Cybersecurity Incident Analyst: Respond & Defend

NYC School Construction Authority; New York (NY); Presencial; USD 64 000 - 109 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Medical benefits (employer-paid)

Prescription drug options

Dental & Vision coverage

Pension plan

401(k), 457, and IRA options

Transit check

Public Loan Forgiveness

Competitive PTO

Resumo da oferta

NYC School Construction Authority seeks a Cybersecurity Analyst to coordinate preliminary response activities for cyber incidents across the company. The role focuses on incident triage, log analysis, and escalation to second-line handlers, with working knowledge of SIEM, SOAR, FireEye, and Microsoft Defender.

Qualifications include a bachelor’s degree in a technical field, 1–2 years in incident response or IT-related networking, and strong written/verbal communication.

Qualificações

• Bachelor's degree in a technical field preferred.
• Interest in cybersecurity with focus on enterprise security defense, network/app penetration testing, and incident response.
• Industry certifications such as CEH, CISA, Security+ are desirable.

Responsabilidades

• Interacts with users to gather business needs and determine IT solutions.
• Performs triage of cyber security incidents and analyzes alerts.
• Triage logs from firewall, proxy, endpoint security, and other sources to identify threats.
• Enriches security event data and escalates incidents to level two handlers.
• Maintains documentation and creates reports on incidents and responses.
• Organizes training and develops IT project plans and schedules.

Conhecimentos

Incident response

Log analysis

Endpoint security

Network monitoring

SIEM/SOAR usage

Formação académica

Bachelor's degree in a technical field

Ferramentas

SIEM

SOAR

FireEye

Microsoft Defender

Splunk

Armis

Descrição da oferta de emprego

NYC School Construction Authority seeks a Cybersecurity Analyst to coordinate preliminary response activities for cyber incidents across the company. The role focuses on incident triage, log analysis, and escalation to second-line handlers, with working knowledge of SIEM, SOAR, FireEye, and Microsoft Defender.

Qualifications include a bachelor’s degree in a technical field, 1–2 years in incident response or IT-related networking, and strong written/verbal communication.