Client Name: City of New York
Start Date: October 7 2024
End Date: October 4 2026
Contract Length (in weeks): 104
SCOPE OF SERVICES
TASKS:
- Perform many critical functions within the Threat Management discipline including staffing24x7x365 coverage at the Citys Security Operations Center (SOC) augmenting FTE shiftschedules including days nights weekends and holidays.
- Interface with Clients Cyber Command teams internally with City agencies vendors andinformationsharing partners.
- Monitor City networks and security alerts for intrusion attempted compromise andanomalous behavior; apply mitigation techniques or escalation factors; correlate threatintelligence across various logs collected by established security controls.
- Produce routine SOC metrics & reporting.
- Maintain situation reports (SITREPS)
- Perform weekly quality control checks.
- Works closely with SOC Director on incident preparation including the continuousdevelopment of new SOC playbooks and runbooks.
Requirements
MANDATORY SKILLS/EXPERIENCE
Note: Candidates who do not have the mandatory skills will not be considered
Minimum 8 years of experience in Threat Management/SOC/Incident Response environment.
- For this senior position leadership skills are a must including the ability to lead and mentor junior analysts coordinate team activities and manage SOC operations effectively.
- Prior experience working in a SOC environment is mandatory. This includes familiarity withSOC operations procedures and tools such as SIEM (Security Information and EventManagement) systems intrusion detection/prevention systems (IDS/IPS) and endpointdetection and response (EDR) tools.
DESIRABLE SKILLS/EXPERIENCE:
- Knowledge of cybersecurity principles practices and procedures
- Strong understanding of network and host technologies
- Experience applying techniques for detecting host and networkbased intrusion using IDSmethods and technologies.
- Experience with SIEM technologies malware analysis and mitigation techniques
- Apply cybersecurity and privacy principles to organizational requirements (confidentialityintegrity availability authentication nonrepudiation)
- Interpret information collected by diagnostic network tools (Netflow security event logsIDS systems etc.
- Ability to investigate and solve complex problems.
- Excellent communication skills are crucial for effectively communicating security incidentsrisks and recommendations to technical and nontechnical stakeholders including SOCDirector and senior management.
- Threat Hunting: Proactive threat hunting capabilities to identify and investigate potentialsecurity threats or anomalies within the environment before they escalate into incidents.
- Incident Response: Experience in incident response procedures and methodologiesincluding the ability to analyze security incidents contain threats mitigate risks andrecover from security breaches effectively and efficiently.
SPECIAL REQUIREMENTS:
***Candidate must be willing to work days nights and/or weekends depending on coverage or critical incident response needs***
Required Experience:
Senior IC