Information Security Analyst I - CMMC

Location: Albany, NY Category: Information Technology Job Type: Full-time Posted On: Fri Oct 2 2026 Job Description:

FUNCTION & SCOPE:

The Information Security Analyst I is responsible for helping ensure the security and protection of the Research Foundation's computer systems, networks, and data. This role supports the monitoring, investigation, and mitigation of security threats; the implementation and maintenance of security controls; and the response to security events.

Working closely with ITS Operations and Enterprise Applications Services, the analyst helps ensure systems are properly configured, patched, and maintained in accordance with RF cybersecurity standards and regulatory requirements. The incumbent will use a variety of cybersecurity tools and data sources to identify and investigate potential threats in an evolving

RESPONSIBILITIES

• Monitor security events and system activity from multiple sources, respond to alerts, and investigate anomalies and suspicious behavior.

• Create, track, and manage support tickets related to vulnerability remediation and coordinate with technical teams to ensure timely resolution.

• Assist in performing security architecture reviews to verify that systems are implemented in accordance with RF Cybersecurity Standards, data classification requirements, and regulatory obligations.

• Review suspected phishing submissions and assist in reporting on trends and recurring attack patterns.

• Participate in Incident Response activities as an Incident Reporter and/or Incident Handler in accordance with the organization's Incident Response Plan.

• Participate in the change management process by providing security guidance to ensure system architecture and the software development lifecycle follow security best practices.

• Participate in disaster recovery and business continuity exercises to validate system recovery capabilities.

• Work with security vendors and internal teams to ensure security tools, applications, and services are configured correctly and functioning effectively.

• Monitor threat intelligence sources and research new Common Vulnerabilities and Exposures (CVEs) that could impact RF systems and data.

• Provide cybersecurity awareness training and guidance to employees as needed.

• Collaborate with other departments to ensure security controls and practices are integrated into business processes.

• Stay current with emerging cybersecurity threats, technologies, and industry best practices.

CORE COMPETENCIES

• Strong critical thinking skills with the ability to correlate information from multiple technical sources and identify trends and meaningful insights.

• Working knowledge of networking and operating system concepts, with the ability to diagnose events and assist in developing strategies to detect, block, and prevent attacks.

• Ability to interpret cybersecurity control objectives and assess the real-world effectiveness of those controls.

• Ability to produce clear, meaningful reports from a variety of technical data sources.

• High degree of initiative, reliability, and ability to work independently with minimal supervision.

• Strong verbal and written communication skills, including the ability to explain technical concepts to non-technical audiences.

Job Requirements:

PREFERRED QUALIFICATIONS

• Minimum of two (2) years of experience in information security, IT operations, or a related technical field.

• Bachelor's degree in information security, computer science, information technology, or a related field, or equivalent combination of education and experience.

• Cybersecurity certifications such as:

• CompTIA Security+

• CompTIA CySA - Cybersecurity Analyst+

• ISC2 - SSCP - Systems Security Certified Practitioner

• Microsoft SC-200: Security Operations Analyst

• GIAC GCIH - Certified Incident Handler

• Familiarity with information security frameworks and standards such as the NIST Cybersecurity Framework, NIST SP 800-171, or the CIS Critical Security Controls.

SALARY RANGE: $71,990 - $85,000

Additional Information:

As an Equal Opportunity / Affirmative Action Employer, The Research Foundation for SUNY will not discriminate in its employment practices due to an applicant's race, color, creed, religion, sex, pregnancy-related conditions, reproductive health decisions, childbirth or related medical conditions, sexual orientation, gender identity or expression, transgender status, age, national origin or ancestry, marital status, familial status, citizenship, physical and mental disability, prior arrest or conviction record, genetic characteristics/genetic information, predisposition or carrier status, domestic violence victim status, military status or service, veteran status, or any other characteristics protected under federal, state or local law. The Company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.

The Company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.

Review of applications will begin immediately and continue until the position is filled.

The Research Foundation for the State University of New York is not an agency or instrumentality of the State of New York. Employees of the Research Foundation for the State University of New York are not state employees, do not participate in any state retirement system, and do not receive state fringe benefits. The Research Foundation for the State University of New York operates under a contract with The State University of New York and receives no directly appropriated state funding.