<p>Please note: State agencies that contact job applicants do not usually request personal or financial information via text message or over the phone in connection with your response to a job posting. If you are contacted for such information by these methods, or any other method, please verify the identity of the individual before transmitting such information to that person.</p> <p>Note: For questions about the job posting, please contact the agency that posted this position by using the contact information provided on the "Contact" tab for the position.</p> <p>Review Vacancy</p> <p>Date Posted 05/14/25</p> <p>Applications Due06/10/25</p> <p>Vacancy ID188049</p> <ul> <li>Basics </li><li>Schedule </li><li>Location </li><li>Job Specifics </li><li>How to Apply </li></ul> <p>NY HELPNo</p> <p>AgencyCourt Administration, Office of</p> <p>TitleNetwork/System Engineer Series (Posting #1570)</p> <p>Occupational CategoryOther Professional Careers</p> <p>Salary Grade28</p> <p>Bargaining UnitNone listed</p> <p>Salary RangeFrom $84659 to $110853 Annually</p> <p>Employment Type Full-Time</p> <p>Appointment Type Provisional</p> <p>Jurisdictional Class Non-competitive Class</p> <p>Travel Percentage 0%</p> <p>Workweek Mon-Fri</p> <p>Hours Per Week 35</p> <p>Workday</p> <p>From 9 AM</p> <p>To 5 PM</p> <p>Flextime allowed? No</p> <p>Mandatory overtime? No</p> <p>Compressed workweek allowed? No</p> <p>Telecommuting allowed? No</p> <p>County Rensselaer</p> <p>Street Address 125 Jordan Road</p> <p>City Troy</p> <p>StateNY</p> <p>Zip Code12180</p> <p>Duties Description Assignment: Responsibilities include but are not limited to: identifying, assessing, and mitigating cybersecurity risks. This role involves evaluating security vulnerabilities, ensuring compliance with industry standards, and developing strategies to safeguard sensitive data and systems. Collaborate with the ISO office to define and prioritize cybersecurity initiatives and solutions, while assisting in the creation of security policies, standards, risk assessments, and mitigation strategies. Engage in cybersecurity incident response efforts. Hands-on experience required in managing Splunk SOAR, Splunk SIEM, VPN, EDR, Firewall, IPS/IDS, A/V, web filtering, proxy, Azure security, and Microsoft Security tools. Off-hours support for production issues may be necessary.</p> <ul> <li>Capability to analyze the results, filter out false positives, prioritize exploits based on severity and impact, and effectively summarize findings for system owners. </li><li>Proficiency in conducting penetration testing, configuring, and executing both manual and automated security scans. </li><li>Ability to perform installs, upgrades, patches, and open helpdesk tickets related to the vulnerability software. </li><li>Deploy, configure, and maintain Squid proxy services along with other vendor proxy solutions to ensure optimal performance and reliability within the environment. </li><li>Work closely with a 24/7 Security Operations Center (SOC) to enhance the organization's security posture. Monitoring security events, coordinating incident response efforts, and ensuring seamless communication between internal teams and the SOC provider. </li><li>Ability to configure, analyze and oversee Crowdstrike incidents. </li><li>Conduct risk assessments to identify potential cybersecurity threats and vulnerabilities. </li><li>Analyze security policies, procedures, and controls to ensure compliance with regulatory requirements. </li><li>Develop and implement risk mitigation strategies to enhance security posture. </li><li>Knowledge of cybersecurity frameworks such as NIST, ISO 27001, and CIS Controls </li><li>Prepare detailed reports on risk findings and provide actionable recommendations </li><li>Proficiency in using Rapid7 Appspider and Qualys Web Application Scanning for web security assessments. </li><li>Hands-on experience with Nmap, Rapid7, Metasploit, and various port-scanning tools for vulnerability detection and exploitation testing. </li><li>Expertise in BurpSuite, Nikto, w3af, and other open-source scanning tools for security analysis and penetration testing. </li></ul> <p>Minimum Qualifications JG-28 NETWORK/SYSTEM ENGINEER III</p> <p>BASE SALARY: $110,853</p> <p>QUALIFICATIONS: Bachelor's degree from an accredited college or university and five (5) years of related technical experience in a help desk or technical environment; or An equivalent combination of education and related technical experience in a help desk or technical environment</p> <p>OR</p> <p>JG-25 NETWORK/SYSTEM ENGINEER II</p> <p>BASE SALARY: $94,386</p> <p>QUALIFICATIONS: Bachelor's degree from an accredited college or university and four (4) years of related technical experience in a help desk or technical environment; or An equivalent combination of education and related technical experience in a help desk or technical environment</p> <p>OR</p> <p>JG-23 NETWORK/SYSTEM ENGINEER I</p> <p>BASE SALARY: $84,659</p> <p>QUALIFICATIONS: Bachelor's degree from an accredited college or university and three (3) years of related technical experience in a help desk or technical environment; or An equivalent combination of education and related technical experience in a help desk or technical environment</p> <p>Additional Comments</p> <p>Some positions may require additional credentials or a background check to verify your identity.</p> <p>Name Gail Testo</p> <p>Telephone</p> <p>Fax</p> <p>Email Address DotApply@nycourts.gov</p> <p>Address</p> <p>Street 125 Jordan Road</p> <p>City Troy</p> <p>State NY</p> <p>Zip Code 12180</p> <p>Notes on ApplyingAll interested persons meeting the minimum qualifications are encouraged to submit a UCS-5 Application for Employment form (obtainable from any administrative office in a court building or on the web at www.nycourts.gov/careers/UCS5.pdf) and a cover letter and resume by mail to:</p> <p>Gail Testo</p> <p>Senior Management Analyst</p> <p>Office of Court Administration, Division of Technology & Court Research</p> <p>125 Jordan Road</p> <p>Troy, NY 12180</p> <p>dotapply@nycourts.go</p>