Senior Cyber Security Analyst

Ensures the confidentiality, integrity, and availability of NYPA information through the establishment of security controls, governance instruments (policies, standards) and associated processes. Provides governance and oversight to ensure that appropriate security measures are designed and architected into IT solutions and services and that vulnerabilities are identified and remediated. Monitors NYPA’s technology landscape to detect and respond to threats.

Highlights for this role include:

• Architecting, designing, deploying Splunk forwarders, configuring agents to collect a variety of application logs including both structured and unstructured data, and developing complex dashboards and reports
• Building, testing, and deploying technical Splunk add-ons and providing troubleshooting guidance in both development and production Splunk environments
• Administering Splunk in a distributed Linux-based environment and programming in Python

Responsibilities

• Ensure the development, implementation and refinement of security policies, procedures, and programs to protect the New York Power Authority’s Information Technology cyber assets and enterprise digital ecosystem on premise and in cloud which include computers, networks, telecommunications equipment, data centers, and firewalls.
• Develop recommendations for IT Solutions based on business requirements; includes understanding and documenting business needs.
• Develop, implement, and monitor and enforce appropriate cyber security policies and standards pertaining to security, account access and control, incident and escalation reporting, intrusion detection, data protection and threat vulnerability management.
• Threat and vulnerability management, remediation, and oversight.
• Cyber Security Awareness and Education program management.
• Assist with the configuration of and monitoring health of NYPA Cyber Security Services and Technologies.
• Create, maintain, and manage documentation on cyber security assets, tools, and software.
• Collaborate with other IT disciplines as necessary to achieve Cyber Security outcomes
  

Knowledge, Skills and Abilities

• Strong understanding of interactions of applications, operating systems, and hardware configurations to produce high quality technically sound solutions.
• Robust understanding of IT industry trends and tools as they apply to providing solutions to stated business issues and opportunities.
• Comprehensive understanding of the IT system infrastructure and network topology, familiarity with cyber security strategies and Security Information and Event Management (SIEM) tools.
• Strong knowledge of cyber security policies and practices found throughout both the public and private sectors.
• Ability to understand and communicate complex IT security and policy planning.
• Demonstrated analytical problem-solving skills and practical cyber security experience.
• Ability to communicate complex technical and security related concepts to a broad range of technical and non-technical staff.
• Demonstrated ability to assist in managing complex projects as required.

Education, Experience and Certifications

• Bachelor’s degree
• 5 years of experience in Information Technology
• Industry Certification such as CISSP or CISM certification, or equivalent preferred.
  

Physical Requirements

• May be required to respond Cyber Security alerts and communicate during off hours.