29 applicants

Company

Original Job Post

New York City Office of Technology & Innovation · 2 days ago

Vulnerability Management Analyst

Brooklyn, NY

Full-time

Onsite

Entry, Mid Level

2+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

Information Technology

H1B Sponsorship

Insider Connection @New York City Office of Technology & Innovation

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Assist in the analysis and remediation of findings discovered during scheduled internal and third party vulnerability scans and penetration tests

Review and triage vulnerability alerts into manageable reports for the Vulnerability Management team to review and action

Provide relevant analysis, suggest mitigations, track remediation, manage scheduled scans, identify gaps and expand scan coverage, and escalate as appropriate

Conduct cybersecurity risk assessments

Conduct vulnerability research for the purpose of threat exposure management and attack surface reduction

Develop security documentation and SOP’s

Develop scripts for automation

Work with City agencies to communicate risk and proper remediation

Perform on-site activities, including implementing cybersecurity solutions or performing security assessment activities, including technical configuration reviews

Handle special projects and initiatives as assigned

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Cyber SecurityNetwork SecurityComputer ScienceComputer ProgrammingComputer EngineeringInformation ScienceInformation Systems ManagementNetwork AdministrationCybersecurityVulnerability assessmentsPenetration testingSecurity assessmentsStrategy developmentProgram developmentNetwork architectureMonitoring solutionsCybersecurity standardsIntegrationVulnerability management toolsMitigation strategiesRemediationScriptingPythonSecurity documentation analysisSecurity policiesSecurity plansSecurity proceduresSecurity best practicesMicrosoft WindowsVMWare

Required

A baccalaureate degree, from an accredited college including or supplemented by twenty-four (24) semester credits in cyber security, network security, computer science, computer programming, computer engineering, information technology, information science, information systems management, network administration, or a pertinent scientific, technical or related area; or

A four-year high school diploma or its equivalent approved by a State’s department of education or a recognized accrediting organization and three years of satisfactory experience in any of the areas described in “1” above; or

Education and/or experience equivalent to “1” or “2”, above. College education may be substituted for up to two years of the required experience in “2” above on the basis that sixty (60) semester credits from an accredited college is equated to one year of experience. In addition, twenty-four (24) credits from an accredited college or graduate school in cyber security, network security, computer science, computer programming, computer engineering, information technology, information science, information systems management, network administration, or a pertinent scientific, technical or related area; or a certificate of at least 625 hours in computer programming from an accredited technical school (post high school), may be substituted for one year of experience.

Preferred

At least 2 years of experience in Cybersecurity, including vulnerability assessments, penetration testing, security assessments, strategy and program development, network architecture designs, or monitoring solutions

Experience with cybersecurity standards and best practices and how to integrate them

Experience with at least two of the following vulnerability management tools: Rapid7, Tenable, Qualys

Experience with evaluating security vulnerabilities, developing mitigation strategies, and implementing remediation

Experience with scripting, especially in Python

Ability to analyze cybersecurity documentation, including security policies, plans, and procedures

Strong Knowledge of security best practices across multiple platforms, such as Microsoft Windows, VMWare, Cisco IOS, and Mobile OS Android/Apple IOS

Knowledge of public-key cryptography, understanding of encoding, encryption, and hashing techniques

Knowledge of next generation firewall products, intrusion detection systems, DMZ, IPSec, DNS, SMTP, HTTP proxies, etc

Experience with leading other team members

Excellent oral and written communication skills

Excellent research and analytical skills

Willingness to travel in the five boroughs of NYC and

Ability to work both independently and as part of a team.

Benefits

Public Service Loan Forgiveness

Company

New York City Office of Technology & Innovation

The Office of Technology and Innovation (OTI) leverages technology to drive opportunity, improve public safety, and help government run better across New York City.

Brooklyn, New York, USA

1,001-5,000 employees

http://www.nyc.gov/doitt

H1B Sponsorship

New York City Office of Technology & Innovation has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Trends of Total Sponsorships

2023 (1)

2020 (2)