What are the responsibilities and job description for the Information Technology Specialist 2 Information Security - 10897 position at Information Technology Services, Office of?
Under the direction of management within the Chief Information Security Office (CISO), Cyber Defense and Response Bureau, Vulnerability Management section, incumbents to these positions will serve as Vulnerability Management Analysts. These positions provide multiple types of vulnerability scanning services to ITS client agencies and other New York State government and local entities. Incumbents will participate in team activities and provide technical or supervisory assistance as required.
These positions require a strong technical understanding, as shown in the duties below, as well as the ability to communicate effectively, both orally and in writing, with a wide range of stakeholders, including management, users, vendors, and other IT staff. Incumbents must be able to clearly communicate work priorities and performance expectations to supervisory and subordinate staff and collaborate with ITS teams and senior agency management to resolve complex, technically and politically sensitive issues under pressure.
These positions may require availability during off-shift hours to ensure appropriate response to security incidents or other critical activities that may impact on sensitive information, critical systems, NYS agencies, or ITS operations.
Specific duties include, but are not limited to:
• Configure and perform vulnerability scans, platform management, data collection and reporting.
• Develop and maintain standard operating procedures related to team activities.
• Function as a subject matter expert in infrastructure scanning.
• Make recommendations for new tools or processes to improve program capabilities.
• Assist and support remediation efforts, helping to coordinate between multiple groups inside and outside of ITS.
• Explain the potential impact of infrastructure vulnerability findings and exploitation for management.
• Analyze results from automated infrastructure testing tools to validate findings and eliminate false positives.
• Create and follow up on tickets with the vendor for false positives or other platform issues.
• Remain aware of network utilization including ports, protocols, and IP addressing.
• Identify systemic security issues based on the analysis of vulnerability and configuration data.
• Generate database queries and reports and comprehend the automation required to simplify report generation and dissemination.
• Manage test assets, test resources, and test personnel to ensure effective completion of test events.
• Perform additional duties as assigned.
Minimum Qualifications:
Information Technology Specialist 2 (Information Security)
Non-competitive: two years* of information technology, cybersecurity, or information assurance experience.
*Substitutions:
A bachelor's or higher-level degree including or supplemented by 15 semester credit hours in computer science subsittues for both years of required experience; or a bachelor's or higher-level degree in any field substitutes for one year of required experience; 60 semester credit hours including or supplemented by 15 semester credit hours in computer science substitutes for one year of required experience.
Additional Comments:
ITS will not offer permanent employment to any candidate unless the candidate provides documentation that they are authorized to accept work in the United States on a permanent basis. It is the policy of ITS not to hire F1 or H1 visa holders for permanent employment or to sponsor non-immigrant aliens for temporary work authorization visas or for permanent residence.
Some positions may require fingerprinting.
Some positions may require up to 25% travel and/or lifting up to 50 lbs. Some positions are pending Civil Service approval. Details of position(s) will be described further if you are selected for an interview.
If eligible, positions located in New York City will receive an additional $3,400 downstate adjustment location pay with regular annual salary. Positions located in the Mid-Hudson will receive an additional $1,650 adjustment location pay.
to permanent non-competitive and the official probationary period will begin.
Benefits of Working for NYS Generous benefits package, worth 65% of salary, including:
Holiday & Paid Time Off
• Thirteen (13) paid holidays annually
• Up to Thirteen (13) days of paid vacation leave annually
• Up to Five (5) days of paid personal leave annually
• Up to Thirteen (13) days of paid sick leave annually for PEF.
• Up to three (3) days of professional leave annually to participate in professional development
Health Care Benefits
• Eligible employees and dependents can pick from a variety of affordable health insurance programs
• Family dental and vision benefits at no additional cost
Additional Benefits
• New York State Employees’ Retirement System (ERS) Membership
• NYS Deferred Compensation
• Access to NY 529 and NY ABLE College Savings Programs, as well as U.S. Savings Bonds
• Public Service Loan Forgiveness (PSLF)
• And many more.
The Office of Information Technology Services is an equal opportunity employer, and we recognize that diversity in our workforce is critical to fulfilling our mission. We encourage all individuals with disabilities to apply.
These positions require a strong technical understanding, as shown in the duties below, as well as the ability to communicate effectively, both orally and in writing, with a wide range of stakeholders, including management, users, vendors, and other IT staff. Incumbents must be able to clearly communicate work priorities and performance expectations to supervisory and subordinate staff and collaborate with ITS teams and senior agency management to resolve complex, technically and politically sensitive issues under pressure.
These positions may require availability during off-shift hours to ensure appropriate response to security incidents or other critical activities that may impact on sensitive information, critical systems, NYS agencies, or ITS operations.
Specific duties include, but are not limited to:
• Configure and perform vulnerability scans, platform management, data collection and reporting.
• Develop and maintain standard operating procedures related to team activities.
• Function as a subject matter expert in infrastructure scanning.
• Make recommendations for new tools or processes to improve program capabilities.
• Assist and support remediation efforts, helping to coordinate between multiple groups inside and outside of ITS.
• Explain the potential impact of infrastructure vulnerability findings and exploitation for management.
• Analyze results from automated infrastructure testing tools to validate findings and eliminate false positives.
• Create and follow up on tickets with the vendor for false positives or other platform issues.
• Remain aware of network utilization including ports, protocols, and IP addressing.
• Identify systemic security issues based on the analysis of vulnerability and configuration data.
• Generate database queries and reports and comprehend the automation required to simplify report generation and dissemination.
• Manage test assets, test resources, and test personnel to ensure effective completion of test events.
• Perform additional duties as assigned.
Minimum Qualifications:
Information Technology Specialist 2 (Information Security)
Non-competitive: two years* of information technology, cybersecurity, or information assurance experience.
*Substitutions:
A bachelor's or higher-level degree including or supplemented by 15 semester credit hours in computer science subsittues for both years of required experience; or a bachelor's or higher-level degree in any field substitutes for one year of required experience; 60 semester credit hours including or supplemented by 15 semester credit hours in computer science substitutes for one year of required experience.
Additional Comments:
ITS will not offer permanent employment to any candidate unless the candidate provides documentation that they are authorized to accept work in the United States on a permanent basis. It is the policy of ITS not to hire F1 or H1 visa holders for permanent employment or to sponsor non-immigrant aliens for temporary work authorization visas or for permanent residence.
Some positions may require fingerprinting.
Some positions may require up to 25% travel and/or lifting up to 50 lbs. Some positions are pending Civil Service approval. Details of position(s) will be described further if you are selected for an interview.
If eligible, positions located in New York City will receive an additional $3,400 downstate adjustment location pay with regular annual salary. Positions located in the Mid-Hudson will receive an additional $1,650 adjustment location pay.
to permanent non-competitive and the official probationary period will begin.
Benefits of Working for NYS Generous benefits package, worth 65% of salary, including:
Holiday & Paid Time Off
• Thirteen (13) paid holidays annually
• Up to Thirteen (13) days of paid vacation leave annually
• Up to Five (5) days of paid personal leave annually
• Up to Thirteen (13) days of paid sick leave annually for PEF.
• Up to three (3) days of professional leave annually to participate in professional development
Health Care Benefits
• Eligible employees and dependents can pick from a variety of affordable health insurance programs
• Family dental and vision benefits at no additional cost
Additional Benefits
• New York State Employees’ Retirement System (ERS) Membership
• NYS Deferred Compensation
• Access to NY 529 and NY ABLE College Savings Programs, as well as U.S. Savings Bonds
• Public Service Loan Forgiveness (PSLF)
• And many more.
The Office of Information Technology Services is an equal opportunity employer, and we recognize that diversity in our workforce is critical to fulfilling our mission. We encourage all individuals with disabilities to apply.
Salary : $66,951 - $85,138