NY HELP No Agency Information Technology Services, Office of Title Manager Information Technology Services 1 Infomation Security - 9277 Occupational Category I.T. Engineering, Sciences Salary Grade 27 Bargaining Unit PS&T - Professional, Scientific, and Technical (PEF) Salary Range From $106898 to $131665 Annually Employment Type Full-Time Appointment Type Contingent Permanent Jurisdictional Class Non-competitive Class Travel Percentage 0% Workweek Mon-Fri Hours Per Week 37.5 Workday From 8 AM To 5 PM Flextime allowed? No Mandatory overtime? No Compressed workweek allowed? No Telecommuting allowed? Yes County Albany Street Address 31 British American Blvd City Latham State NY Zip Code 12110 Duties Description ITS provides operational support to state agencies on a 24x7x365 basis; some positions may be required to provide this critical service at any time.Under the direction of the senior team members within the Chief Information Security Office/Cyber Command Center/Cyber Incident Response Team (CIRT), the Manager Information Technology Services 1 (Information Security), SG-27 position will manage and perform incident response and digital forensic activities as part of cyber incident investigations. The incumbent is responsible for directing, supervising, and engaging in cyber incident response and digital forensics and a team lead, and assisting with the management and support of the CIRT. The incumbent will ensure coordination of processes between all staff under their purview and will engage in activities to protect and defend New York State’s infrastructure. In addition, the position will act as a liaison to other stakeholders to ensure that systematic activities follow NYS policies and standards and are coordinated among required teams.The position requires analytical expertise and experience related to cyber security threats and protective measures. The incumbent must demonstrate attention to detail and critical thinking. The incumbent must be able to communicate clearly with subordinate staff regarding work priorities and performance. The incumbent will have to work with other CIRT and IT teams and upper-level management to resolve technically complex and politically sensitive issues under pressure. The incumbent will be expected to be available during off-shift hours to manage response to cyber-attacks and intrusions and is expected to work without direct supervision. Specific duties include, but are not limited to:• Manage, supervise, and engage in cyber incident response and digital forensic activities as a team lead:o Serve as subject matter expert in cyber security incident response.o Manage, supervise, and perform in-depth analysis (e.g., logs analysis, packet capture analysis, malware reverse engineering) during cyber investigations and oversees related tasks for subordinate team members.o Coordinate response efforts with internal (e.g., HR, Legal) and external organizations (e.g., law enforcement, inspector general).o Ensure establishment of root cause and remediation recommendations.o Perform root cause validation to confirm risk and impact of compromise by modeling adversary attack methods against a defined system.o Select and master the use of specialized computer investigation tools (e.g., Encase, FTK data), techniques, and procedures.o Oversee and participate in analysis of digital evidence including laptop, desktop, servers, phones etc. and production of forensic reports with documented findings. o Ensure the proper collection, seizure, and handling of digital or physical evidence while maintaining and documenting an appropriate chain of custody to maintain integrity.o Identify elements discovered during investigations for their potential use as evidence in criminal or other investigations.• Assist with the management and support of the CIRT:o Manage staff and resources dedicated to the team and section.o Monitor work progress and manages workload assignments of the team.o Perform all phases of maintenance and support of digital forensics lab infrastructure and manage related tasks for subordinate team members. This will include but not limited to evidence handling, tracking evidence inventory, configuring network equipment, updating software etc.o Ensure the development, maintenance, and adherence to written standard operating procedures and related processes.o Ensure the development, maintenance, and adherence to workflows to enhance productivity of the unit.o Oversee and participate in creation of written technical reports and executive summaries related to cyber security incidents and events.o Monitor external data sources to maintain currency of threat condition and potential impact on enterprise.o Provides training and guidance and acts as a mentor to subordinate team members.o Develop and maintain operational metrics related to quality, accuracy and timeliness of incident response efforts.o Develops and delivers presentations regarding cyber security threats and response and remediation efforts.• Perform the full range of supervisory responsibilities.o Maintains an adequate level of current knowledge and proficiency in information security through annual Continuing Professional Education (CPE) credits directly related to information security.o Supports CISO project initiatives and all other projects as assigned. Minimum Qualifications Bachelor’s degree* with at least 15 credit hours in cyber security, information assurance or information technology and four years of information technology experience, including three years of information security or information assurance experience and two years at a supervisory level.* Bachelor's degree candidates without at least 15 course credits in cyber security, information assurance, or information technology require an additional year of general information technology experience to qualify. Appropriate information security or information assurance experience may substitute for the bachelor's degree on a year-for-year basis; an associate's degree requires an additional two years of general information technology experience. Experience solely in information security or information assurance may substitute for the general information technology experience. Additional Comments Some positions may require fingerprinting. Some positions may require up to 25% travel and/or lifting up to 50 lbs. Some positions are pending Civil Service approval. Details of position(s) will be described further if you are selected for an interview. Positions located in New York City, will receive an additional $3,400 downstate adjustment location pay with regular annual salary. Positions located in the Mid-Hudson will receive an additional $1,650 adjustment location pay.For the duration of the NY HELPS Program, this title maybe filled via a non- competitive appointment, which means no examination is required but all candidates must meet the minimum qualifications of the title for which they apply. At this time, agencies may recruit and hire employees by making temporary appointments. In May 2024, if a temporary NY HELPS employee is satisfactorily performing in the position, the appointment will be changed from temporary pending Civil Service Commission Action to permanent non-competitive and the official probationary period will begin.At a future date (within one year of permanent appointment), it is expected employees hired under NY HELPS will have their non-competitive employment status converted to competitive status, without having to compete in an examination. Employees will then be afforded with all of the same rights and privileges of competitive class employees of New York State. While serving permanently in a NY HELPS title, employees may take part in any promotion examination for which they are qualified.Benefits of Working for NYS Generous benefits package, worth 65% of salary, including:Holiday & Paid Time Off• Thirteen (13) paid holidays annually• Up to Thirteen (13) days of paid vacation leave annually• Up to Five (5) days of paid personal leave annually• Up to Thirteen (13) days of paid sick leave annually for PEF.• Up to three (3) days of professional leave annually to participate in professional developmentHealth Care Benefits• Eligible employees and dependents can pick from a variety of affordable health insurance programs• Family dental and vision benefits at no additional costAdditional Benefits• New York State Employees’ Retirement System (ERS) Membership• NYS Deferred Compensation• Access to NY 529 and NY ABLE College Savings Programs, as well as U.S. Savings Bonds• Public Service Loan Forgiveness (PSLF)• And many more.The Office of Information Technology Services is an equal opportunity employer, and we recognize that diversity in our workforce is critical to fulfilling our mission. We encourage all individuals with disabilities to apply. Some positions may require additional credentials or a background check to verify your identity. Name ITS Human Resources Telephone 518-473-0398 Fax 518-402-4924 Email Address PostingResponses@its.ny.gov Address Street Empire State Plaza Swan Street Building, Core 4, Floor 1 City Albany State NY Zip Code 12220 Notes on Applying To apply for this position, please submit a cover letter and resume clearly indicating how you qualify. Ensure that you include the vacancy ID in the subject of your email for prompt routing. Your Social Security number may be required to confirm eligibility.