Cybersecurity Operations Center Analyst

The New York Independent System Operator (NYISO) manages the efficient flow of electricity on more than 11,000 circuit-miles of high-voltage transmission lines, dispatching power from hundreds of generating units across the state.

The New York Independent System Operator (NYISO) applies cutting-edge technology to operating a reliable electricity system, managing competitive markets for wholesale electricity, and planning for the Empire State's energy future.  The NYISO’s Information Technology department invites applications for a full-time Cybersecurity Operations Center Analyst.

The NYISO Cybersecurity Operation Center’s (CSOC) mission is to provide a central point for 24x7x365 continuous security monitoring of NYISO’s computing environments and for responding to cyber threats, vulnerabilities and incidents that can disrupt and/or compromise the mission and operation of the NYISO.

Cybersecurity Operations Center Analysts will perform a wide range of technical cybersecurity services with a focus on responding to cyber threats and incidents with the goal of preventing or mitigating cyber threats and incidents from adversely impacting the NYISO. This role involves collaborating and cooperating with NYISO IT groups to provide monitoring and security related oversight of critical infrastructure, along with keeping all stakeholders informed of evolving threats and vulnerabilities that could impact NYISO infrastructure.  

This position involves critical duties and responsibilities that must continue to be performed during crisis situations and contingency operations. Analysts are required to work shift rotations to support around the clock (24x7x365) coverage of the CSOC.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Provide around the clock monitoring, analysis, and response to cyber security events and trends of security log data.
• Maintain records of security monitoring and incident response activities, utilizing case management and ticketing technologies.
• Provide incident response support, including triage, remediation and
• Investigate and document events to aid incident responders, managers and other CSOC team members on security issues and the emergence of new
• Recognize potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event information. Escalate intrusions and compromises to NYISO’s network infrastructure, applications, and operating systems to the CSIRT as
• Analyze sourced intelligence of attacker tactics, techniques, and procedures (TTPs)
• Provide threat and vulnerability research and analysis
• Execute defined standard operating procedures, event and job aides required for successful task completion.
• Integrate and share information with other analysts and other
• Recommend changes to Standard Operating Procedures and other similar
• Generate end-of-shift reports for documentation and knowledge transfer to subsequent on-shift
• Other duties as assigned. 

REQUIRED QUALIFICATIONS

• At least 1 year of experience as a Cyber Security Analyst or related role .
• Knowledge of various security methodologies and processes, and technical security solutions (firewall, intrusion detection systems, and Security Information and Event Management (SIEM) platforms).
• Knowledge of TCP/IP Protocols, network analysis, and network/security
• Knowledge of common Internet protocols and web
• Ability to multi-task, prioritize, and manage time
• Strong attention to detail.
• Excellent interpersonal skills and professional
• Excellent verbal and written communication
• Excellent customer service
• Proficient in Microsoft Office

PREFERRED QUALIFICATIONS

• Experience administrating various operating systems (e.g., Windows, OS X, Linux, etc.) commonly deployed in enterprise networks. A conceptual understanding of Windows Active Directory is also
• Working knowledge of network communications and routing protocols (e.g., TCP, UDP, ICMP, BGP, MPLS, etc.) and common internet applications and standards (e.g., SMTP, DNS, DHCP, SQL, HTTP, HTTPS, )
• Experience working with various event logging systems and be proficient with security event log analysis. Previous experience with Security Information and Event Monitoring (SIEM) platforms that perform log collection, analysis, correlation, and alerting is also
• Experience in analyzing net flow data and packet capture (PCAP).

EDUCATION

Bachelor's Degree (BS) in Information Security, Computer Science, Computer Information Systems or similar fields required. In lieu of degree requirements, significant security and/or industry experience may be considered

CERTIFICATES, LICENSES, REGISTRATIONS

DHS Secret Clearance or above preferred.

ADDITIONAL REQUIREMENTS

• Ability to read, analyze and interpret general business periodicals, professional journals, technical procedures and governmental regulations.
• Ability to write reports, business correspondence and procedure manuals.
• Ability to write presentations and articles for publication that conform to prescribed style and format.
• Ability to effectively communicate security and risk-related concepts to technical and non-technical
• Ability to define problems, collect data, establish facts and draw valid conclusions.
• Ability to interpret an extensive variety of technical instructions in mathematical or diagram form and deal with several abstract and concrete

PHYSICAL DEMANDS

While performing the duties of this job, the employee is regularly required to talk or hear. The employee frequently is required to stand, walk, sit and use hands to perform routine office tasks. The employee is occasionally required to reach with hands and arms. The employee must occasionally lift and/or move up to 15 pounds. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

WORK ENVIRONMENT

The noise level in the work environment is usually moderate. Contact with staff and public will occur. Travel may be required to attend and/or conduct meetings, conferences and training. This position will require work on nights, weekends or holidays. Department supports a 24-hour business operation every day of the year and staff will be required to rotate on-call coverage.

The NYISO takes pride in recruiting, developing and retaining highly talented individuals. In addition to competitive salaries, we offer a comprehensive benefits package and innovative reward programs.

The NYISO offers the flexibility to work both in the office and remotely, providing our employees with an enhanced work life balance. While the majority of the responsibilities of this role can be performed remotely, in most cases, employees will have periodic on-site requirements based on business needs.

All offers of employment will be made contingent upon the successful completion of a drug screening and background check.

The NYISO is an Equal Opportunity Employer and as such, does not discriminate in its hiring or employment practices.

#LI-DNI