Non-competitive Qualifications:
Bachelor's degree* with 15 credit hours in Cyber Security, Information Assurance, or Information Technology OR bachelor's degree candidates without at least 15 course credits in cyber security, information assurance, or information technology, requires an additional year of general information technology experience to qualify. **

*Bachelor's degree candidates without at least 15 course credits in cyber security, information assurance, or information technology require an additional year of general information technology experience to qualify. Appropriate information security or information assurance experience may substitute for the bachelor's degree on a year for-year basis; an associate degree requires an additional two years of general information technology experience.

**Experience solely in information security or information assurance may substitute for the general information technology experience.

Duties Description • Perform security event monitoring and network traffic analysis using a Security Information and Event Management (SIEM) system and Microsoft Defender for Cloud Apps.
• Prioritize and differentiate between potential security events and false positives.
• Escalate priority security events to the Computer Security Incident Response Team (CSIRT) per standard operating procedures.
• Assist with the ongoing maintenance of the SIEM technology including, but not limited to, daily/weekly checklists and identifying and resolving issues.
• Assist incident responders to investigate and resolve computer security incidents.
• Research current vulnerabilities, attacks, and analysis techniques.
• Research current vulnerabilities, attacks, and analysis techniques.
• Perform incident handling activities to assist with the response to security incidents.
• Perform incident response activities including, but not limited to, investigating security incidents, performing threat analysis, and providing guidance/recommendations.
• Perform proactive incident response activities to detect potential security incidents.
• Research new digital forensic and incident response tools, techniques, and methodologies.
• Perform phishing email triage on reported suspicious emails.
• Perform and continuously improve proactive techniques to identify security events within the IT infrastructure.
• Assist with the vulnerability management process.
• Perform compliance activities for the vulnerability management process.
• Perform analysis and provide guidance on vulnerabilities disclosures, vulnerabilities reports, and internal assessments.
• Communicate exposed vulnerabilities to assist with proactive investigative activities to verify if any exposed vulnerabilities were taken advantage of by attackers.
• Review and perform analysis on vulnerability scanning results.
• Perform security compliance reviews and assessments.
• Write security articles related to issues important to OSC.
• Research security best practices for articles to include on the Information Security Office (ISO) website.

Additional Comments Knowledge, Skills, and Abilities:
• Working knowledge of:
o Information security, offensive security, network vulnerability assessments, web application vulnerability assessments, and vulnerability scanning.
o Networking, routers, firewalls, and operating systems.
• Ability to maintain sensitive and confidential information.
• Excellent verbal and written communication skills, including the ability to clearly articulate information technology and information security concepts.
• Strong analytical thinker with excellent troubleshooting and problem-solving skills.

Telecommuting:
The Office of the New York State Comptroller (OSC) supports telecommuting where it is reasonable to do so based upon the agency's mission and operational needs. Generally, employees new to OSC will be restricted from telecommuting for at least 8 calendar weeks. After the initial 8 calendar week restriction, if any employee's duties and work performance are aligned with telecommuting they may be allowed to do so. Upon approval to telecommute, OSC employees may telecommute up to 5 days per pay period.

Reasonable Accommodation:
The NYS Office of the State Comptroller provides reasonable accommodations to applicants with disabilities. If you need reasonable accommodation for any part of the application and hiring process, please notify the Division of Human Resources at (518) 474-1924.

Equal Opportunity Employment:
The Office of the NYS Comptroller values a workforce with a broad, diverse range of backgrounds and perspectives. All employees are expected to contribute to a professional environment focused on self-evaluation and improvement, as well as acceptance and support of coworkers.

Some positions may require additional credentials or a background check to verify your identity.

Name Jane Rost

Telephone (518) 474-1924

Fax (518) 486-6723

Email Address OSCHELPS@osc.ny.gov

Address

Street Office of the State Comptroller, Office of Human Resources

110 State street, 12th Floor

City Albany

State NY

Zip Code 12236

Notes on Applying Submit a clear, concise cover letter, resume, and a completed copy of this template: https://osc.ny.gov/files/Jobs/docs/00544-information-technology-specialist-2-info-sec-mq-template-112023.docx via email to recruit@osc.ny.gov no later than May 29, 2024. Documents must be sent as unlocked and accessible attachments.

Reference Item #00544-JER in the subject line of your email and on your cover letter for proper routing.

If you have questions about this vacancy, please contact this Division representative:
Division contact: Lisamarie Astarita, CIO_HR@osc.ny.gov

Important Notes: To access the required template, copy the link above and paste it into your web browser, then download, complete, and save to submit with your email response. You MUST complete the linked template in full to demonstrate you meet the minimum qualifications for this position. Interview selection is based SOLELY on the information you provide in this document, incomplete or vague information will not be viewed in your favor.
Be sure to submit an unofficial copy of any transcripts you may have with your cover letter, resume, and completed template, as there are educational requirements for this position.

When responding, please include the reference number from this section only. The StateJobsNY Vacancy ID # should not be included.