Intelligence Analyst 1 (Information Systems)
We will NOT look at applications submitted through handshake. When applying use the link provided in the application process tab. IF you do apply through handshake your application will not be reviewed. Thank you.
The incumbent of this position will report to the Cyber Incident Response Team within the Office of Counter Terrorism.
Duties include but are not limited to the following:
• Conduct remote and on-site cyber security assessments for non-Executive agencies, local governments, and public authorities (our "Customers"), including cyber risk assessments, network scans, and cyber threat and vulnerability analysis.
• Provide program management of cyber security risk assessment services, including coordination with other government entities, tracking and scheduling of resources, and developing metrics for program evaluation.
• Provide expertise to local governments and other government entities to improve their cybersecurity governance with recommendations to further develop policies and processes.
• Demonstrate and communicate knowledge of cybersecurity frameworks including but not limited to the CIS Critical Security Controls, NIST SP 800-53, etc.
• Conduct outreach with our customers to discuss cyber security policies, programs, and infrastructure.
• Lead the development of Customer-facing cyber security programs which align with industry best practices across domains such as IT asset management, configuration management, cyber security policies and procedures, data governance, access management, endpoint protection, vulnerability management, incident response and security awareness training.
• Brief unit and agency leadership on program performance, requirements, and future development.
• Maintain up-to-date technical knowledge of cybersecurity issues and emerging trends to stay ahead of potential risks and support proactive security development.
• Assist in developing and distributing actionable strategic, technical, and tactical cyber information and intelligence to non-executive agencies, local governments, and public authorities through weekly, monthly, or ad hoc reports, briefings, and presentations.
• Support cybersecurity meetings, presentations, seminars, etc., to foster information-sharing and raise awareness across relevant stakeholders.
• Support training exercises targeted to non-executive agencies, local governments, and public authorities focusing on cybersecurity best practices.
• Support other CIRT program areas as required.
• Supervise and manage lower grade analysts assigned to the cyber security risk assessment program.
Travel will be required (no more than 25%) to support customer initiatives and engagements.
Operational Needs:
• Possession and maintenance of a valid Driver’s License issued by the NYS Department of Motor Vehicle is required.
• Ability to obtain a federal security clearance.
Desired Certifications:
• SANS: GCIH, GCCC, GISP
• CompTIA: Security+
• ISC2: CISSP