Senior Information Security Analyst (Senior Programmer/Analyst SL-4)
College of Environmental Science and Forestry

Applications are invited for the following position:

Incumbent Title: Senior Information Security Analyst (Senior Programmer/Analyst SL-4)

Unit: Computing and Network Services

Professional Rank and Salary Range: SL-4; High 60’s to low 70’s DOQ

Brief Description of Duties:

Working in support of the Information Security Officer role on campus, and under the Supervisor of Computing and Network Services, the Senior Information Security Analyst will perform the administration of cyber security systems and tools implemented throughout the organization. Responsibilities include, but are not limited to assisting with the rollout of new cyber security systems and tools, performing the daily analysis of cyber security threats, working with other IT groups on projects to make recommendations on cyber security practice for those projects, working with the entire IT team to assist in the mitigation of cyber security incidents, and research cyber security topics, such as trends in threats, trends in defenses, and current events. This position will play a role in campus information security training, training administration and communication, and will serve on all pertinent/IT-related policy/procedure producing committees. Maintaining proficiency in and awareness of information security services, industry trends, tactics, techniques and procedures is expected. Candidate should have practical technical Penetration Testing and Vulnerability Assessment skills as well as being customer service focused.

Required Qualifications:

• Bachelor’s degree from an accredited higher education institution or equivalent combination of education and experience
• Minimum of 3 years working in the information technology field
• Ability to demonstrate an understanding of function and deployment strategies of a broad range of modern computing platforms typically used in campus environments (e.g. operating systems, virtualization, routing & switching, network storage, LAN and WAN, cloud computing, perimeter security)
• Advanced working knowledge of Linux and Windows operating system administration
• Understanding of TCP/IP and networking fundamentals
• Excellent verbal, written, and interpersonal communication skills, including technical report writing, and explaining technical concepts in non-technical terms
• Outstanding organizational skills, attention to detail and high ethical standards

Preferred Qualifications:

• Master’s degree from an accredited institution in Computer Science with a focus on Information Security.
• 5 years working in the information technology field
• 2 years of experience Penetration Testing and/or performing Vulnerability Assessments
• Security-related certifications including some of the following: OSCP, GPEN, GWAPT, CISSP, CISM, CISA, and/or other
• Familiarity with regulatory mandates, including HIPAA, HITECH, GLBA, FERPA and others
• Familiarity with information security standards, including PCI, NIST 800 series, and others
• Experience with some of the following: PowerShell, C, C++, C#, Java, ASM, PHP, PERL, Python, Bash
• Experience maintaining, securing, and trouble-shooting core networking services such as DNS and DHCP.
• Experience with:
• Security tools and products (IDS/IPS, Nexpose, Nessus, KnowBe4, ELK stack, Metasploit)
• Web exploits (including XSS, CSRF, SQL injection)
• Vulnerability analysis and reverse engineering
• Cryptography principles
• Preferred Previous Jobs: Penetration Tester, Security Team Lead, Security Administrator, Network Administrator, Network Engineer

Date to Be Filled: As soon as possible after application deadline.

Internal Procedure: UUP-represented employees of SUNY-ESF desiring consideration under the Advanced Internal Application Procedures should submit application materials by March 8, 2021 and contact Amy McLaughlin, Associate Director of Human Resources to request early consideration.

Application Deadline: Although applications will be accepted until the position is filled, candidates should submit their application by March 13, 2021, to assure optimal consideration.

Application Procedure: Application materials are required to be submitted on-line at http://www.esf.edu/hr/ Please provide Cover Letter, Resume, and at least three employment references (we will not contact references without prior permission).

Additional Information:

Pursuant to Executive Order 161, no State entity, as defined by the Executive Order, is permitted to ask, or mandate, in any form, that an applicant for employment provide his or her current compensation, or any prior compensation history, until such time as the applicant is extended a conditional offer of employment with compensation. If such information has been requested from you before such time, please contact the Governor's Office of Employee Relations at (518) 474-6988 or via email at info@goer.ny.gov

In accordance with the Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act” institutions of higher education are required to prepare an annual report containing information on campus security policies and campus statistics. This report includes statistics for the previous three years concerning reported crimes that occurred on-campus; in certain off-campus buildings or property owned or controlled by SUNY-ESF; and on property within, or immediately adjacent to and accessible from the campus. The report also includes institutional policies concerning campus security, such as policies concerning sexual assault, and other matters. You can obtain a printed copy of this report by contacting SUNY-ESF University Police at 315-470-6667 or by accessing the following website: http://www.esf.edu/univpolice/crimereports/

SUNY ESF is a Smoke and Tobacco Free campus and is dedicated to providing a healthy and safe environment for the entire campus. For more information you can visit our Tobacco and Smoke Free Policy at https://www.esf.edu/au/documents/ESF%20Tobacco%20Free.pdf

SUNY-ESF is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.