<p>Please note: State agencies that contact job applicants do not usually request personal or financial information via text message or over the phone in connection with your response to a job posting. If you are contacted for such information by these methods, or any other method, please verify the identity of the individual before transmitting such information to that person.</p> <p>Note: For questions about the job posting, please contact the agency that posted this position by using the contact information provided on the "Contact" tab for the position.</p> <p>Review Vacancy</p> <p>Date Posted 03/17/25</p> <p>Applications Due04/01/25</p> <p>Vacancy ID183001</p> <ul> <li>Basics </li><li>Schedule </li><li>Location </li><li>Job Specifics </li><li>How to Apply </li></ul> <p>NY HELPNo</p> <p>AgencyHomeland Security and Emergency Services, Division of</p> <p>TitleIntelligence Analyst 1 (Information Systems)</p> <p>Occupational CategoryOther Professional Careers</p> <p>Salary Grade25</p> <p>Bargaining UnitPS&T - Professional, Scientific, and Technical (PEF)</p> <p>Salary RangeFrom $93530 to $117875 Annually</p> <p>Employment Type Full-Time</p> <p>Appointment Type Contingent Permanent</p> <p>Jurisdictional Class Non-competitive Class</p> <p>Travel Percentage 30%</p> <p>Workweek Mon-Fri</p> <p>Hours Per Week 37.5</p> <p>Workday</p> <p>From 8 AM</p> <p>To 5 PM</p> <p>Flextime allowed? No</p> <p>Mandatory overtime? No</p> <p>Compressed workweek allowed? No</p> <p>Telecommuting allowed? Yes</p> <p>County Albany</p> <p>Street Address 1220 Washington Avenue</p> <p>City Albany</p> <p>StateNY</p> <p>Zip Code12226</p> <p>Duties Description The incumbent will report to the Critical Incident Response Team (CIRT) in the Office of Counter Terrorism (OCT). Duties include but are not limited to:</p> <ul> <li>Serve as a subject matter expert in cybersecurity incident response. </li><li>Provide cyber incident response support, including digital forensics and root cause analysis, for confirmed actionable incidents such as detected cyber-attacks, malware infections, or ransomware events. </li><li>Determine root cause(s) of a cyber incident and provide affected entities with actionable recommendations to contain, eradicate, and mitigate threats. </li><li>Respond to reported cyber incidents swiftly and ensure all incidents are documented accurately in the tracking system in a timely manner. </li><li>Escalate and brief leadership on cyber incidents, especially those that could have an impact to health, safety, and state operations. </li><li>Maintain clear and consistent communication with cyber partners across New York State throughout the incident response process. </li><li>Use incident data to identify specific vulnerabilities and provide recommendations to help strengthen the affected entities security posture and prevent future threats. </li><li>Continuously develop, review, and update digital forensics and incident response policies, procedures, and user guides to support program growth and improvement. </li><li>Manage the digital forensics and incident response lab functions, including managing tools, resources, and workflows to stay current and prepared. </li><li>Effectively communicate cybersecurity details and technical analysis to audiences within an organization to ensure appropriate actions are taken by decision-makers. </li><li>Communicate cyber threats and vulnerabilities clearly and concisely, both verbally and in writing, to state and local officials, ensuring they are informed and able to take appropriate action. </li><li>Maintain up-to-date technical knowledge of cybersecurity issues and emerging trends to stay ahead of potential risks and support proactive security development. </li><li>Assist in developing and distributing actionable strategic, technical, and tactical cyber information and intelligence to non-executive agencies, local governments, and public authorities through weekly, monthly, or ad hoc reports, briefings, and presentations. </li><li>Support cybersecurity meetings, presentations, seminars, etc., to foster information-sharing and raise awareness across relevant stakeholders. </li><li>Support training exercises targeted to non-executive agencies, local governments, and public authorities focusing on cybersecurity best practices. </li><li>Support other CIRT program areas as required. </li><li>Travel is required </li></ul> <p>Minimum Qualifications Non-competitive:</p> <p>Bachelor's degree with at least 15 credit hours in cyber security, information assurance, or information technology; and three years of information technology experience including two years of information security or information assurance experience*.</p> <ul> <li>Experience solely in information security or information assurance may substitute for </li></ul> <p>the general information technology experience.</p> <p>Substitution: bachelor's degree candidates without at least 15 course credits in cyber security, information assurance, or information technology require an additional year of general information technology experience to qualify. Appropriate information security or information assurance experience may substitute for the bachelor's degree on a year-for-year basis; an associate degree requires an additional two years of general information technology experience.</p> <p>Desired SANS Global Information Assurance Certifications:</p> <p>Certified Incident Handler Certification, ANS GCIH</p> <p>Certified Forensic Analyst, GCFA</p> <p>Certified Forensic Examiner, GCFE</p> <p>Cloud Forensics Responder, GCFR</p> <p>Enterprise Incident Responder, GEIR</p> <p>Network Forensic Analyst, GNFA</p> <p>Penetration Tester Certification, GPEN</p> <p>Reverse Engineering Malware, GREM</p> <p>Web Application Penetration Tester, GWAPT</p> <p>Additional Comments This position is eligible for location pay of $4,000.</p> <p>Possession and maintenance of a valid Driver's License issued by the NYS Department of Motor Vehicle is required, or otherwise demonstrate the capacity to meet the transportation needs of the job.</p> <p>NOTE: Support of operations during times of emergency and disaster from State Emergency Operations Center (EOC), state field offices and/or local deployments may be required, which would result in a change and/or increase in working hours, locations and/or duties.</p> <p>NOTE ON TELECOMMUTING: Employees are required to apply and obtain approval through management to telecommute according to the agency's Telecommuting Program Guidelines.</p> <p>Some positions may require additional credentials or a background check to verify your identity.</p> <p>Name Human Resources/SB</p> <p>Telephone 518-486-5700</p> <p>Fax 518-485-8432</p> <p>Email Address HRresumes@dhses.ny.gov</p> <p>Address</p> <p>Street NYS Division of Homeland Security and Emergency Services, HRM</p> <p>1220 Washington Ave., Bldg. 7A, 5th Floor</p> <p>City Albany</p> <p>State NY</p> <p>Zip Code 12226</p> <p>Notes on ApplyingPlease submit a resume and cover letter detailing how you meet the minimum qualifications. Indicate the Position Title & Vacancy ID 183001 in the subject line of your application email to HRresumes@dhses.ny.gov.</p>