Information Technology Specialist - A (Cybersecurity Analyst)

NYCSCA; New York (NY); On-site; USD 64,000 - 125,000; Full time

Benefits offered by this job

Medical (employer paid)

Prescription Drug Options

Dental & Vision Coverage

NYC Qualified Pension Plan

401K/457 IRA options

Transit Check Program

Tuition reimbursement

PTO Benefits

Job summary

NYC School Construction Authority is seeking a Cybersecurity Analyst to coordinate preliminary response activities for cyber security incidents across the organization. You will triage events using SIEM and SOAR, analyze logs and network data, and escalate to senior incident handlers.

Collaboration with IT staff and vendors is required to ensure timely resolution. The role emphasizes incident response processes, a basic understanding of network security, and technology trend awareness, with

Qualifications

• Minimum 1–2 years’ hands-on experience in incident response or related IT fields.
• Bachelor’s degree in a technical field preferred.
• Basic knowledge of incident response processes, networking, and cyber security trends.

Responsibilities

• Coordinate preliminary response activities for cyber security incidents.
• Perform triage: email review, log analysis, network traffic and endpoint analysis.
• Escalate incidents to level-two incident handlers and maintain documentation.
• Develop information technology project plans and schedules.
• Provide training to IT staff and users.
• Suggest improvements to systems, technologies, and equipment.
• Engage with vendors as needed and manage project resources.
• Maintain reports and documentation on security events.

Skills

Incident response

Network analysis

Cybersecurity trends

SIEM

SOAR

Education

Bachelor’s degree in a technical field

Baccalaureate in Computer Sciences/related field

Tools

SIEM

SOAR

FireEye

Microsoft Defender

Splunk

Armis

Job description

Build your career while building NYC schools!

TheInformation TechnologyDivision manages the technology infrastructure which supports business operations: including personal computers, laptops, servers, printers, the internal network which connects them all, telephones, smartphones,and conference room equipment. By providing direct support to end usersvia the IT Service Desk, onsite office and jobsite support, and Training Classes IT supports application software (purchased such as Oracle, Primavera, Microsoft, and custom-written applications such as ORCMS, PTS, IEH, etc.).

Job Description Summary

The Manager, Information Technology - A (Cybersecurity Analyst) manages and maintains information technology systems, applications, and/or equipment.

Job Description

The Cybersecurity Analyst will coordinate the preliminary response activities for cyber security incidents across the company environment. The successful candidate will focus on preliminary identification and analysis of potential cyber security incidents. The successful candidate will perform triage functions such as email review, log analysis, analysis of network traffic and endpoint systems, enrich data, and will be responsible for escalating and assigning the incidents to level two incident handlers.

Candidates should have a basic understanding of incident response processes, network investigative techniques, and cyber security trends and issues along with SIEM and SOAR technologies and uses. Candidates should have a basic working knowledge of Fire eye, Microsoft Defender, Splunk, Armis.

Responsibilities include:

• Interacts with users to gather business needs and to determine appropriate information technology solutions.
• Provides solutions to users regarding information technology issues and/or needs.
• Provides support in the use of existing applications and technologies, including resolving problems and responding to user requests for support.
• Identifies and leads information technology project resources, including vendors as appropriate.
• Makes information technology recommendations to senior management regarding systems, technologies, applications, and/or equipment for which he/she is responsible.
• Organizes the provision of training to information technology staff and/or users.
• Develops and maintains information technology project plans and schedules.
• Performs related tasks, as assigned.

Additional responsibilities:

• Understand CSIRT functions and participates in the triage of cyber security events.
• Receive and analyze alerts from various sources within the enterprise and determine possible causes of such alerts.
• Triage logs from various security controls, including, but not limited to, firewall, proxy, host intrusion prevention systems, endpoint security, application, and system logs, to identify possible threats to network security.
• Enrich security event data to streamline the incident response process using SIEM and other correlation technologies.
• Perform incident triage, documentation, and escalation of appropriate incidents to cyber security incident handlers.
• Maintain proper documentation and creation of reports.

Minimum requirements:

• Minimum 1-2 years’ hands‑on experience working in incident response and/or other IT‑related fields tied to networking and enterprise information system environments.
• Bachelor’s degree in a technical field preferred.
• Interest in the cyber security field including a specific focus on the following domains: enterprise security defense, network and application penetration testing, and incident response.
• Basic knowledge of network protocols, enterprise architecture, and common network logging functions.
• Good written and verbal communications skills are a must.
• Ability to prioritize assignments and efforts in a complex work environment.
• Self‑motivated and able to work in an independent manner.
• Must be detail‑oriented and willing to learn.
• Industry certifications such as CEH, CISA, Security + are desirable.

Civil Service Classification: Competitive

Posting End Date: 10/22/2026

Salary:

• Appointment Range: $64,258 - $109,067
• Incumbent Range: $73,897 - $125,427

Subject to the provisions of the Collective Bargaining Agreement, the appointment rate for any newly hired employee, or employees with less than two years of active City or SCA service, shall be 15% less than the applicable incumbent rate.

Education

Baccalaureate: Computer Sciences, Computer Technology, Information Systems Technology, Computer Electrical Engineering, or related field

Certifications (if required)

Work Experience

Three years of full time experience in information technologies project development and implementation; or a satisfactory combination of education and experience. Candidates who do not possess a Baccalaureate degree will need an additional four years of full time experience in information technologies project development and implementation, resulting in SEVEN years of full time experience required. A Master’s/Doctoral degree from an accredited college or university in Computer Sciences, Computer Technology, Information Systems Technology, Computer Electrical Engineering, or a related field may substitute for two of the years of full time experience, resulting in ONE year of full time experience required.Selective Certification for Specialty Experience Development Specialty: a minimum of three years of post‑secondary education and/or experience specializing in: all phases of software development, including requirements gathering, systems analysis/design, programming, testing, user support, and implementation; or package software implementation, including requirements gathering, systems analysis/selection, testing, and user support. Support Specialty: a minimum of Three years of post‑secondary education and/or experience specializing in: experience in managing and supporting enterprise‑level application systems, including Desktop Operating Systems, network and Back Office applications.

It is the policy of the New York City School Construction Authority (NYCSCA) to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, veteran status, or any other characteristic protected by federal, state, or local law. In addition, the NYCSCA will provide reasonable accommodations for qualified individuals.

We offer exceptional benefits including:

• * Medical (100% employer paid for basic coverage available)
• * Prescription Drug Options
• * Dental & Vision Coverage
• * NYC Qualified Pension Plan (QPP)
• * Optional Retirement Savings Plans including 401K, 457 and IRA options
• * Transit Check Program
• * Public Loan Forgiveness Program
• * Competitive Paid Time Off (PTO) Benefits

As part of our ongoing commitment to employee growth and development, the SCA’s Learning and Development (L&D) program offers a variety of valuable benefits. These include tuition reimbursementfor continued educationthat is directly related to your current role, as well as access to a broad range of individual and organizational training opportunities. Trainings on leadership development, technical skill‑building, compliance, personal and professional growth. These programs are designed to strengthen performance, boost engagement, and ensure our workforce is fully equipped to meet both current and future organizational goals.

The SCA is interested in qualified candidates who are eligible to work in the United States. The SCA is not able to sponsor or take over sponsorship of an employment Visa at this time. We participate in the federal E‑Verify program to confirm the identity and employment authorization of all newly hired employees. For further information about the E‑Verify program, please click here: https://www.e-verify.gov/employees