The New York Independent System Operator (NYISO) manages the efficient flow of electricity on more than 11,000 circuit-miles of high-voltage transmission lines, dispatching power from hundreds of generating units across the state.

The New York Independent System Operator (NYISO) applies cutting-edge technology to operating a reliable electricity system, managing competitive markets for wholesale electricity, and planning for the Empire State's energy future. The NYISO’s Information Technology department invites applications for a full-time Cybersecurity Operations Center Analyst.

The NYISO Cybersecurity Operation Center’s (CSOC) mission is to provide a central point for 24x7x365 continuous security monitoring of NYISO’s computing environments and for responding to cyber threats, vulnerabilities and incidents that can disrupt and/or compromise the mission and operation of the NYISO.

Cybersecurity Operations Center Analysts will perform a wide range of technical cybersecurity services with a focus on responding to cyber threats and incidents with the goal of preventing or mitigating cyber threats and incidents from adversely impacting the NYISO. This role involves collaborating and cooperating with NYISO IT groups to provide monitoring and security related oversight of critical infrastructure, along with keeping all stakeholders informed of evolving threats and vulnerabilities that could impact NYISO infrastructure.

This position involves critical duties and responsibilities that must continue to be performed during crisis situations and contingency operations. Analysts are required to work shift rotations to support around the clock (24x7x365) coverage of the CSOC.

ESSENTIAL DUTIES AND RESPONSIBILITIES

Provide around the clock monitoring, analysis, and response to cyber security events and trends of security log data.
Maintain records of security monitoring and incident response activities, utilizing case management and ticketing technologies.
Provide incident response support, including triage, remediation and
Investigate and document events to aid incident responders, managers and other CSOC team members on security issues and the emergence of new
Recognize potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event information. Escalate intrusions and compromises to NYISO’s network infrastructure, applications, and operating systems to the CSIRT as
Analyze sourced intelligence of attacker tactics, techniques, and procedures (TTPs)
Provide threat and vulnerability research and analysis
Execute defined standard operating procedures, event and job aides required for successful task completion.
Integrate and share information with other analysts and other
Recommend changes to Standard Operating Procedures and other similar
Generate end-of-shift reports for documentation and knowledge transfer to subsequent on-shift
Other duties as assigned.

REQUIRED QUALIFICATIONS

At least 1 year of experience as a Cyber Security Analyst or related role .
Knowledge of various security methodologies and processes, and technical security solutions (firewall, intrusion detection systems, and Security Information and Event Management (SIEM) platforms).
Knowledge of TCP/IP Protocols, network analysis, and network/security
Knowledge of common Internet protocols and web
Ability to multi-task, prioritize, and manage time
Strong attention to detail.
Excellent interpersonal skills and professional
Excellent verbal and written communication
Excellent customer service
Proficient in Microsoft Office

PREFERRED QUALIFICATIONS

Experience administrating various operating systems (e.g., Windows, OS X, Linux, etc.) commonly deployed in enterprise networks. A conceptual understanding of Windows Active Directory is also
Working knowledge of network communications and routing protocols (e.g., TCP, UDP, ICMP, BGP, MPLS, etc.) and common internet applications and standards (e.g., SMTP, DNS, DHCP, SQL, HTTP, HTTPS, )
Experience working with various event logging systems and be proficient with security event log analysis. Previous experience with Security Information and Event Monitoring (SIEM) platforms that perform log collection, analysis, correlation, and alerting is also
Experience in analyzing net flow data and packet capture (PCAP).

EDUCATION

Bachelor's Degree (BS) in Information Security, Computer Science, Computer Information Systems or similar fields required. In lieu of degree requirements, significant security and/or industry experience may be considered

CERTIFICATES, LICENSES, REGISTRATIONS

DHS Secret Clearance or above preferred.

ADDITIONAL REQUIREMENTS

Ability to read, analyze and interpret general business periodicals, professional journals, technical procedures and governmental regulations.
Ability to write reports, business correspondence and procedure manuals.
Ability to write presentations and articles for publication that conform to prescribed style and format.
Ability to effectively communicate security and risk-related concepts to technical and non-technical
Ability to define problems, collect data, establish facts and draw valid conclusions.
Ability to interpret an extensive variety of technical instructions in mathematical or diagram form and deal with several abstract and concrete

PHYSICAL DEMANDS

While performing the duties of this job, the employee is regularly required to talk or hear. The employee frequently is required to stand, walk, sit and use hands to perform routine office tasks. The employee is occasionally required to reach with hands and arms. The employee must occasionally lift and/or move up to 15 pounds. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

WORK ENVIRONMENT

The noise level in the work environment is usually moderate. Contact with staff and public will occur. Travel may be required to attend and/or conduct meetings, conferences and training. This position will require work on nights, weekends or holidays. Department supports a 24-hour business operation every day of the year and staff will be required to rotate on-call coverage.

The NYISO takes pride in recruiting, developing and retaining highly talented individuals. In addition to competitive salaries, we offer a comprehensive benefits package and innovative reward programs.

The NYISO offers the flexibility to work both in the office and remotely, providing our employees with an enhanced work life balance. While the majority of the responsibilities of this role can be performed remotely, in most cases, employees will have periodic on-site requirements based on business needs.

All offers of employment will be made contingent upon the successful completion of a drug screening and background check.

The NYISO is an Equal Opportunity Employer and as such, does not discriminate in its hiring or employment practices.

Salary Range

$76,200—$127,200 USD

Apply for this Job

* Required

First Name *

Last Name *

Email *

Phone *

Resume/CV *

Dropbox Google Drive

(File types: pdf, doc, docx, txt, rtf)

Cover Letter

Dropbox Google Drive

(File types: pdf, doc, docx, txt, rtf)

When autocomplete results are available use up and down arrows to review

+ Add another education

Desired Salary *

Are you currently an employee of New York State Department of Public Service or Public Service Commission? *

Do you currently have unrestricted work authorization for the United States, or would you require sponsorship for a working visa now or in the future? *

Are you open to relocation? *

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in New York ISO’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Gender

Are you Hispanic/Latino?

Please identify your race

Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran Status

Voluntary Self-Identification of Disability

Form CC-305

Page 1 of 1

OMB Control Number 1250-0005

Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

Alcohol or other substance use disorder (not currently using drugs illegally)
Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
Blind or low vision
Cancer (past or present)
Cardiovascular or heart disease
Celiac disease
Cerebral palsy
Deaf or serious difficulty hearing
Diabetes
Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
Epilepsy or other seizure disorder
Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
Intellectual or developmental disability
Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
Missing limbs or partially missing limbs
Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
Partial or complete paralysis (any cause)
Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
Short stature (dwarfism)
Traumatic brain injury

Disability Status

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Enter the verification code sent to to confirm you are not a robot, then submit your application.

Security Code *

This application was flagged as potential bot traffic. To resubmit your application, turn off any VPNs, clear the browser's cache and cookies, or try another browser. If you still can't submit it, contact our support team through the help center.