Cyber Security Administrator

The Cyber Security Administrator is responsible for the detection, prevention, analysis, and monitoring of security threats in an enterprise-level organization. This role involves developing, implementing, and maintaining security policies, procedures, and guidelines specific to on-prem and other cloud services. The Cyber Security Administrator will lead incident response efforts, conduct risk assessments, manage vulnerabilities, and ensure compliance with industry security standards. This position will be on-site in our Oakdale, NY office.

Responsibilities include :

• Configure and enforce security policies, including conditional access and multi-factor authentication (MFA), to ensure secure application and data access.
• Ensure security tools and systems (firewalls, antivirus, encryption) are up-to-date and properly configured.
• Develop, implement, and maintain an incident response plan and business continuity plan, ensuring rapid detection, containment, and resolution of security incidents.
• Investigate security incidents, coordinate with IT and other departments to remediate vulnerabilities, and document incidents with root cause analysis and corrective measures.
• Conduct internal and external vulnerability scans, apply security patches, and implement system hardening techniques to mitigate risks.
• Monitor security events in real-time using advanced threat detection tools, conducting forensic analysis when necessary.
• Develop and implement security strategies to protect enterprise infrastructure from cyber threats and ensure compliance with frameworks such as NIST and ISO 27001.
• Manage Identity and Access Management (IAM) solutions, including privileged access management (PAM), enforcing least privilege policies, and overseeing user provisioning and deprovisioning.
• Implement Data Loss Prevention (DLP) solutions to safeguard sensitive data and prevent unauthorized exfiltration.
• Configure and maintain Security Information and Event Management (SIEM) systems for centralized logging, threat detection, and analysis.
• Oversee network security by managing Intrusion Detection and Prevention Systems (IDS / IPS), VPNs, and Zero Trust security models.
• Conduct regular incident response testing to ensure readiness for potential cyber threats.
• Assess third-party vendor security practices to ensure compliance with internal security policies and industry best practices.
• Monitor and manage cloud security posture across Azure and Office 365, ensuring compliance with security policies and best practices.
• Work closely with IT teams to design and implement security solutions for cloud and on-premises environments.
• Conduct security awareness training sessions to educate employees and enforce best practices.
• Maintain detailed records of security incidents, risk assessments, and compliance audits, preparing reports for senior management.

Qualifications :

The Authority may accept an equivalent combination of education and experience to meet the requirements

Interested candidates should submit their application and resume, including salary requirements via the SCWA website (www.scwa.com) and click on "Career Opportunities". Salary is commensurate with education and experience within the range of $110,000-120,000 . Salary expectations must be disclosed on application.

J-18808-Ljbffr