Position Details:
- Location: 42-09 28th street LIC (In-person).
- Duration: 1 Year.
- Hours per Week: 40.
- Interview Process: in-office, possibly two rounds.
Summary of Position:
The Analyst will operate, administer, and continuously improve the cybersecurity controls that safeguard sensitive health information and keep public health services secure. Areas of responsibility include web security, network security, data loss prevention, endpoint compliance, and incident response. The Analyst will work closely with technical teams and stakeholders to maintain a secure, resilient, and compliant technology environment. This position plays a key role in reducing cybersecurity risk, meeting regulatory requirements, and protecting confidentiality, integrity, and availability of the Department's information systems support to our employees. The ideal candidate will be responsible for resolving a wide range of hardware and software issues, ensuring minimal disruption to business operations. This role requires excellent problem-solving abilities, strong communication skills, and a commitment to providing outstanding customer service.
Job Duties:
- Administers and maintains enterprise web security platforms, including secure web gateways, proxy services, and SSL/TLS inspection technologies, to protect users and systems from web-based threats.
- Manages forward and reverse proxy environments to ensure secure access to applications and services, and monitors the performance, availability, and effectiveness of security infrastructure.
- Implements and maintains web filtering, access control, and security policies that enforce organizational cybersecurity standards and protect sensitive information.
- Troubleshoots complex security infrastructure issues, supports platform upgrades and deployments, and works with infrastructure, networking, and application teams to strengthen security controls.
- Develops technical documentation and operational procedures, evaluates emerging threats, and recommends improvements to the organization's security posture and resilience.
Qualifications and Requirements:
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience
- 3 years of experience in cybersecurity operations, security engineering, or network security roles
- Industry Security Certifications such as CISSP, CISA, CISM, Security+, or SCCP.
- Experience administering and supporting enterprise web proxy solutions, including secure web gateways, URL filtering, and SSL/TLS inspection technologies
- Experience managing and maintaining next-generation firewalls (NGFWs), including security policy administration, traffic analysis, and threat prevention capabilities
- Strong understanding of network security concepts, including TCP/IP, routing, switching, DNS, VPNs, proxies, and secure network architectures
- Experience investigating security incidents, analyzing security events, and supporting incident response activities. Experience managing Data Loss Prevention (DLP) solutions
- Experience investigating security incidents, analyzing security events, and supporting incident response activities
- Knowledge of cybersecurity frameworks, industry best practices, and regulatory compliance requirements
- Experience reviewing security requests, conducting risk assessments, and implementing security controls
- Strong analytical, troubleshooting, problem-solving, and communication skills.
- Ability to work collaboratively with technical teams, business stakeholders, vendors, and external partners
- Experience in creating and maintaining technical documentation, operational procedures, and security standards