VetJobs
System Analyst, Cybersecurity Operations - New York NY
VetJobs, New York, New York, us, 10261
System Analyst, Cybersecurity Operations - New York NY
Join to apply for the
System Analyst, Cybersecurity Operations - New York NY
role at
VetJobs .
ATTENTION MILITARY AFFILIATED JOB SEEKERS – Our organization works with partner companies to source qualified talent for their open roles. This position is available to Veterans, Transitioning Military, National Guard and Reserve Members, Military Spouses, Wounded Warriors, and their Caregivers. If you have the required skill set, education requirements, and experience, please submit your application.
Minimum Salary:
$80,000.00
Maximum Salary:
$105,000.00
Job Description The System Analyst will join Con Edison's Cybersecurity Operations team. This team implements and utilizes various tools and processes to build, run, and enhance the cybersecurity programs. The System Analyst will contribute to the company's threat management program by developing use cases on our Threat Intelligence Platform (TIP), analyzing threat intelligence, performing impact assessments and investigations, enabling and performing threat hunts, and assisting in attack surface reduction efforts. They will support the Cybersecurity Operations Center (CSOC) through enablement and the development and introduction of new technologies, solutions, and capabilities, as well as provide advanced analysis and support. The System Analyst will also contribute to Purple Team efforts. They will create new and tune existing cybersecurity alerts, as well as lead the onboarding and transition of new alerts and security tools for the CSOC. They will also assist in monitoring trends, scenarios, and the changing threat landscape and will coordinate with the broader Information Security and infrastructure teams to take appropriate actions on both immediate needs and regularly scheduled cadences. The team also has related responsibilities to provide guidance and direction to its counterparts and stakeholders to bolster the overall security posture and capabilities of the organization's cybersecurity program.
Responsibilities
Create new and tune existing cybersecurity alerts
Lead the onboarding of and training for new security tools and alerts
Monitor, assist in troubleshooting, and perform power use functions in a variety of security tools
Support and, when required, lead incident response efforts and threat detection capabilities
Enable the CSOC by developing and providing new capabilities and solutions
Perform blue and purple team functions
Define, design, and implement strategies to protect against emerging threats using security tools
Correlate security events to identify threats and implement countermeasures to reduce attack surface
Develop scripts and tools to automate tedious processes and increase efficiency
Effectively communicate technical concepts to non-technical audiences
Provide technical expertise and support to business partners and leadership on cybersecurity threat assessments, development, testing and the implementation
Implement & operate applicable information security plans, procedures, and control techniques designed to prevent cyber-attacks & events
Create accurate documentation that provides concise explanations and conveys informative descriptions of findings, including technical explanations/walkthroughs, root causes, impact, and remediation/mitigation strategies
Collaborate across the organization to build out improvement opportunities
Monitor cybersecurity threats and vulnerabilities and provide support as necessary to incident response team
Must be available 24/7, on call, and/or participate in off-hour emergency response activities as required
Act as advanced support and escalation for the cybersecurity operations center
Continuously perform capability enhancements with tools and processes
Manage and lead information security projects for the cybersecurity operations team
Hold seats on projects to articulate requirements and build solutions with the project teams
Continuously implement efficiencies using current toolsets
Implement advanced alerting and increased visibility using current and new toolsets, automation, and process
Lead incident responses and events
Stay abreast of TTPs, global security incidents, industry trends, advisories, publications, research, talks, and other relevant developments
Assist in preparing standards, baselines, and documents for the installation of security, infrastructure, cloud, and application technologies
Assist in preparing detailed bid specifications for the installation
Assist the technical evaluations of contractor proposals, software, or hardware
Minimum Education Required High School/GED
Qualifications Required Education/Experience:
High School Diploma/GED and 5 years of IT experience
Associate's Degree and 4 years of IT experience
Bachelor's Degree and 2 years of IT experience
Relevant Work Experience:
At least 1 year in a cybersecurity role
Less than 2 years – Deep understanding of general information security concepts and defensive controls
Less than 2 years – Familiar with assessment frameworks (MITRE ATT&CK, PTES, OSSTMM, OWASP)
Less than 2 years – Thorough understanding of network architecture and design, protocols, covert channels, encryption, data exfiltration
Less than 2 years – Experienced with Windows, Mac, Linux, Unix, virtualization, storage, databases, and related security considerations
Less than 2 years – Detailed understanding of systems/network hardening, secure coding practices, mitigation/remediation strategies
Less than 2 years – Able to communicate to both technical and executive/business audiences
Less than 2 years – Able to work independently and within a team
Less than 2 years – Comfortable working remotely within a distributed team
Less than 2 years – Build relationships with stakeholders throughout the organization
Less than 2 years – Exemplify company core values and act as role model
Less than 2 years – Leverage critical thinking and creativity; think outside the box
Less than 2 years – Effectively manage large amounts of information from complex environments and applications
Skills and Abilities
Articulate and responsive to colleagues
Demonstrated analytical skills
Strong written and verbal communication skills
Strong verbal communication and listening skills
Flexibility to work in a fast paced, dynamic environment
Well organized, detail oriented and flexible to handle multiple assignments
Licenses and Certifications Other: Security+, Pentest+, CySA+ 1 Year Preferred
Physical Demands
Must push, pull, lift up to 25 pounds
Must sit or stand to use a keyboard, mouse, and computer for entire shift
Must be able to respond to Company emergencies by performing a System Emergency Assignment to restore service to our customers
Certificates/Security Clearances/Other City: New York State: New York
Job Code Analyst_ _Analyst
Affiliate Sponsor Con Edison
Seniority level Entry level
Employment type Full-time
Job function Information Technology
#J-18808-Ljbffr
System Analyst, Cybersecurity Operations - New York NY
role at
VetJobs .
ATTENTION MILITARY AFFILIATED JOB SEEKERS – Our organization works with partner companies to source qualified talent for their open roles. This position is available to Veterans, Transitioning Military, National Guard and Reserve Members, Military Spouses, Wounded Warriors, and their Caregivers. If you have the required skill set, education requirements, and experience, please submit your application.
Minimum Salary:
$80,000.00
Maximum Salary:
$105,000.00
Job Description The System Analyst will join Con Edison's Cybersecurity Operations team. This team implements and utilizes various tools and processes to build, run, and enhance the cybersecurity programs. The System Analyst will contribute to the company's threat management program by developing use cases on our Threat Intelligence Platform (TIP), analyzing threat intelligence, performing impact assessments and investigations, enabling and performing threat hunts, and assisting in attack surface reduction efforts. They will support the Cybersecurity Operations Center (CSOC) through enablement and the development and introduction of new technologies, solutions, and capabilities, as well as provide advanced analysis and support. The System Analyst will also contribute to Purple Team efforts. They will create new and tune existing cybersecurity alerts, as well as lead the onboarding and transition of new alerts and security tools for the CSOC. They will also assist in monitoring trends, scenarios, and the changing threat landscape and will coordinate with the broader Information Security and infrastructure teams to take appropriate actions on both immediate needs and regularly scheduled cadences. The team also has related responsibilities to provide guidance and direction to its counterparts and stakeholders to bolster the overall security posture and capabilities of the organization's cybersecurity program.
Responsibilities
Create new and tune existing cybersecurity alerts
Lead the onboarding of and training for new security tools and alerts
Monitor, assist in troubleshooting, and perform power use functions in a variety of security tools
Support and, when required, lead incident response efforts and threat detection capabilities
Enable the CSOC by developing and providing new capabilities and solutions
Perform blue and purple team functions
Define, design, and implement strategies to protect against emerging threats using security tools
Correlate security events to identify threats and implement countermeasures to reduce attack surface
Develop scripts and tools to automate tedious processes and increase efficiency
Effectively communicate technical concepts to non-technical audiences
Provide technical expertise and support to business partners and leadership on cybersecurity threat assessments, development, testing and the implementation
Implement & operate applicable information security plans, procedures, and control techniques designed to prevent cyber-attacks & events
Create accurate documentation that provides concise explanations and conveys informative descriptions of findings, including technical explanations/walkthroughs, root causes, impact, and remediation/mitigation strategies
Collaborate across the organization to build out improvement opportunities
Monitor cybersecurity threats and vulnerabilities and provide support as necessary to incident response team
Must be available 24/7, on call, and/or participate in off-hour emergency response activities as required
Act as advanced support and escalation for the cybersecurity operations center
Continuously perform capability enhancements with tools and processes
Manage and lead information security projects for the cybersecurity operations team
Hold seats on projects to articulate requirements and build solutions with the project teams
Continuously implement efficiencies using current toolsets
Implement advanced alerting and increased visibility using current and new toolsets, automation, and process
Lead incident responses and events
Stay abreast of TTPs, global security incidents, industry trends, advisories, publications, research, talks, and other relevant developments
Assist in preparing standards, baselines, and documents for the installation of security, infrastructure, cloud, and application technologies
Assist in preparing detailed bid specifications for the installation
Assist the technical evaluations of contractor proposals, software, or hardware
Minimum Education Required High School/GED
Qualifications Required Education/Experience:
High School Diploma/GED and 5 years of IT experience
Associate's Degree and 4 years of IT experience
Bachelor's Degree and 2 years of IT experience
Relevant Work Experience:
At least 1 year in a cybersecurity role
Less than 2 years – Deep understanding of general information security concepts and defensive controls
Less than 2 years – Familiar with assessment frameworks (MITRE ATT&CK, PTES, OSSTMM, OWASP)
Less than 2 years – Thorough understanding of network architecture and design, protocols, covert channels, encryption, data exfiltration
Less than 2 years – Experienced with Windows, Mac, Linux, Unix, virtualization, storage, databases, and related security considerations
Less than 2 years – Detailed understanding of systems/network hardening, secure coding practices, mitigation/remediation strategies
Less than 2 years – Able to communicate to both technical and executive/business audiences
Less than 2 years – Able to work independently and within a team
Less than 2 years – Comfortable working remotely within a distributed team
Less than 2 years – Build relationships with stakeholders throughout the organization
Less than 2 years – Exemplify company core values and act as role model
Less than 2 years – Leverage critical thinking and creativity; think outside the box
Less than 2 years – Effectively manage large amounts of information from complex environments and applications
Skills and Abilities
Articulate and responsive to colleagues
Demonstrated analytical skills
Strong written and verbal communication skills
Strong verbal communication and listening skills
Flexibility to work in a fast paced, dynamic environment
Well organized, detail oriented and flexible to handle multiple assignments
Licenses and Certifications Other: Security+, Pentest+, CySA+ 1 Year Preferred
Physical Demands
Must push, pull, lift up to 25 pounds
Must sit or stand to use a keyboard, mouse, and computer for entire shift
Must be able to respond to Company emergencies by performing a System Emergency Assignment to restore service to our customers
Certificates/Security Clearances/Other City: New York State: New York
Job Code Analyst_ _Analyst
Affiliate Sponsor Con Edison
Seniority level Entry level
Employment type Full-time
Job function Information Technology
#J-18808-Ljbffr