouble tickets or incidents from OTI.
• Ensure DCWP staff are taking and following Cyber Security Training.
• Ensure new software is developed following citywide security standards and protocols.
• Follow up on incident reports and app scan reports to ensure proper mitigation is taking place.
• Conduct network monitoring and intrusion detection analysis using various computer network defense tools.
• Conduct log-based and endpoint-based threat detection to protect against threats.
• Correlate activity across assets and environments to identify patterns of anomalous or suspicious activity.
• Support the creation of business continuity/disaster recovery plans and conduct disaster recovery tests.
• Research emerging threats and vulnerabilities to aid in incident identification.
• Provide users with incident response support and facilitate forensic analysis when necessary.
• Perform security standards testing against IT equipment before implementation.
• Coordinate with OTI and ITOPS on providing IT inventory and performing security audits.

Requirements

• A baccalaureate degree from an accredited college with 24 semester credits in cyber security, network security, computer science, or related fields; or
• A four-year high school diploma and three years of satisfactory experience in relevant areas; or
• Equivalent education and/or experience as described above.

Nice-to-haves

• Experience with intrusion detection/prevention systems and firewalls.
• Familiarity with cloud security practices and technologies.
• Knowledge of business continuity and disaster recovery planning.

Benefits

• Remote work eligibility for up to 2 days per week.
• Comprehensive health insurance coverage.
• Retirement savings plan options.
• Paid holidays and vacation time.