Cyber Security Graduate Intern

About NYC Department of Finance

The NYC Department of Finance (DOF) is entrusted with the critical mission of administering the city's tax revenue laws with fairness, efficiency, and transparency. This approach aims to build public confidence, encourage compliance, and deliver exceptional customer service to all New Yorkers.

The Finance Information Technology (FIT) Division

Within DOF, the Finance Information Technology (FIT) Division is the backbone for all computer systems, covering hardware, software, applications, infrastructure, telephone, and paramount data security. FIT is responsible for delivering and managing tax-related payment programs across New York City, providing essential IT solutions that support the revenue collection mission and enhance the customer experience. Additionally, FIT manages systems and websites for citywide payments, land records, property assessments, parking adjudications, customer service, and the Sheriff’s public safety operations.

Role Overview: Cyber Security Graduate Intern

FIT's Cyber Security Unit is seeking a highly motivated and technically proficient Cyber Security Graduate Intern. This role will be pivotal in implementing key projects such as Data Loss Prevention (DLP) and Security Information and Event Management (SIEM), along with other critical strategic security initiatives. The DOF has assembled a top-tier cyber security team, one of the largest in municipal government, which has successfully implemented high-impact security protocols based on the NIST Cyber Security framework. The ideal candidate will possess technical talent, a strong work ethic, and outstanding organizational skills to contribute to this high-performing team, helping to elevate the agency's security maturity even further.

Key Responsibilities

Reporting to the Director of Cyber Security Operations, the Cyber Security Graduate Intern's duties will include, but are not limited to, the following:

• Assist with Cyber Security Forms and engage users to streamline request and approval processes.
• Support security efforts through the development and application of systemic risk categories across critical infrastructure domains.
• Assist with malware analytics, risk management, and security testing.
• Provide recommendations to the Cyber Security team for improving customer service and internal processes.
• Recognize and report security violations by identifying abnormalities.
• Assist with the implementation of security improvements.
• Participate actively in team meetings, contributing ideas and feedback.
• Assist on special projects and other tasks/duties as needed.

Minimum Qualifications

• Candidates must be currently enrolled in a graduate degree program at an accredited college, university, or law school.

Preferred Skills

• Currently enrolled in a graduate program in Computer Science, Information Technology, or a directly related field, or possess an undergraduate degree in one of these fields.
• Demonstrated interest in Cyber Security, preferably evidenced by professional part-time, full-time, or internship experience.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills, capable of interacting effectively with both business and technical staff.
• A self-starter and team player with the ability to work both independently and collaboratively.
• CompTIA Security + certification.
• Deep academic knowledge and professional experience in two or more of the following domains: Cyber Security, Network, Application Infrastructure, Software Development and Configuration, and Software Development Lifecycle.
• Experience with network security monitoring tools.
• Experience with Data Loss Prevention (DLP) technology.
• Certified Ethical Hacker (CEH) certification.

Additional Information

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and complete the required employment eligibility verification document form upon hire. New York City residency is generally required within 90 days of appointment.

Key Skills/Competency

• Cyber Security
• Data Loss Prevention (DLP)
• Security Information and Event Management (SIEM)
• NIST Framework
• Malware Analytics
• Risk Management
• Network Security Monitoring
• CompTIA Security+
• Certified Ethical Hacker (CEH)
• Information Technology