Information Technology Specialist Cybersecurity Analyst

Build your career while building NYC schools!

The Information Technology Division manages the technology infrastructure which supports business operations: including personal computers, laptops, servers, printers, the internal network which connects them all, telephones, smartphones,and conference room equipment. By providing direct support to end usersvia the IT Service Desk, onsite office and jobsite support, and Training Classes IT supports application software (purchased such as Oracle, Primavera, Microsoft, and custom-written applications such as ORCMS, PTS, IEH, etc.).

The Manager, Information Technology - A (Cybersecurity Analyst) manages and maintains information technology systems, applications, and/or equipment.

The Cybersecurity Analyst will coordinate the preliminary response activities for cyber security incidents across the company environment. The successful candidate will focus on preliminary identification and analysis of potential cyber security incidents. The successful candidate will perform triage functions such as email review, log analysis, analysis of network traffic and endpoint systems, enrich data, and will be responsible for escalating and assigning the incidents to level two incident handlers.

Candidates should have a basic understanding of incident response processes, network investigative techniques, and cyber security trends and issues along with SIEM and SOAR technologies and uses. Candidates should have a basic working knowledge of Fire eye, Microsoft Defender, Splunk, Armis.

Responsibilities include:

• Interacts with users to gather business needs and to determine appropriate information technology solutions.
• Provides solutions to users regarding information technology issues and/or needs.
• Provides support in the use of existing applications and technologies, including resolving problems and responding to user requests for support.
• Identifies and leads information technology project resources, including vendors as appropriate.
• Makes information technology recommendations to senior management regarding systems, technologies, applications, and/or equipment for which he/she is responsible.
• Organizes the provision of training to information technology staff and/or users.
• Develops and maintains information technology project plans and schedules.
• Performs related tasks, as assigned.

Additional responsibilities:

• Understand CSIRT functions and participates in the triage of cyber security events.
• Receive and analyze alerts from various sources within the enterprise and determine possible causes of such alerts.
• Triage logs from various security controls, including, but not limited to, firewall, proxy, host intrusion prevention systems, endpoint security, application, and system logs, to identify possible threats to network security.
• Enrich security event data to streamline the incident response process using SIEM and other correlation technologies.
• Perform incident triage, documentation, and escalation of appropriate incidents to cyber security incident handlers.
• Maintain proper documentation and creation of reports.

Minimum requirements:

• Minimum 1-2 years’ hands‑on experience working in incident response and/or other IT‑related fields tied to networking and enterprise information system environments.
• Bachelor’s degree in a technical field preferred.
• Interest in the cyber security field including a specific focus on the following domains: enterprise security defense, network and application penetration testing, and incident response.
• Basic knowledge of network protocols, enterprise architecture, and common network logging functions.
• Good written and verbal communications skills are a must.
• Ability to prioritize assignments and efforts in a complex…