Incident Response Analyst

New York State Technology Enterprise Corporation (NYSTEC); City of Rome (NY); On-site; USD 79,000 - 109,000; Full time

Job summary

An established industry player is seeking an Incident Response Analyst to enhance its cybersecurity posture. This role involves collaborating with cross-functional teams to detect and respond to incidents, ensuring the resilience of critical business functions. You will lead efforts in developing security documents, analyzing threats, and implementing business continuity plans. If you are passionate about cybersecurity and thrive in a collaborative environment, this position offers a unique opportunity to make a significant impact in a supportive and innovative organization.

Qualifications

• Knowledge of security best practices across multiple platforms.
• Excellent written and verbal communication skills.

Responsibilities

• Assist in overseeing incident response and business continuity initiatives.
• Coordinate with teams to ensure effective response to cybersecurity incidents.

Skills

Microsoft Windows

Microsoft Office365

Cisco IOS

Open-source intelligence

Written communication

Verbal communication

Time management

Organizational skills

Education

Bachelor's degree in Cybersecurity

Experience with security management frameworks

Job description

Join to apply for the Incident Response Analyst role at New York State Technology Enterprise Corporation (NYSTEC)

1 week ago Be among the first 25 applicants

Join to apply for the Incident Response Analyst role at New York State Technology Enterprise Corporation (NYSTEC)

About Us

NYSTEC is a nonprofit technology consulting company, advising agencies, organizations, institutions, and businesses since 1996. We’re independent and vendor-neutral, so we have our clients’ best interests at heart. At NYSTEC, we know that we succeed when individuals and teams flourish personally and professionally, so our benefits and perks support that mindset.

About The Role

The incident response analyst is responsible for assisting the deputy chief information security officer (DCISO) in overseeing and directing the development and execution of NYSTEC’s incident response, business continuity, and disaster recovery initiatives. This role involves coordinating with staff and management at all levels of NYSTEC, as well as engaging with external business partners, to ensure the security, resilience, and continuity of critical business functions and systems.

The incident response analyst will lead and support efforts related to incident detection, response, recovery, and continuity planning, ensuring that security best practices are followed while mitigating risks, minimizing disruptions, and maintaining operational efficiency.

Key Responsibilities

1. Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures).
2. Gather and analyze intrusion artifacts (e.g., malware samples, malicious code, and other indicators of compromise) to support mitigation efforts and enhance the organization’s cybersecurity defenses.
3. Collaborate with cross-functional teams to provide technical expertise and support in identifying, analyzing, and resolving cybersecurity incidents affecting the organization's mission and operations.
4. Coordinate and collaborate with the incident response team to ensure an effective and efficient response to cybersecurity incidents.
5. Continuously monitor external threat intelligence sources (e.g., cybersecurity vendors, industry security forums) to stay informed on emerging cyber threats and assess their potential impact on the organization's security posture.
6. Conduct trend analysis and reporting to identify patterns, emerging threats, and areas for proactive improvement.
7. Develop and publish after-action reports to document incident response efforts, lessons learned, and recommendations for strengthening cybersecurity posture.
8. Create and disseminate cybersecurity guidance, best practices, and incident reports to relevant stakeholders to enhance awareness and preparedness.
9. Assist in the development, implementation, and testing of business continuity and disaster recovery plans to ensure NYSTEC can maintain critical operations during and after security incidents, disruptions, or disasters. Collaborate with stakeholders to identify key business functions, assess risks, and establish recovery strategies that align with industry best practices.
10. Create, refine, and regularly update incident response playbooks to ensure a structured and efficient approach to identifying, containing, eradicating, and recovering from security incidents.
11. Assist in planning, facilitating, and evaluating tabletop exercises to test and enhance the organization's incident response capabilities.
12. Develop reports on key security metrics, incidents, and response activities over a defined period. Provide insights into trends, lessons learned, and areas for improvement to the Incident Response Team.
13. Review and assess AI-generated inputs and outputs to ensure alignment with organizational policies, regulatory requirements, and security best practices. Identify potential risks, biases, or anomalies that could lead to security incidents or policy violations, and work with relevant teams to mitigate any identified concerns.
14. Maintain up-to-date knowledge of the IT security industry, including awareness of new or revised security solutions, improved security processes, and the development of new attacks or threat outbreaks. This should include continuation of education and certifications to maintain compliance with regulatory requirements and guidelines.
15. Demonstrate the NYSTEC Core Values and Behaviors.
16. All other duties as assigned.

About You

Required Qualifications

• Knowledge of security best practices across multiple platforms, such as Microsoft Windows, Microsoft Office365, and Cisco Internetwork Operating System (IOS).
• Understanding of how sharing and permissions work within Microsoft SharePoint.
• Familiar with open-source intelligence sites and applying them to perform security analyses.
• Excellent written and verbal communication skills, time-management skills, and the ability to prioritize tasks efficiently.
• Employs good organizational skills to maintain documentation and evidence gathering for reporting and incident analysis.
• Displays confidence in asking questions and bringing attention to concerns that may arise.
• Exercises a high degree of confidentiality and integrity.
• Team-oriented and skilled in working within a collaborative environment.
• Champions NYSTEC’s mission, brand mindsets, core values, and can put the behaviors into practice.

Preferred/Desired Qualifications

• Computing Technology Industry Association (CompTIA) Security+, certified information systems security professional (CISSP), or similar certification in information security preferred.

Education And Experience

• A bachelor’s degree, preferably in cybersecurity or a similar discipline, and two years of experience with security management frameworks (e.g., NIST, SANS).

The target base salary for this position is $79,000 - $109,000 per year. When determining compensation, we analyze and carefully consider several factors, including skill set, experience, location, and job-related qualifications.

It is NYSTEC's policy to provide equal employment opportunity (EEO) to all individuals, regardless of actual or perceived race, color, creed, religion, sex, or gender (including pregnancy, childbirth, and related medical conditions), gender identity or gender expression (including transgender status), age, national origin, ancestry, citizenship status, physical or mental disability, protected medical condition as defined by applicable state or local law, genetic information, military service and veteran status, sexual orientation, marital status, or any other characteristic protected by law. NYSTEC is strongly committed to this policy and believes in the concept and spirit of the law.

Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact [e-mail] if you require a reasonable accommodation to apply for or perform this job. Applicants must be authorized to work in the United States without the need for visa sponsorship now or in the future.

Learn more about NYSTEC by visiting www.nystec.com.