Position: Cybersecurity Engineer (IT Security Specialist 3) - Provisional

Overview

Cybersecurity Engineer (IT Security Specialist

3) - Provisional

General Duties

This position encompasses professional and responsible technical consultative and/or administrative work. Under administrative direction of a university IT manager, with broad latitude of independent action or decision, serves as subject matter expert on IT security, identity, and access infrastructure; provides IT security architectural guidance; designs security solutions; conducts IT risk assessments and recommended mitigating solutions.

There are three (3) Assignment Levels within this classification. All personnel perform related work. Assignment Levels 2 and 3 may supervise staff. This specification describes typical assignments; related duties may be assigned as needed.

To view the complete job description, go to http://(Use the "Apply for this Job" box below). and view the

Job Description for IT Security Specialist.

Contract Title

IT Security Specialist

FLSA

Non-exempt

Campus Specific Information

The Office of Computing and Information Services (CIS) at the City University of New York (CUNY) supports the IT and telecommunications needs of CUNY's 25 colleges. CIS supports enterprise IT and applications, develops new technologies that advance the University's core mission, builds, upgrades and maintains the University's network, and operates the University's Data Center and Service Desk. Additionally, CIS manages the processes of safeguarding the University?s

IT assets and operates the SOC, develops disaster recovery plans for business continuity, maintains the security of the University?s IT assets, and maintains the CUNYfirst Enterprise Resource Planning (ERP) solution that integrates student administration, financial management, and human resources operations across CUNY?s 25 colleges. Lastly, CIS provides strategic and operational IT leadership with respect to the maintenance, enhancement, and expansion of the CUNY network spanning across all CUNY campuses.

The CUNY-CIS cybersecurity program entails managing processes to identify potential threats to the University's IT assets. This includes developing policies, assessments, tools, and procedures to fortify defenses and respond effectively, safeguarding CUNY's IT interests. Reporting to the Director of Cybersecurity Engineering, the Cybersecurity Engineer is responsible for continuously assessing, securely designing, and maintaining CUNY's systems to eliminate security vulnerabilities and ensure ongoing monitoring.

This role also involves implementing security measures to address identified gaps and breaches, while leading strategic initiatives to modernize network infrastructure and protect CUNY's data against cybersecurity threats.

Key responsibilities include, but are not limited to the following:

Deploys, engineers, configures, and maintains next generation firewalls (NGFW) to secure enterprise-wide network traffic, aligning policies with evolving security frameworks and optimizing performance through continuous tuning and updates.
Harnesses artificial intelligence for IT operations (AIOps) and threat intelligence, by integrating AIOps into NGFW and other security platforms to drive predictive analytics, enhance anomaly detection, implement automated responses to mitigate risks and respond to security incidents proactively.
Architects comprehensive protection strategies to fortify web proxies and secure IoT devices to eliminate vulnerabilities, streamline access control, and ensure real-time monitoring of Internet traffic.
Designs and implements advanced DNS security measures and URL filtering protocols to thwart DNS-based attacks and enforce compliance with organizational access policies.
Leads threat detection and response initiatives, by strategically managing Intrusion Detection/Prevention Systems (IDS/IPS) for real-time threat identification, refining signatures and rules to minimize false positives and accelerate remediation.
Oversees the design and operational management of secure VPN infrastructures, ensuring alignment with industry-standard encryption and access control protocols.
Mitigates distributed denial-of-service (DDoS) attacks by deploying and administering sophisticated DDoS mitigation tools and frameworks to maintain network availability under volumetric attack scenarios.
Orchestrates advanced security audits and assessments by executing in-depth evaluations of the University?s IT landscape to uncover vulnerabilities, craft mitigation strategies, and enhance security compliance across systems.
Spearheads incident response efforts, including forensic analysis, to uncover root causes, restore system integrity, and reinforce preventative measures, including off-hours/on-call support (support systems beyond normal business hours) to investigate security incidents, contain threats, and restores normal operations and prevent future incidents.
Drive continuous learning and innovation keeping at the forefront of cybersecurity…

Cybersecurity Engineer; IT Security Specialist - Provisional

Job Type