Co-Op – IT – Technical Security

The New York Independent System Operator (NYISO) applies cutting-edge technology to operating a reliable electricity system, managing competitive markets for wholesale electricity, and planning for the Empire State's energy future. The NYISO takes pride in recruiting, developing and retaining highly talented individuals. Our co-op programs give young professionals the opportunity to gain a fundamental understanding of New York electricity markets, bulk electricity systems and how we plan for New York State’s energy future.

The NYISO is seeking a Co-Op student to join the Technical Security to support enterprise security platforms, threat detection, security analytics, technical documentation, and operational improvement. The student will help document security-platform architecture and data flows, develop reports and dashboards, analyze alert trends, assist with threat hunting, and improve detection capabilities.

The student may work with technologies such as IBM QRadar, Microsoft Defender XDR, Tenable Security Center, Nessus, and Symantec Endpoint Protection. The assignment also includes opportunities to use PowerShell, Python, and Kusto Query Language and evaluate AI-assisted approaches for reducing repetitive security work and improving incident-response efficiency.

Responsibilities

• Develop architecture documentation for enterprise security platforms.
• Document system components, hostnames, data flows, integrations, dependencies, and platform connectivity.
• Create Microsoft Defender KQL queries, reports, and dashboards.
• Develop reporting for platform health, security coverage, operational metrics, and remediation opportunities.
• Review existing technical documentation for accuracy, completeness, and currency.
• Create or update procedures for recurring operational and administrative activities.
• Identify and document security metrics, trends, and noteworthy threats.
• Contribute technical information for employee security-awareness communications.
• Develop and tune SIEM detection rules for anomalous network behavior and potential data-exfiltration activity.
• Design dashboards that monitor high-risk user and asset activities.
• Create data dictionaries and log-flow diagrams.
• Analyze alert trends to identify high-frequency false positives and potential tuning opportunities.
• Conduct structured threat-hunting activities to identify anomalies.
• Evaluate AI-assisted tools that may automate repetitive alert triage and support incident response.
• Collaborate with cybersecurity and infrastructure professionals.

Qualifications

• Currently pursuing a degree in Cybersecurity, Information Technology, Computer Science, Computer Engineering, or a related field.
• Basic understanding of cybersecurity concepts, computer networking, and Windows environments.
• Strong written communication and technical-documentation skills.
• Familiarity with security tools, scripting, or data analysis.
• Exposure to PowerShell, Python, or Kusto Query Language is helpful.
• Strong analytical and problem-solving abilities.
• Ability to interpret technical information and identify meaningful patterns.
• Ability to work independently and learn unfamiliar technologies.
• Strong attention to detail and interest in threat detection, security monitoring, or incident response.
• Ability to document findings and communicate them clearly to technical stakeholders.

The NYISO offers the flexibility to work both in the office and remotely, providing our employees with an enhanced work life balance. This internship will be a hybrid program, with the expectation that employees will be local to the Albany, NY area.

All offers of employment will be made contingent upon the successful completion of a drug screening and background check.

The NYISO is an Equal Opportunity Employer and as such, does not discriminate in its hiring or employment practices.