Senior Security Analyst

New York City Economic Development Corporation•New York, NY

9d•$100,000 - $103,000

About The Position

The Senior Security Analyst strengthens the organization’s security posture by leading advanced threat detection, vulnerability management, and incident response activities. This role serves as a technical resource, collaborating across IT teams to implement security best practices, evaluate risks, and drive improvements to enterprise security controls.

Requirements

Bachelor’s degree in Cybersecurity, IT, or related field.
3+ years in cybersecurity or information security roles.
Experience with SIEM, EDR, vulnerability management, and incident response.
Demonstrated understanding of modern threats, attack techniques, and the MITRE ATT&CK framework.
Knowledge of network security, identity management, and cloud security.
New York City residence is required within 180 days of hire.

Nice To Haves

Certifications preferred: CISSP, CISM, GIAC, or equivalent.

Responsibilities

Monitoring, investigation, and response to security incidents.
Enhance SIEM/EDR rules, dashboards, and automated alerts.
Conduct root-cause analysis and coordinate remediation efforts.
Vulnerability scanning, prioritization, and remediation tracking.
Identify high-risk threats and provide clear mitigation recommendations.
Perform risk assessments and threat modeling for key systems and projects.
Contribute to deployment and optimization of security tools (SIEM, EDR, IAM, SOAR).
Review configurations, hardening baselines, and network/security architectures.
Recommend improvements to logging, monitoring, and defense-in-depth strategies.
Assist in updating and maintaining security policies and standards.
Support audit activities and compliance reporting.
Assist requisitions to ensure timely order submission and negotiating costs, delivery schedules and contract terms.
Assist in maintaining accurate records required for renewals, maintenance agreements, General Purchase Orders.
Participating in the negotiation and review of vendor agreements.
Help manage annual software, hardware agreements, and professional services contracts.
Mentor junior analysts and support organization-wide security initiatives.
Deliver staff training and promote cybersecurity awareness.
Perform additional duties as assigned.