Department of Civil Service

Description:

The NYS ITS Chief Information Security Office has openings for multiple Student Assistants positions.

The NYS ITS Chief Information Security Office (CISO) provides cybersecurity services, governance, and leadership through its four bureaus: Integrated Security Services, Information Security Engineering, Governance, Risk, & Compliance, and the Cyber Command Center. The incumbents for these positions will be assigned to one of several CISO teams. Student Assistants with CISO also generally rotate through multiple teams during their time, which provides a very broad range of hands-on experience across the field of cyber security.

Please note, previous experience in cybersecurity is not a requirement for these positions. If you have an interest in cybersecurity, we'd like to hear from you!

CISO has openings for one or more Student Assistants in each of the following areas:

* Security Operations Center (SOC) - The CISO SOC serves as the primary intake point for security events. The SOC receives alerts and other notifications from a variety of sources, conducts analysis, prioritizes, and appropriately resolves directly or escalates as needed. Types of events received include phishing and other SPAM emails, alerts from antivirus systems and other security tools, reports of malicious software, and many other potential cybersecurity concerns. In addition to event analysis, SOC acts as initial response on security incidents performing tasks such as identification, containment, and initial coordination activities. Swift action from the SOC analysts can help ensure security issues are be contained before they spread or become more severe.

* Security Services Team & ITS ISO Support - The Security Services Teams and the ITS ISO Support team collaborate with clients & ITS teams to understand and integrate security requirements into the delivery of innovative and relevant business solutions while ensuring service alignment with client business priorities. The SSTs focus on the business applications and needs of the Agencies that ITS supports, while the ITS ISO Support team focuses on the security needs of ITS itself. Typical work of these teams will include participation in system security reviews of new systems or applications, incident response activities, meeting with other areas of ITS or client agencies to discuss security concerns and helping educate business units about the key concepts of information security.

* Vulnerability Management - This team provides vulnerability scanning services for external production web applications, pre-production authenticated scans of web applications, supports incident response and operational vulnerability remediation activities, and provides analysis and reporting associated with vulnerability scan findings across multiple platforms (infrastructure & web application).

* Security Architecture & Engineering - This team provides secure architecture and engineering design support for ITS enterprise services that are consumed by all ITS customers. Members of this team often bridge the gap between security and IT, leveraging their knowledge of servers, networks, and other infrastructure to help ensure that the ITS enterprise services are securely designed and implemented.

Skills:

Info Security Fundmamentals

technical writing/writing coursework

Information Security Frameworks

Government security and privacy

network vulnerability assessments

Internship Areas: Information Technology