Information Technology Specialist - A (Cybersecurity Analyst)

Cybersecurity Jobs; New York (NY); On-site; USD 64,000 - 125,000; Full time

Benefits offered by this job

Medical coverage

Dental & Vision

Pension plan (QPP)

401K options

Transit benefits

Competitive PTO

Job summary

NYC School Construction Authority is seeking an Information Technology professional to support incident coordination, analysis, and escalation. The role focuses on preliminary response across the enterprise, triage of alerts, and collaboration with level two incident handlers to protect network security.

Requirements include 1–2 years in incident response or related IT fields, basic networking knowledge, and strong communication.

Qualifications

• Minimum 1–2 years hands-on incident response or related IT fields.
• Interest in enterprise security defense, network/app testing, and incident response.
• Basic knowledge of network protocols and enterprise architecture.
• Strong written and verbal communication skills.

Responsibilities

• Coordinate preliminary response activities for cybersecurity incidents.
• Identify and analyze potential incidents at a basic level.
• Triages security events via email review, logs, and network/endpoint data.
• Enrich event data using SIEM and correlation tools.
• Escalate incidents to level two handlers with documentation.
• Assist in triage of cyber security events and CSIRT functions.

Skills

Incident response

Networking basics

Communication skills

Prioritization

Independent work

Attention to detail

CEH

CISA

Security+

Education

Bachelor’s degree in a technical field

Tools

SIEM

SOAR

FireEye

Microsoft Defender

Splunk

Armis

Job description

Queens, NY (Onsite)

The NYC School Construction Authority provides strong benefits and a structured work environment where you can apply cybersecurity-focused incident response skills to protect enterprise systems. This Information Technology role supports the management and maintenance of information technology systems, applications, and equipment, with responsibilities centered on preliminary incident coordination, identification, triage, and escalation to level two handlers.

What you’ll do

• Coordinate preliminary response activities for cyber security incidents across the company environment.
• Conduct preliminary identification and analysis of potential incidents.
• Perform triage activities including email review, log analysis, and analysis of network traffic and endpoint systems.
• Enrich security event data to streamline incident response using SIEM and other correlation technologies.
• Escalate and assign incidents to level two incident handlers, with clear documentation and reporting.
• Understand CSIRT functions and participate in triage of cyber security events.
• Receive and analyze alerts from enterprise sources to determine possible causes.
• Triaging security control logs, including firewall, proxy, host intrusion prevention systems, endpoint security, and application and system logs to identify possible threats to network security.
• Interact with users to gather business needs, determine appropriate IT solutions, and provide support for existing applications and technologies.
• Lead and help organize IT project resources, including vendors as appropriate, and develop IT project plans and schedules.
• Provide recommendations to senior management regarding responsible systems, technologies, applications, and/or equipment.
• Organize training for IT staff and/or users and perform related tasks as assigned.

Required qualifications

• Minimum 1-2 years hands-on experience in incident response and/or other IT-related fields tied to networking and enterprise information system environments.
• Interest in cybersecurity with a focus on enterprise security defense, network and application penetration testing, and incident response.
• Basic knowledge of network protocols, enterprise architecture, and common network logging functions.
• Good written and verbal communication skills.
• Ability to prioritize assignments in a complex work environment.
• Self-motivated and able to work independently.
• Detail-oriented and willing to learn.
• Industry certifications such as CEH, CISA, or Security+ are desirable.

A Bachelor’s degree in a technical field is preferred (Computer Sciences, Computer Technology, Information Systems Technology, or related fields).

Tools and technologies

• SIEM, SOAR
• Fire eye
• Microsoft Defender
• Splunk
• Armis

Compensation

• $64,258 - $125,427 per year
• Appointment Range: $64,258 - $109,067
• Incumbent Range: $73,897 - $125,427
• Subject to the Collective Bargaining Agreement, the appointment rate for newly hired employees or employees with less than two years of active City or SCA service may be 15% less than the applicable incumbent rate.

Benefits

• Medical: 100% employer paid for basic coverage
• Prescription drug options
• Dental & Vision coverage
• NYC Qualified Pension Plan (QPP)
• Optional retirement savings plans including 401K, 457, and IRA options
• Transit Check Program
• Public Loan Forgiveness Program
• Competitive Paid Time Off (PTO) benefits