Information Technology Specialist ; Information Security

Overview

The incumbent will report to the Cyber Incident Response Team Unit within the Office of Counter Terrorism.

• Participate in remote and on-site penetration testing, vulnerability scanning, and report writing for the DHSES Pentest Program.
• Utilize existing, approved tools to perform network penetration tests and risk assessments for external entities.
• Develop custom tools as needed to improve the DHSES Cyber Programs.
• Effectively communicate findings and technical details to varied audiences (e.g., IT workers, leadership) within an organization.
• Participate in drafting of reports and ensure reports are both technically accurate and well-written.
• Mentor and cross-train staff from other CIRT program areas interested in offensive security.
• Lead and facilitate stakeholders’ participation in technical cyber security meetings, presentations, trainings, seminars, etc., to foster information-sharing and enhance awareness.
• Oversee and conduct technical outreach to non-Executive agencies, local governments, and public authorities to discuss cyber security policies, programs, and infrastructure.
• Monitor information security trends, tools, and techniques to maintain awareness and evaluate the applicability of the latest information security techniques and tools to agencies’ security programs.
• Liaise with cyber security industry experts to maintain knowledge of cyber trends and techniques.
• Assist in disaster response and recovery activities as required and assigned.
• Travel may be required, including during evening and weekends, depending on mission and assignment. Possession and maintenance of a valid Driver’s License issued by the Department of Motor Vehicle is required, or otherwise demonstrate the capacity to meet the transportation needs of the job.
• Support the adjacent DHSES CIRT cyber programs and ad-hoc initiatives.
• The appointed candidate will be required to obtain one of the following certifications during their probationary period (if not already held): GPEN, GXPN, OSCP, OSEP, or equivalent. Failure to obtain this level of certification will result in termination. Additional details about the required certifications will be discussed during the job interview.

Minimum Qualifications
NON-COMPETITIVE
Six years of information technology, cybersecurity, or information assurance experience, including one year at the supervisory level.

Substitutions
An associate degree with 15 semester credit hours in computer science or related field may substitute for one year of required experience. Candidates in a bachelor’s degree program with at least 15 semester credit hours in computer science or related field may substitute such credits for one year of required experience.

Educational Substitution
A bachelor's or higher-level degree in any field including or supplemented by 15 semester credit hours in computer science or related field substitutes for three years of required experience; any bachelor’s substitutes for two years of required experience.

Master Substitution
A master’s degree or higher in computer science or related field substitutes for one year of required experience.

Offensive Security

• OSCP (Certified Professional)
• OSEP (Experienced Penetration Tester)

SANS GIAC

• GPEN (Penetration Tester)
• GXPN (Exploit Researcher & Advanced Penetration Tester)
• GCIH (Certified Incident Handler)
• GWAPT (Web Application Penetration Tester)

Hack The Box

• CPTS (Certified Penetration Testing Specialist)

NOTE:

Support of operations during times of emergency and disaster from the State Emergency Operations Center (EOC), state field offices and/or local deployments may be required, which would result in a change and/or increase in working hours, locations and/or duties.

NOTE ON TELECOMMUTING:
Employees are required to apply and obtain approval through management to telecommute according to the agency's Telecommuting Program Guidelines.

The Division of Homeland Security and Emergency Services (DHSES) is an equal opportunity employer.

In accordance with the NYS Human Rights Law, DHSES does not discriminate based upon age, race, creed, color, national origin, sexual orientation, gender identity or expression, religion, military or veteran status, sex, disability (including pregnancy-related conditions), predisposing genetic characteristics, familial status, marital status or status as a victim of domestic violence, or other applicable legally protected characteristics.

DHSES is committed to fostering diversity, inclusion, and accessibility in the workplace and is committed to providing our programs and services without discrimination.

In support of Executive Order 31, all qualified individuals with disabilities are encouraged to apply.