Senior Cyber Security Analyst (NG Firewall)

Summary

The Senior Cyber Security Analyst will work within the Cyber Operations team, and ensures the confidentiality, integrity, and availability of NYPA information through the establishment of security controls, governance policies & standards) and associated processes. The Senior Analyst provides governance and oversight to ensure that appropriate security measures are designed and architected into IT solutions and services and that vulnerabilities are identified and remediated; and monitors NYPA’s technology landscape to detect and respond to threats.

Specific highlights for this role include:

• Architecting, designing, deploying next generation firewall and zero-trust technologies.

• Manage, monitor, and analyze several security technologies to include defensive and offensive security solutions on the perimeter and internal networks such as firewalls, intrusion detection/prevention systems (IDS/IPS), data loss prevention, etc.

• Technically proficient and experienced with Windows and Unix/Linux operating systems, enterprise class firewalls, network security, network traffic analysis, incident response, vulnerability analysis, packet analysis, and systems hardening.

#LI-JP1

We are in the process of expanding our Cyber Security team here at NYPA and have several open positions at different experience levels and with specific skill sets. Please see cyber security positions below and to view all current job openings please visit https://careers.nypa.gov/

Cyber Security Analyst: https://careers.nypa.gov/job-invite/16953/

Senior Cyber Security Analyst: https://careers.nypa.gov/job-invite/16954/

Cyber Security Program Lead (Splunk): https://careers.nypa.gov/job-invite/16949/

Responsibilities

• Ensure the development, implementation and refinement of security policies, procedures, and programs to protect the New York Power Authority’s Information Technology cyber assets and enterprise digital ecosystem on premise and in cloud which include computers, networks, telecommunications equipment, data centers, and firewalls.
• Develop recommendations for IT Solutions based on business requirements; includes understanding and documenting business needs.
• Develop, implement, and monitor and enforce appropriate cyber security policies and standards pertaining to security, account access and control, incident and escalation reporting, intrusion detection, data protection and threat vulnerability management.
• Threat and vulnerability management, remediation, and oversight.
• Cyber Security Awareness and Education program management.
• Assist with the configuration of and monitoring health of NYPA Cyber Security Services and Technologies.  
• Create, maintain, and manage documentation on cyber security assets, tools, and software.
• Collaborate with other IT disciplines as necessary to achieve Cyber Security outcomes
   

Knowledge, Skills and Abilities

• Strong understanding of interactions of applications, operating systems, and hardware configurations to produce high quality technically sound solutions.
• Robust understanding of IT industry trends and tools as they apply to providing solutions to stated business issues and opportunities.
• Comprehensive understanding of the IT system infrastructure and network topology, familiarity with cyber security strategies and Security Information and Event Management (SIEM) tools.
• Strong knowledge of cyber security policies and practices found throughout both the public and private sectors.
• Ability to understand and communicate complex IT security and policy planning.
• Demonstrated analytical problem-solving skills and practical cyber security experience.
• Ability to communicate complex technical and security related concepts to a broad range of technical and non-technical staff.
• Demonstrated ability to assist in managing complex projects as required.

Education, Experience and Certifications

• Bachelor’s degree 
• 5 years of experience in Information Technology 
• Industry Certification such as CISSP or CISM certification, or equivalent preferred. 
   

Physical Requirements

• May be required to respond Cyber Security alerts and communicate during off hours.