<p>Please note: State agencies that contact job applicants do not usually request personal or financial information via text message or over the phone in connection with your response to a job posting. If you are contacted for such information by these methods, or any other method, please verify the identity of the individual before transmitting such information to that person.</p> <p>Note: For questions about the job posting, please contact the agency that posted this position by using the contact information provided on the "Contact" tab for the position.</p> <p>Review Vacancy</p> <p>Date Posted 12/04/25</p> <p>Applications Due12/19/25</p> <p>Vacancy ID204205</p> <ul> <li>Basics </li><li>Schedule </li><li>Location </li><li>Job Specifics </li><li>How to Apply </li></ul> <p>NY HELPNo</p> <p>AgencyInformation Technology Services, Office of</p> <p>TitleInformation Technology Specialist 3 Information Security - 10229</p> <p>Occupational CategoryI.T. Engineering, Sciences</p> <p>Salary Grade23</p> <p>Bargaining UnitPS&T - Professional, Scientific, and Technical (PEF)</p> <p>Salary RangeFrom $86681 to $109650 Annually</p> <p>Employment Type Full-Time</p> <p>Appointment Type Contingent Permanent</p> <p>Jurisdictional Class Non-competitive Class</p> <p>Travel Percentage 0%</p> <p>Workweek Mon-Fri</p> <p>Hours Per Week 37.5</p> <p>Workday</p> <p>From 8 AM</p> <p>To 5 PM</p> <p>Flextime allowed? No</p> <p>Mandatory overtime? No</p> <p>Compressed workweek allowed? No</p> <p>Telecommuting allowed? Yes</p> <p>County Albany</p> <p>Street Address 31 British American Blvd</p> <p>City Latham</p> <p>StateNY</p> <p>Zip Code12110</p> <p>Duties Description Under the direction of senior leadership within the Office of Information Technology Services (ITS)\Chief Information Security Office (CISO)\Cyber Command Center\NYSOC, the incumbent will be a Threat Hunting Analyst working in the New York Security Operations Center (NYSOC). The incumbent will leverage a variety of threat intelligence sources and indicators of compromise (IOCs) to perform both proactive and reactive threat hunting across a large and diverse multi-entity environment. The incumbent will participate in the ingestion and response to all forms of threat intelligence and vulnerability announcements received from many third parties such as vendors, DHS CISA, MS-ISAC, NYSP, and other sources of open-source intelligence.</p> <p>This position requires the incumbent to possess a solid understanding of the current cyber threat landscape, the tactics, techniques, tools, and procedures commonly leveraged, and the steps necessary to swiftly identify and contain a potential cyber threat. Additionally, this position requires an incumbent to act with a great deal of independence in alignment with agency and upper-level management strategic direction.</p> <p>Due to the nature of the work performed by the SOC, this position requires availability during off-shift hours to ensure appropriate response to security incidents or other critical activities as needed. This position is available and can be filled in any of the following NYSOC locations: Latham, Rochester, or New York City. Additional information on work schedule will be discussed at time of interview.</p> <p>Specific duties include, but are not limited to:</p> <ul> <li>Monitor and report on current and emerging threats including exploitable vulnerabilities and details of those vulnerabilities </li><li>Conduct research, analysis, and correlation across a wide variety of all source data sets such as IOCs, IOAs, and warnings </li><li>Perform threat hunting across a multi-OS/multi-cloud environment to ensure a timely and effective response to new cyber threats </li><li>Identify tactics, techniques, and procedures (TTPs) for intrusion sets </li><li>Respond to ad-hoc requests, research, and threat hunts, and assist with other business units as needed </li><li>Assist with creating detection content based on threat hunting findings </li><li>Document all threat hunt, track, and create trends based on the findings </li><li>Classify/categorize hunting use cases based on MITRE ATT&CK framework and cyber kill chain </li></ul> <p>? Create daily, monthly, and yearly intelligence information in support of NYSOC business needs</p> <p>? Create technical reports and executive summaries related to cyber security incidents and events.</p> <ul> <li>Participate in active projects to help identify and resolve issues/problems to ensure successful outcomes are achieved </li></ul> <p>Minimum Qualifications Information Technology Specialist 3 (Information Security)</p> <p>Non-competitive: five years of information technology, cybersecurity, or information assurance experience.</p> <p>Substitutions: A bachelor's or higher-level degree in any field including or supplemented by 15 semester credit hours in computer science or related field substitutes for three years of required experience; any bachelor's substitutes for two years of required experience. An associate degree with 15 semester credit hours in computer science or related field may substitute for one year of required experience. Candidates in a bachelor's degree program with at least 15 semester credit hours in computer science or related field may substitute such credits for one year of required experience. A master's degree or higher in computer science or related field substitutes for one year of required experience.</p> <p>Additional Comments ITS will not offer permanent employment to any candidate unless the candidate provides documentation that they are authorized to accept work in the United States on a permanent basis. It is the policy of ITS not to hire F1 or H1 visa holders for permanent employment or to sponsor non-immigrant aliens for temporary work authorization visas or for permanent residence.</p> <p>Some positions may require fingerprinting.</p> <p>Some positions may require up to 25% travel and/or lifting up to 50 lbs. Some positions are pending Civil Service approval. Details of position(s) will be described further if you are selected for an interview.</p> <p>If eligible, positions located in New York City will receive an additional $3,400 downstate adjustment location pay with regular annual salary. Positions located in the Mid-Hudson will receive an additional $1,650 adjustment location pay.</p> <p>to permanent non-competitive and the official probationary period will begin.</p> <p>Benefits of Working for NYS Generous benefits package, worth 65% of salary, including:</p> <p>Holiday & Paid Time Off</p> <ul> <li>Thirteen (13) paid holidays annually </li><li>Up to Thirteen (13) days of paid vacation leave annually </li><li>Up to Five (5) days of paid personal leave annually </li><li>Up to Thirteen (13) days of paid sick leave annually for PEF. </li><li>Up to three (3) days of professional leave annually to participate in professional development </li></ul> <p>Health Care Benefits</p> <ul> <li>Eligible employees and dependents can pick from a variety of affordable health insurance programs </li><li>Family dental and vision benefits at no additional cost </li></ul> <p>Additional Benefits</p> <ul> <li>New York State Employees' Retirement System (ERS) Membership </li><li>NYS Deferred Compensation </li><li>Access to NY 529 and NY ABLE College Savings Programs, as well as U.S. Savings Bonds </li><li>Public Service Loan Forgiveness (PSLF) </li><li>And many more. </li></ul> <p>The Office of Information Technology Services is an equal opportunity employer, and we recognize that diversity in our workforce is critical to fulfilling our mission. We encourage all individuals with disabilities to apply.</p> <p>Some positions may require additional credentials or a background check to verify your identity.</p> <p>Name ITS Human Resources</p> <p>Telephone 518-473-0398</p> <p>Fax 518-402-4924</p> <p>Email Address PostingResponses@its.ny.gov</p> <p>Address</p> <p>Street Empire State Plaza</p> <p>Swan Street Building, Core 4, Floor 1</p> <p>City Albany</p> <p>State NY</p> <p>Zip Code 12220</p> <p>Notes on ApplyingTo apply for this position, please submit a cover letter and resume clearly indicating how you qualify. Ensure that you include the vacancy ID in the subject of your email for prompt routing. Your Social Security number may be required to confirm eligibility.</p>