Cyber Security Analyst II — Incident Response & Risk Lead

City of New York; New York (NY); On-site; USD 90,000 - 120,000; Full time

Job summary

City of New York is seeking an Information Security Analyst to support day-to-day security operations by monitoring alerts, investigating threats, and protecting city systems, networks, and data. This role covers access provisioning, log analysis, vulnerability reviews, and incident response for the pension platform.

Responsibilities include updating playbooks, policies, and dashboards, supporting risk assessments, and promoting security awareness across agencies.

Qualifications

• A baccalaureate degree with 24 credits in cyber security or related fields.
• Three years of related experience with a high school diploma.
• Equivalent combination of education and experience as described above, including cyber security credits or programming cert.

Responsibilities

• Information and Cyber Security: monitor and fine-tune security tools, understand networking, and communicate clearly.
• Business Continuity: assist in developing and testing the Business Continuity Plan and conducting tabletop exercises.
• Enterprise Risk Management: help identify and report security risks and support risk mitigation efforts.

Skills

Networking concepts

Applications & OS

Cybersecurity concepts

Security tools familiarity

Security certifications

Communication skills

Procedural adherence

Education

Bachelor's degree with 24 cyber security credits

High school diploma + 3 years related experience

Education/experience equivalent with 60 college credits + 24 cyber security credits or 625-hour programming cert

Job description

City of New York is seeking an Information Security Analyst to support day-to-day security operations by monitoring alerts, investigating threats, and protecting city systems, networks, and data. This role covers access provisioning, log analysis, vulnerability reviews, and incident response for the pension platform.

Responsibilities include updating playbooks, policies, and dashboards, supporting risk assessments, and promoting security awareness across agencies.