Information Technology Specialist ; Information Security

Overview

The New York State Office of Information Technology Services (ITS) provides operational support 24 hours a day, 7 days a week, 365 days of the year, supporting more than 4,900 applications for 53 New York State Agencies.

Duties Include, But Are Not Limited To The Following

• Security Monitoring & Analysis:
  Monitor security alerts and logs from various IT and OT systems (e.g., SIEM, IDS/IPS, firewalls, endpoint detection and response (EDR) solutions, SCADA/ICS security tools).
• Analyze security events to identify potential threats, vulnerabilities, and policy violations.
• Investigate security incidents, determine scope and impact, and recommend appropriate remediation actions.
• Perform threat hunting activities to proactively identify and mitigate emerging threats.
• Incident Response:
  Participate in the incident response process, including containment, eradication, and recovery efforts for IT and OT incidents.
• Document incident details, actions taken, and lessons learned.
• Assist in developing and refining incident response playbooks and procedures.
• Vulnerability Management:
  Assist in the identification, assessment, and prioritization of vulnerabilities within IT and OT environments.
• Coordinate with IT and OT teams to ensure timely remediation of identified vulnerabilities.
• Support regular vulnerability scanning and penetration testing activities.
• Security Tool Management:
  Assist in the deployment, configuration, and maintenance of security tools and technologies.
• Provide input for the optimization and tuning of security solutions.
• IT/OT Security
  
  Collaboration:
  
  Work closely with IT and OT engineers, operators, and stakeholders to understand system architectures and security requirements.
• Translate security risks and requirements between IT and OT domains.
• Contribute to security awareness training and best practices for both IT and OT personnel.
• Reporting & Documentation:
  Generate regular security reports on key metrics, incidents, and trends.
• Maintain accurate and up-to-date security documentation.
• Compliance & Policy:
  Assist in ensuring compliance with relevant industry regulations and internal security policies.
• Perform additional duties as required.

Minimum Qualifications

Non-competitive:
Five years of information technology, cybersecurity, or information assurance experience.

• Education/Experience Substitutions: A bachelor
  29s or higher-level degree in any field including or supplemented by 15 semester credit hours in computer science or related field substitutes for three years of required experience.
• An associate degree with 15 semester credit hours in computer science or related field may substitute for one year of required experience. Candidates in a bachelor e29s degree program with at least 15 semester credit hours in computer science or related field may substitute such credits for one year of required experience.
• A master
  29s degree or higher in computer science or related field substitutes for one year of required experience.

Preferred Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.
• 3+ years of experience in a cybersecurity role, with a focus on security operations, incident response, or threat analysis.
• Demonstrated experience in securing Information Technology (IT) environments.
• Demonstrated experience or a strong understanding of securing Operational Technology (OT) environments. This could include experience with OT network protocols, security challenges specific to OT, and relevant security technologies.
• Technical
  
  Skills:
  
  Proficiency with Security Information and Event Management (SIEM) tools (e.g., Splunk, QRadar, Log Rhythm).
• Experience with Intrusion Detection/Prevention Systems (IDS/IPS) and firewalls.
• Familiarity with Endpoint Detection and Response (EDR) solutions.
• Understanding of network security principles, protocols (TCP/IP, DNS, HTTP/S), and common attack vectors.
• Knowledge of common IT security frameworks (e.g., NIST Cybersecurity Framework, ISO 27001).
• Familiarity with OT security concepts, standards (e.g., IEC 62443), and challenges.
• Experience with vulnerability scanning tools.
• Basic understanding of scripting languages (e.g., Python, Power Shell) is a plus.
• Soft Skills:
  
  Strong analytical and problem-solving skills. Excellent communication and interpersonal skills, with the ability to explain technical concepts to both technical and non-technical audiences. Ability to work independently and as part of a team. Strong attention to detail and organizational skills. Ability to prioritize and manage multiple tasks effectively.

Additional Notes

• Please Note:
  
  Appointment to this position and continued employment with the agency is contingent upon obtaining and/or maintaining New York State residency within six months of hiring.
• Appointment to this position is not final until all agency approvals have been granted.

ITS will not offer permanent employment to any candidate unless the candidate provides…