Cyber Security Lead

Position Title:                          Cyber Security Lead

Location:                                   Albany, NY

Grade/Classification:             5 (D1) – Professional II

Salary Range:                          $83,535 - $101,654

Bargaining Unit:                     CSEA

FLSA Status:                             Exempt

Revised date: April 26, 2022

Primary Purpose

The Cyber Security Lead is responsible for leading the efforts and responsibilities associated with protecting and securing DASNY’s hardware, software, and networks from theft, loss, and/or unauthorized access.

Essential Functions

• Develop, evaluate and/or monitor DASNY’s cyber security preparation plans to improve our ability to identify threats to DASNY’s IT ecosystem and to sustain, protect and manage DASNY cyber and information security protections.
• Provide independent and objective analysis of cyber security risk based on complex data sets.
• Manage, troubleshoot, and oversee updates to applications/tools including but not limited to anti-malware, device encryption, security operations center (SOC) alerting and detection and access and data anomaly tracking.
• Facilitate the creation and production of security metrics furnished to senior management monthly.
• Maintain documentation for security related processes, procedures, standards, and guidelines.
• Monitor and analyze logs and alerts from a variety of different technologies (IDS/IPS, Firewall, Proxies, Anti-Virus, SIEM, Azure, etc.), across multiple platforms.
• Support firewall management activities including firewall rule analysis.
• Perform risk assessments of the supply chain and provide comprehensive oral and/or written analysis of identified risks to ensure processes and technologies are adapted to manage the risk to an acceptable level.
• Provide security assistance in evaluating security controls and providing secure solutions.
• Provide support for cyber security incidents, action plans, findings, and audit points.
• Develop and maintain relationships with external support groups such as the NYS ITS Cyber Command Center, MS-ISAC, and other security vendors.
• Research security related items for DASNY projects, as needed.
• Develop and promote best practices for information security.
• Support DASNY’s e-discovery processes by identifying and collecting electronic information.
• Maintain and support one or more security tools (e.g., Anti-Virus, disk encryption, vulnerability scanning system, etc.)
• Provide second level support for security tools deployed on PCs within the environment.
• Maintain and enforce network-based URL filters
• Develop and implement controls to minimize the attack surface and the opportunities for attackers to manipulate human behavior through their interaction with web browsers and email systems.

 

Other Duties and Responsibilities

• Provide support to other staff as needed.
• May train and evaluate employees.
• Assess, develop, and implement internal controls, and oversee the review and testing of same.
• Assist Management in the development of policies.
• Develop, document, and implement procedures.
• Assist other units during peak workload periods or for long-term assignments as needed.
• Undertake special assignments and other duties as directed.
• Must maintain regular attendance in accordance with DASNY attendance and leave policies.
• Must adhere to the NYS Information Security Policy Standards established and issued by the Office of Cyber Security and Critical Infrastructure Coordination. (Standards can be found on the Intranet.)

Supervision

Supervision of employees may be required.

 

Physical/Mental/Visual Demands

May require travel using public transportation, DASNY vehicle, rental vehicle, or personal vehicle. This travel may include overnight stays at public accommodations and related establishments.  May require time pressure of decision-making.  May require physical mobility (movement from place to place) and exposure to heights (climbing ladders, scaffolding, etc.).  Must be able to lift up to fifty pounds.  Overtime or extended work hours may be required. Off-hour availability during security incidents and relevant emergent conditions is required.

Work Environment

Standard office environment, including the use of one or more of the following:  PC, telephone, fax machine, printer, copier, electronic stapler/hole punch/date stamp, shredder.

Minimum Qualifications