Description

NYC Parks helps bring together people from all over our great city. From the iconic Central Park to neighborhood playgrounds, we own and operate some of the most exemplary green spaces in the world. At NYC Parks, our mission is to plan resilient and sustainable parks, public spaces, and recreational amenities, build a park system for the present and future generations and care for parks and public spaces. NYC Parks offers competitive pay and a generous benefits package that includes pension, excellent health benefits, competi-tive vacation/sick days and a healthy work-life balance. NYC Parks also offers innovation, leadership, the satisfaction of public service and a place to grow and develop your career. Full-time employees are also eligible for a wide variety of City benefits and perks. Compressed Working Schedule – flexible working schedule may be available. Health Care Coverage - We offer a wide variety of health care plans to meet the needs of you and your family. Pension - Upon retirement, qualified members of the City’s generous pension program receive a guaranteed salary and health benefits for the rest of their lives. Professional Development - We offer numerous training programs, leadership development opportunities, and career coaching services, while encouraging employees to attend approved off-site trainings and seminars. Perks - Our employees are eligible for discounts on some of the top attractions in the city, and all employees receive free membership to our recreation centers. The Cyber Security Analyst defends against cybersecurity incidents and identifies, analyzes, communicates and contains incidents as they occur. This cybersecurity role requires excellent communication skills, creativity, strong technical background, and familiarity with tradition and emerging security technologies and practices. The activities of this role will be split between day-to-day operations and working on new and existing cybersecurity related projects.

Role and Responsibilities

• • Under supervision, with latitude for independent initiate and decision making, assist Parks IT in liaising with the citywide NYC Office of Technology and Innovation (OTI) by ensuring any security threats are mitigated by Parks in a timely manner. • With an effort to remain proactive and stay ahead of the issues, respond to alerts and events that could threaten the Agen-cy’s information technology security posture. • Characterize and analyze network traffic and server / cloud performance metrics to identify anomalous activity and potential threats. • Complete appropriate patching on various systems, including workstations, servers and network equipment such as switches and routers. • Analyze identified malicious activity to determine means, method, and details of exploitations against agency systems and applications. • Evaluate commercial software in conjunction with OTI for safe use by NYC Parks. • Reimage / restore devices and equipment to previous known good states after an incident. • Validate, analyze, investigate and mitigate reported trouble tickets or incidents from OTI. • Follow up to ensure Parks staff are taking and following Cyber Security Training. • Ensure new software (COTS, in-house) are being developed following citywide security standards and protocols. • Follow up on incident reports and app scan reports to ensure that proper mitigation is taking place in timely manner. • Conduct network monitoring and intrusion detection analysis using various computer network defense tools, such as intrusion detection/prevention systems, firewalls and host-based security systems. • Conduct log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources • Correlate activity across assets (endpoint, network, apps) and environments (on-premises, cloud) to identify patterns of anomalous or suspicious activity. • Support the creation of business continuity/disaster recovery plans, including conducting disaster recovery tests, publishing test results and making changes necessary to address deficiencies. • Research emerging threats and vulnerabilities to aid in the identification of incidents. • Provide users with incident response support, including mitigating actions to contain activity and facilitating forensic analysis when necessary. • Perform security standards testing against computers or IT equipment before implementation to ensure security standards are met. • Coordinate with OTI and Parks IT on providing IT inventory, performing Parks security audits and coordinate comptroller directive 1 audits.