Manager Information Technology Services 1 (information Security), Ref #roch27

Shift Lead For Nys Office Of Cyber Security Operations

ITS provides operational support to state agencies on a 24x7x365 basis; some positions may be required to provide this critical service at any time. This position will be located in Rochester, NY. The position requires availability during off-shift hours to ensure appropriate response to security incidents or other critical activities that may impact sensitive information, critical systems, NYS agencies, or ITS. Additional information on shift will be discussed at time of interview. Under the direction and of senior leadership within the Office of Information Technology Services Chief Information Security Office, the incumbent will be a Shift Lead responsible for the oversight and coordination of NYSOC operations across multiple teams. The NYSOC serves as the nerve center for joint local, State and federal cyber efforts, including data collection, response efforts and information sharing. Additionally, the NYSOC will provide a statewide view of the cyber-threat landscape and improve coordination on threat intelligence and incident response. The incumbent will participate in and manage efforts in conducting investigations of cyber security events reported by state and local government entities and other sources. Event response efforts include incident identification, assessment, quantification, reporting, communication, and monitoring. The candidate is responsible to provide investigation of correlated security event feeds and the appropriate triage, escalation, and coordination with other NYSOC team members. The incumbent will participate in the technical and process direction of the NYSOC, provide direction to analysts, and act as a liaison to other teams within NYS. Due to the necessary technical support duties of this position in a 24/7 operation, the incumbent may be required to work various shifts such as weekends and/or nights/evenings. Duties include, but are not limited to:

• Function as a shift lead in the NYSOC, providing support and direction for analysts and coordination efforts across multiple teams.
• Oversee the efforts related to security event monitoring and response including the tracking, documentation, analysis, and escalation of cyber events activities.
• Maintain schedules and shift assignments effectively to ensure NYSOC staffing needs are met.
• Lead the efforts to identify and communicate trends within the NYSOC operations and activity, escalating appropriately to management and stakeholders.
• Conduct team and shift turnover activities to ensure continuity of operations throughout the NYSOC.
• Oversee technical delivery, assessing and continually improving output and ensuring processes developed and adhered to drive operational excellence.
• Provide constructive input and feedback to appropriately tune the detections and performance of multiple security tools such as endpoint detection and response (EDR), security incident and event management (SIEM), and security orchestration, automation, and response (SOAR) to increase the quality of generated alerts.
• Provide constructive input and feedback for the development, maintenance, and adherence to standard operating procedures.
• Create technical reports and executive summaries related to cyber security incidents and events. Provide detailed metrics reports for executive management.
• Develop and deliver presentations regarding emerging cyber threats as needed.
• Provide training, guidance, and act as a mentor to subordinate team members. Maintain an adequate level of current knowledge and proficiency in cyber security through annual Continuing Professional Education (CPE) credits directly related to the field.
• Perform the full range of supervisory responsibilities and additional duties as assigned.