Cyber Security Administrator

Suffolk County Water Authority; New York; On-site; USD 110,000 - 120,000; Full time

Job summary

A leading utility authority is seeking a cybersecurity expert to enforce security policies, manage incidents, and guide security strategy across cloud environments. This key role entails developing security measures, coordinating responses to vulnerabilities, and ensuring compliance with best practices. Candidates should have a robust educational background and experience spanning five years, along with strong analytical and communication skills. Competitive salary aligned to experience and qualifications.

Qualifications

• 5 years of experience in security and incident response required; 7 years preferred.
• Proficiency in cloud security, especially with Office 365 and Azure.
• Industry certifications like CISM or CEH are a plus.

Responsibilities

• Configure security policies and ensure up-to-date security tools.
• Develop and maintain an incident response plan.
• Conduct internal and external vulnerability scans.

Skills

Cybersecurity frameworks

Threat intelligence

Incident response

Problem-solving

Analytical skills

Communication

Education

Bachelor's degree in computer science

Master's degree in computer science

Tools

SIEM

IDS/IPS

Firewalls

Endpoint protection solutions

Job description

Responsibilities include:

• Configure and enforce security policies, including conditional access and multi-factor authentication (MFA), to ensure secure application and data access.
• Ensure security tools and systems (firewalls, antivirus, encryption) are up-to-date and properly configured.
• Develop, implement, and maintain an incident response plan and business continuity plan, ensuring rapid detection, containment, and resolution of security incidents.
• Investigate security incidents, coordinate with IT and other departments to remediate vulnerabilities, and document incidents with root cause analysis and corrective measures.
• Conduct internal and external vulnerability scans, apply security patches, and implement system hardening techniques to mitigate risks.
• Monitor security events in real-time using advanced threat detection tools, conducting forensic analysis when necessary.
• Develop and implement security strategies to protect enterprise infrastructure from cyber threats and ensure compliance with frameworks such as NIST and ISO 27001.
• Manage Identity and Access Management (IAM) solutions, including privileged access management (PAM), enforcing least privilege policies, and overseeing user provisioning and deprovisioning.
• Implement Data Loss Prevention (DLP) solutions to safeguard sensitive data and prevent unauthorized exfiltration.
• Configure and maintain Security Information and Event Management (SIEM) systems for centralized logging, threat detection, and analysis.
• Oversee network security by managing Intrusion Detection and Prevention Systems (IDS/IPS), VPNs, and Zero Trust security models.
• Conduct regular incident response testing to ensure readiness for potential cyber threats.
• Assess third-party vendor security practices to ensure compliance with internal security policies and industry best practices.
• Monitor and manage cloud security posture across Azure and Office 365, ensuring compliance with security policies and best practices.
• Work closely with IT teams to design and implement security solutions for cloud and on-premises environments.
• Conduct security awareness training sessions to educate employees and enforce best practices.
• Maintain detailed records of security incidents, risk assessments, and compliance audits, preparing reports for senior management.
• Ensure adherence to security.
  
  

Qualifications:

• 5 years of experience in an enterprise security and incident response role, 7 years preferred.
• Bachelor’s degree in computer science required, Master’s degree preferred.
• Strong understanding of cybersecurity frameworks, threat intelligence, and best practices.
• Experience with security tools such as SIEM, IDS/IPS, firewalls, and endpoint protection solutions.
• Proficiency in cloud security, particularly in Office 365, Azure, and other cloud environments.
• Ability to conduct risk assessments, penetration testing, and vulnerability management.
• Strong incident response and forensic analysis skills.
• Experience with scripting and automation tools such as PowerShell, Python, or Bash.
• Excellent problem-solving and analytical skills with the ability to work independently and collaboratively.
• Strong communication skills with the ability to convey complex security concepts to non-technical stakeholders.
• Industry certifications such as CISM, CEH, or Microsoft Security certifications are a plus.
  
  

*The Authority may accept an equivalent combination of education and experience to meet the requirements*

Interested candidates should submit their application and resume, including salary requirements via the SCWA website (www.scwa.com) and click on “Career Opportunities”. Salary is commensurate with education and experience within the range of $110,000-120,000. Salary expectations must be disclosed on application.

(The Authority shall not employ relatives of employees as defined to mean an employee's spouse, child, stepchild, stepparent or direct descendant of grandparents of the employee as defined in the New York State General Municipal Law 810.)