Information Technology Specialist 2 (Information Security)

The duties that the incumbent of the vacancy will be expected to perform. Duties Description Under the direction of the Chief Information Security Officer, within the Information Security Office (ISO), the Information Technology Specialist 2 (Information Security) will primarily manage incident response of the uniquely sensitive data and the high-profile threats the ISO faces, as well as the highly confidential legal and investigative data. Incident responders are crucial for swift, decisive action when security breaches occur, minimizing damage and preserving public trust. The incumbent will rapidly assess the scope of a breach, contain its spread, and prevent further data exfiltration, while minimizing potential legal ramifications and protecting sensitive information from public disclosure. The incumbent will analyze complex attack patterns, identify vulnerabilities, and implement effective remediation strategies, while strengthening the ISO’s overall security posture and reducing the likelihood of future incident. • Continuously monitor the SIEM and other security tools for alerts and anomalies that could indicate a security incident. • Analyze and prioritize security alerts based on their severity, potential impact, and the criticality of the affected systems. • Conduct preliminary analysis of security events to gather evidence, identify indicators of compromise (IOCs), and determine the nature of the threat.• Create and maintain detailed records of all security incidents, including the timeline of events, actions taken, and final resolution. • Escalate confirmed security incidents for in-depth investigation and response. • Assist in the creation of daily, weekly, and monthly reports on security events, key performance indicators (KPIs), and the overall security posture. • Participate in vulnerability scanning, review scan results, and assist in the initial assessment and prioritization of vulnerabilities. • Stay informed about the latest cybersecurity threats, vulnerabilities, and attack techniques by reviewing threat intelligence feeds and industry publications. • Assist in the basic maintenance and configuration of security tools, such as updating signatures and tuning rules to reduce false positives. • Work closely with other team members and other IT departments to support security initiatives and incident response activities. • Other duties as assigned.

The minimum qualifications required for this vacancy. Minimum Qualifications Two years* of information technology, cybersecurity, or information assurance experience. *Substitutions: A bachelor's or higher-level degree including or supplemented by 15 semester credit hours in computer science substitutes for both years of required experience; or a bachelor's or higher-level degree in any field substitutes for one year of required experience; 60 semester credit hours including or supplemented by 15 semester credit hours in computer science substitutes for one year of required experience.

Additional comments regarding the vacancy. Additional Comments Careers with the State offer multiple benefits including paid vacation leave (13 days per year), sick leave, paid State holidays off, health insurance including vision & dental, entry into the NYS retirement (pension) system, education and training, eligibility for public student loan forgiveness, and job stability with promotional opportunities. Workplace flexibilities include multiple options for employees including telecommuting (up to two days per week) and alternative work schedules. Candidates from diverse backgrounds are encouraged to apply.The OAG is an equal opportunity employer and is committed to workplace diversity.For new State employees appointed to graded positions, the annual salary is the hiring rate (beginning of the Salary Range) of the position. Promotion salaries are calculated by the NYS Office of the State Comptroller in accordance with NYS Civil Service Law, OSC Payroll rules and regulations and negotiated union contracts.The Office of the NYS Attorney General (OAG) cannot provide sponsorship for work authorization. Candidates need to be authorized to work in the United States to be employed by this agency. It is incumbent upon employees to maintain work authorization for the duration of their employment with the OAG

Some positions may require additional credentials or a background check to verify your identity.