New York Independent System Operator, Inc. (NYISO) in Rensselaer, NY seeks a Cyber Security Operations Center Analyst to provide a central point for 24x7x365 continuous security monitoring of NYISO's computing environments and for responding to cyber threats, vulnerabilities and incidents that can disrupt and/or compromise the mission and operation of the NYISO. Cyber Security Operations Center Analyst (CSOC) will perform a wide range of technical cybersecurity services with a focus on responding to cyber threats, intrusions, and incidents; Preventing or mitigating cyber threats and intrusions from adversely impacting the NYISO; Incorporating security operations into NYISO's business continuity and disaster recovery operations; Providing metric, context, and risk-based driven cyber and business reporting; Collaborating and cooperating with NYISO IT Operations and Administrative groups to provide monitoring and security related oversight of critical infrastructure; Keeping all stakeholders informed of evolving threats and vulnerabilities that could impact NYISO infrastructure with the goal of enabling quick mitigation and/or remediation if such threats or vulnerabilities are ever acted upon. This position involves critical duties and responsibilities that must continue to be performed during crisis situations and contingency operations. Analysts are required to work shift rotations to support around the clock (24x7x365) coverage of the CSOC. Specifically, the Cyber Security Operations Center Analyst will perform the following duties: As an active member of the team, provide around the clock monitoring, analysis, and response to cyber security events. Stay ahead of and remain knowledgeable about new threats. Analyze all sourced cyber-intelligence of attacker tactics, techniques, and procedures (TTPs) across a large heterogeneous network of security devices and end-user systems. Participate in threat modeling collaboration with other members of the IT security team. Use automation to orchestrate solutions (SOAR) that automate repetitive tasks, and mature monitoring and response capabilities. Assist with incident response activities, including triage, remediation and documentation. Provide aid in threat and vulnerability research by assessing event data collected by systems both inside and outside of the CSOC. Investigate and document events to aid incident responders, managers and other CSOC team members on security issues and the emergence of new threats. Work alongside other security team members to hunt for and identify possible indication of compromise to the organization computing environments. Recognize potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event information. Escalate intrusions and compromises to NYISO's network infrastructure, applications, and operating systems to the CSIRT as needed. Execute defined standard operating procedures, event and job aides required for successful task completion. Analyze and mitigate or remediate software and hardware vulnerabilities. Integrate and share information with other analysts and other teams. Recommend changes to Standard Operating Procedures and other similar documentation. Generate end-of-shift reports for documentation and knowledge transfer to subsequent analysts on shift. Maintain records of security monitoring and incident response activities, utilizing case management and ticketing technologies. Provide threat and vulnerability analysis reporting as well as security advisory services. Requirements: Bachelor's in Information Security, Computer Science, Computing Security or related technical field.The successful candidate must have six (6) months of cyber security experience which includes working with the following software tools: Firewall, intrusion detection systems, and Security Information and Event Management (SIEM) platforms). IBM Qradar. Kali Linux. TCP/IP Protocols, networ
S:SKINTIAGP2
