Information Technology Specialist 2 (Programming)

New York State Insurance Fund (NYSIF); New York (NY); On-site; USD 65,000 - 90,000; Full time

Benefits offered by this job

Competitive compensation

Future career growth potential

Open team environment

Generous vacation and holidays

Health insurance

Job summary

New York State Insurance Fund (NYSIF) is seeking professionals to join the Vulnerability Management Team. You will help manage application and infrastructure vulnerabilities, review scans, report anomalies, and coordinate fixes with infrastructure and development groups.

The role involves administering on-prem Tenable, Black Duck, and Sonatype tools, supporting remediation efforts, and ensuring adherence to security standards. Ability to work with 55b/55c program and NY HELPS is noted.

Qualifications

• Good understanding of security fundamentals.
• Familiarity with Linux command-line.
• Understanding of security vulnerabilities, threat landscapes and mitigation techniques.

Responsibilities

• Review scan results and report anomalies.
• Investigate and troubleshoot vulnerabilities.
• Provide end-user support for vulnerabilities.
• Create, configure, schedule and monitor device security scans.
• Recertify scheduled scans for accuracy.
• Research emerging technologies and assist management with planning.
• Coordinate with infrastructure and development teams during maintenance and deployment.
• Enforce standards and best practices.
• Install, administer, test, and maintain on-premise security tools (Tenable, Black Duck, Sonatype).
• Evaluate risks and assist in implementing fixes.

Skills

Security fundamentals

Linux command-line

Vulnerability knowledge

Education

Bachelor’s degree incl. CS credits

Bachelor’s degree + 1 year IT

60 sem credits incl. CS + 1 year IT

2 years IT experience

Job description

Duties Description

As a member of NYSIF’s Vulnerability Management Team, incumbents of these positions will play a key role in Application and Infrastructure vulnerability management to meet the essential security needs of the agency. Responsibilities include, but are not limited to:

• Review scan results to ensure they complete successfully and report on any anomalies.
• Report, investigate and troubleshoot discovered vulnerabilities.
• Provide end user support for discovered vulnerabilities.
• Create, configure, schedule, and monitor device security scans.
• Recertify scheduled scans to ensure their accuracy.
• Research emerging technologies and assist management with implementation planning.
• Communicating effectively in planning and coordination with infrastructure and application development groups during major maintenance, upgrades, and deployment projects.
• Maintenance, and enforcement of standards/best practices.
• Perform installation, administration, testing, and maintenance of hardware and software for on premise Tenable, Black Duck and Sonatype tools.
• Evaluate technical and non-technical risks, recommend controls, and assist in implementing fixes

Description

Duties Description

As a member of NYSIF’s Vulnerability Management Team, incumbents of these positions will play a key role in Application and Infrastructure vulnerability management to meet the essential security needs of the agency. Responsibilities include, but are not limited to:

• Review scan results to ensure they complete successfully and report on any anomalies.
• Report, investigate and troubleshoot discovered vulnerabilities.
• Provide end user support for discovered vulnerabilities.
• Create, configure, schedule, and monitor device security scans.
• Recertify scheduled scans to ensure their accuracy.
• Research emerging technologies and assist management with implementation planning.
• Communicating effectively in planning and coordination with infrastructure and application development groups during major maintenance, upgrades, and deployment projects.
• Maintenance, and enforcement of standards/best practices.
• Perform installation, administration, testing, and maintenance of hardware and software for on premise Tenable, Black Duck and Sonatype tools.
• Evaluate technical and non-technical risks, recommend controls, and assist in implementing fixes

For Appointment Via NY HELPS

Minimum Qualifications

• One year of permanent, competitive service as an Information Technology Specialist 1 at NYSIF; OR
• A bachelor's or higher-level degree including or supplemented by 15 semester credit hours in computer science; OR
• A bachelor's or higher-level degree in any field and one year of experience in information technology; OR
• 60 semester credit hours including or supplemented by 15 semester credit hours in computer science and one year of professional experience in information technology; OR
• Two years of professional experience in information technology.

For Competitive Appointment

• List appointment: Reachable on current Civil Service eligible list for this title.
• Transfer: Current New York State employee with one year of permanent competitive class service in a title eligible for transfer under Section 70.1 or Section 52.6 of Civil Service Law. Appointments via transfer must not result in a second, consecutive transfer with an advancement of more than two S-grades. Eligible titles include, but are not limited to: Administrative Specialist 1, Contract Management Specialist 2, Human Resources Specialist 1.

Reinstatement: Candidates who have previously held the Information Technology Specialist 2 (Programming) title, or a transferable title, may be eligible for consideration for reinstatement.

For 55b/55c Program Appointment

• May require occasional evening and/or weekend hours.

Preferred Qualifications

• The candidate must have a good understanding of security fundamentals.
• The candidate must have a good familiarity with Linux command-line.
• The candidate must have a good understanding of security vulnerabilities: Knowledge of common vulnerabilities, threat landscapes, and mitigation techniques.

Additional Comments

Please note, the salary range displayed includes special salary treatments, such as location pay.

Fringe Benefits

• Competitive compensation
• Future career growth potential
• Open and supportive team-based environment
• Plentiful vacation, personal, and sick time off
• Paid state and federal holidays
• Affordable health insurance plans
• Dental and vision benefits provided at no additional cost
• Retirement options
• Public Student Loan Forgiveness (PSLF)
• Possibility of telecommuting, flextime, and Alternative Work Schedules (AWS)

This title is part of the New York Hiring for Emergency Limited Placement Statewide Program (NY HELPS).

For the duration of the NY HELPS Program, this title may be filled via a non-competitive appointment, which means no examination is required but all candidates must meet the minimum qualifications of the title for which they apply.

At a future date, it is expected employees hired under NY HELPS will have their non-competitive employment status converted to competitive status, without having to compete in an examination. Employees will then be afforded with all the same rights and privileges of competitive class employees of New York State. While serving permanently in a NY HELPS title, employees may take part in any promotion examination for which they are qualified.

About NYSIF

For more information about NYSIF, including our mission, commitment to diversity, equity, and inclusion, and efforts to fulfill Executive Order 31, please visit www.nysif.com.

If you are a person with a disability and wish to request that a reasonable accommodation be provided for you to participate in a job interview, please send an email to NYSIF’s Reasonable Accommodations mailbox at [e-mail].