Information Technology Specialist - A (Cybersecurity Analyst)

Queens, NY (Onsite)

The NYC School Construction Authority provides strong benefits and a structured work environment where you can apply cybersecurity-focused incident response skills to protect enterprise systems. This Information Technology role supports the management and maintenance of information technology systems, applications, and equipment, with responsibilities centered on preliminary incident coordination, identification, triage, and escalation to level two handlers.

What you’ll do

• Coordinate preliminary response activities for cyber security incidents across the company environment.
• Conduct preliminary identification and analysis of potential incidents.
• Perform triage activities including email review, log analysis, and analysis of network traffic and endpoint systems.
• Enrich security event data to streamline incident response using SIEM and other correlation technologies.
• Escalate and assign incidents to level two incident handlers, with clear documentation and reporting.
• Understand CSIRT functions and participate in triage of cyber security events.
• Receive and analyze alerts from enterprise sources to determine possible causes.
• Triaging security control logs, including firewall, proxy, host intrusion prevention systems, endpoint security, and application and system logs to identify possible threats to network security.
• Interact with users to gather business needs, determine appropriate IT solutions, and provide support for existing applications and technologies.
• Lead and help organize IT project resources, including vendors as appropriate, and develop IT project plans and schedules.
• Provide recommendations to senior management regarding responsible systems, technologies, applications, and/or equipment.
• Organize training for IT staff and/or users and perform related tasks as assigned.

Required qualifications

• Minimum 1-2 years hands-on experience in incident response and/or other IT-related fields tied to networking and enterprise information system environments.
• Interest in cybersecurity with a focus on enterprise security defense, network and application penetration testing, and incident response.
• Basic knowledge of network protocols, enterprise architecture, and common network logging functions.
• Good written and verbal communication skills.
• Ability to prioritize assignments in a complex work environment.
• Self-motivated and able to work independently.
• Detail-oriented and willing to learn.
• Industry certifications such as CEH, CISA, or Security+ are desirable.

A Bachelor’s degree in a technical field is preferred (Computer Sciences, Computer Technology, Information Systems Technology, or related fields).

Tools and technologies

• SIEM, SOAR
• Fire eye
• Microsoft Defender
• Splunk
• Armis

Compensation

• $64,258 - $125,427 per year
• Appointment Range: $64,258 - $109,067
• Incumbent Range: $73,897 - $125,427
• Subject to the Collective Bargaining Agreement, the appointment rate for newly hired employees or employees with less than two years of active City or SCA service may be 15% less than the applicable incumbent rate.

Benefits

• Medical: 100% employer paid for basic coverage
• Prescription drug options
• Dental & Vision coverage
• NYC Qualified Pension Plan (QPP)
• Optional retirement savings plans including 401K, 457, and IRA options
• Transit Check Program
• Public Loan Forgiveness Program
• Competitive Paid Time Off (PTO) benefits