• Perform security analysis on organizational systems, such as Endpoint Protection, SIEM, Firewall, Endpoint Detection & Response (EDR), Intrusion Detection Systems, Email Gateway, Web Content Filtering & Identity Management technology.• Conduct incident response triage analysis on suspected hosts to determine potential ongoing attacks and their scope.• Research and stay on top of the latest attacker tactics, techniques, and procedures (TTPs) to discover sophisticated threats in the network.• Collaborate with SOC, Intelligence, Incident Response, and Enterprise Security Teams for incident investigations and threat hunting• Identify visibility gaps in the organizational network and recommend solutions• Engage in day-to-day activities of the SOC Team regarding Security Monitoring, Investigations and Response, and Threat and Vulnerability Intelligence.• Coordinate escalation for advance forensics, malware reverse-engineering, and additional host review tasks to third-party vendors.• Articulate security incident details to business stakeholders and non-technical individuals.

• Network and System Administration tasks and responsibilities, such as maintaining, developing, and creating infrastructure in Azure and on-premise (Hyper-V), programming and configuring firewalls and switches, and managing Windows Server and Active Directory, among other similar responsibilities.• Cloud Security tasks and responsibilities, such as: developing and maintaining Azure Security architecture - including the development of Conditional Access policies, managing and maintaining Azure Sentinel environments, monitoring of Azure AD and Office 365 identity logs and events, and management of multi-factor authentication implementation and systems.• Implementation and management of information security and assurance systems, such as EDR/XDR technologies, SIEM/Syslog systems, and network/system event logging.• Conduct and performs analysis of system (Sysmon) and network events (Zeek) on organizational assets within SIEM and EDR platforms by utilizing queries and analytical skills.• Management of organizational partnerships/relationships with third-party security vendors for managed threat detection and response (MDR), security operations center (SOC), disaster recovery (DR), and incident response (IR) functions.• Implementation of information and identity security policies and procedures aligning with organizational goals.• Automate routine network, server, and system technology and maintenance with the latest automation technology, such as Group Policy Objects and Microsoft Intune.• Effectively manage communication regarding Information Technology (IT) and Information Security to the organization, including conveying common technical terms, presentation of IT or security-related initiatives to executive and program leadership, and coordinating related pieces of training and informational sessions.• Implement, configure, and monitor system and network backup architecture and solutions.

• Manage organizational Microsoft 365 tenant, including ownership and build-out of Azure Active Directory, SharePoint, system-wide conditional access, and cloud-security policies.• Administer Windows Server environment including all patching, updating, application installation and maintenance.• Create and maintain organizational automation policies, such as Group Policy Objects and Microsoft Intune.• Management of helpdesk team and helpdesk initiatives including timely ticket resolution and escalated support inquiries.• Assist in the development of organizational policies and procedures in relation to network and systems administration and information security.

• Effectively manage issues through multiple forms of inbound requests including in person, queue calls (phone), e-mails, chat, web forms, or client tracking/ticketing databases.• Troubleshoot and resolve issues related to hardware/software, password resets, Microsoft operating systems, security, desktop applications, and peripherals.• Respond to all Customer requests in timely and professional manner.• Install and configure networking and server systems.• Work closely with other team members to identify and suggest resolutions and improvements.

• Maintain and troubleshoot all hardware and software agency wide• Facilitate and assist New York State ITS with system upgrades and equipment roll-outs; associated end-user support• Administration of user accounts/permissions for all associated DSS systems• Database management, including report creation with COGNOS 10