Jump to main content.

The Official Careers Website of the City of New York

Search

Cyber Incident Responder

  1. NYC HOUSING AUTHORITY
Posted on: 10/19/2023
  1. Full-time

Location

NYC-ALL BOROS

  1. Exam may be required

Department

Cyber Security & IT Risk MGMT

$54,281.00 – $77,250.00

Job Description

This vacancy has now expired.

The New York City Housing Authority (“NYCHA”) is the largest public housing authority in North America. NYCHA’s mission is to increase opportunities for low- and moderate-income New Yorkers by providing safe, affordable housing and facilitating access to social and community services. Over 500,000 New Yorkers reside in over 300 developments offering residents public housing, Section 8 and PACT/RAD programs. NYCHA IT delivers meaningful, innovative, high-performing, cost-effective technology solutions to enable NYCHA to provide quality housing.

The Cyber Incident Responder is responsible for monitoring, analyzing, and responding to security events and incidents. This role leverages security monitoring, incident triage, and threat analysis to identify potential security risks, assist in incident response efforts, and enhance the overall security posture at NYCHA.

Responsibilities include, but are not limited to the following:

- Monitor security events, alerts, and logs from various sources, including security information and event management (SIEM) platforms.
- Analyze security events and incidents to identify potential security breaches, vulnerabilities, or abnormal activities.
- Analyze identified malicious activity to determine weaknesses exploited, exploitation methods and effects on system and information.
- Conduct initial triage of security incidents, assessing their severity and escalating as necessary to the incident response team or other relevant stakeholders.
- Determine tactics, techniques, and procedures (TTPs) for intrusion sets.
- Investigate and analyze potential security incidents, working with incident response teams to identify the root cause, impact, and appropriate remediation measures.
- Assist with identifying and implementing security controls with other teams to enhance monitoring capabilities and improve incident response processes.
- Stay informed about the latest security threats, vulnerabilities, and industry trends to help proactively identify potential risks and recommend appropriate preventive measures.
- Develop and maintain security incident reports, documenting incident details, response actions, and lessons learned for continuous improvement.
- Assist in the development, implementation, and maintenance of security monitoring tools, technologies, and processes.
- Assist with conducting regular security assessments, vulnerability scans, and penetration testing to identify weaknesses and recommend remediation actions.

NOTE: IF THIS APPOINTMENT IS MADE ON A PROVISIONAL BASIS PURSUANT TO 65 OF THE NYS CIVIL SERVICE LAW, NO TENURE OR PERMANENCE ACCRUES TO AN INCUMBENT IN THIS POSITION BY VIRTUE OF SUCH APPOINTMENT.

NOTE: This position is open to qualified persons with a disability who are eligible for the 55-a Program. Please indicate in your cover letter that you would like to be considered for the position under the 55-a Program. For detailed information regarding the 55-a Program, please visit the link below:

http://www.nyc.gov/html/dcas/downloads/pdf/psb/100_1.pdf

Additional Information

1. NYCHA employees applying for promotional, title or level change opportunities must have served a period of one year at current location and in current title and level (if applicable).
2. NYCHA residents are encouraged to apply.

Please read this posting carefully to make certain you meet the qualification requirements before applying to this position.


Minimum Qualifications

1. A baccalaureate degree, from an accredited college including or supplemented by twenty-four (24) semester credits in cyber security, network security, computer science, computer programming, computer engineering, information technology, information science, information systems management, network administration, or a pertinent scientific, technical or related area; or

2. A four-year high school diploma or its equivalent approved by a State’s department of education or a recognized accrediting organization and three years of satisfactory experience in any of the areas described in “1” above; or

3. Education and/or experience equivalent to “1” or “2”, above. College education may be substituted for up to two years of the required experience in “2” above on the basis that sixty (60) semester credits from an accredited college is equated to one year of experience. In addition, twenty-four (24) credits from an accredited college or graduate school in cyber security, network security, computer science, computer programming, computer engineering, information technology, information science, information systems management, network administration, or a pertinent scientific, technical or related area; or a certificate of at least 625 hours in computer programming from an accredited technical school (post high school), may be substituted for one year of experience.


Preferred Skills

- Basic familiarity with security monitoring tools and technologies, such as SIEM platforms, intrusion detection systems (IDS), or vulnerability scanners. - Foundational awareness of common security frameworks, standards, and best practices (e.g., NIST Cybersecurity Framework, ISO 27001, CIS Controls). - Fundamental understanding of network protocols, systems, and security architectures. - Exposure to incident response, including incident triage, investigation, and coordination. - Skillful in log analysis and security event correlation. - Awareness of threat intelligence, attack vectors, and indicators of compromise (IOCs). - Strong analytical and problem-solving skills, with attention to detail. - Effective communication and teamwork abilities. - Demonstrated passion for cyber security must possess a strong willingness to learn, and a dedicated commitment to staying updated on the latest industry trends and best practices.
55a Program

This position is also open to qualified persons with a disability who are eligible for the 55-a Program. Please indicate at the top of your resume and cover letter that you would like to be considered for the position through the 55-a Program.
Public Service Loan Forgiveness

As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/.
Residency Requirement

NYCHA has no residency requirements.
Additional Information

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.

Job ID

610510

Title code

13633

Civil service title

CYBER SECURITY ANALYST

Title classification

Competitive-1

Business title

Cyber Incident Responder

  1. Experienced (non-manager)

Job level

01

Number of positions

1

Work location

C&RM-Security Governance

  1. Technology, Data & Innovation

Cyber Incident Responder

Search