Cybersecurity Incident Analyst: Protect NYC Schools

NYC School Construction Authority (SCA); New York (NY); On-site; USD 64,000 - 109,000; Full time

Benefits offered by this job

Medical (employer paid)

Prescription drug options

Dental & Vision coverage

NYC Qualified Pension Plan (QPP)

401K, 457 and IRA options

Transit Check Program

Public Loan Forgiveness Program

Competitive PTO

Job summary

NYC School Construction Authority (SCA) is seeking a Cybersecurity Analyst to coordinate preliminary response activities for cyber security incidents across the company environment. The role focuses on triage, data enrichment, and escalation to level two incident handlers, ensuring timely and effective incident handling.

The candidate should understand incident response processes, network investigative techniques, SIEM/SOAR technologies, and tools such as FireEye, Microsoft Defender, Splunk, and

Qualifications

• Minimum 1-2 years’ hands-on experience in incident response or related IT fields.
• Bachelor’s degree in a technical field preferred.
• Industry certifications such as CEH, CISA, Security+ are desirable.

Responsibilities

• Interacts with users to gather business needs and determine IT solutions.
• Provides solutions to IT issues and user requests.
• Drives IT projects and coordinates vendors as needed.
• Leads IT recommendations to senior management on systems and tools.
• Organizes IT staff training and maintains project plans.
• Maintains documentation and generates reports.
• Triage security events and enrich data using SIEM and correlation technologies.

Skills

Incident response

Networking

Information security

Communication

Education

Bachelor's degree in a technical field

Tools

SIEM

SOAR

FireEye

Microsoft Defender

Splunk

Armis

Job description

NYC School Construction Authority (SCA) is seeking a Cybersecurity Analyst to coordinate preliminary response activities for cyber security incidents across the company environment. The role focuses on triage, data enrichment, and escalation to level two incident handlers, ensuring timely and effective incident handling.

The candidate should understand incident response processes, network investigative techniques, SIEM/SOAR technologies, and tools such as FireEye, Microsoft Defender, Splunk, and