> Markdown version of [/jobs/ext/4607105-information-technology-specialist-2-programming](https://www.wearedevelopers.com/jobs/ext/4607105-information-technology-specialist-2-programming). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Technology Specialist 2 (Programming)

- **Company:** NYS Governor's Office of Employee Relations
- **Location:** New York, NY, United States (Remote available)
- **Salary:** $83,726 - $93,120
- **Contract:** Permanent contract
- **Skills:** Computer Programming, Linux Commands, Software Engineering, Software Vulnerability Management, Sonatype, Information Technology, Vulnerability Analysis
- **Published:** November 6, 2026
- **Apply:** https://statejobsny.com/public/vacancyDetailsView.cfm?id=228432

## About the Role

* One year of permanent, competitive service as an Information Technology Specialist 1 at NYSIF; OR
 * A bachelor's or higher-level degree including or supplemented by 15 semester credit hours in computer science; OR
 * A bachelor's or higher-level degree in any field and one year of experience in information technology; OR
 * 60 semester credit hours including or supplemented by 15 semester credit hours in computer science and one year of professional experience in information technology; OR
 * Two years of professional experience in information technology., * The candidate must have a good understanding of security fundamentals.
 * The candidate must have a good familiarity with Linux command-line.
 * The candidate must have a good understanding of security vulnerabilities: Knowledge of common vulnerabilities, threat landscapes, and mitigation techniques.

Additional Comments Please note, the salary range displayed includes special salary treatments, such as location pay.

## Description

Duties Description As a member of NYSIF's Vulnerability Management Team, incumbents of these positions will play a key role in Application and Infrastructure vulnerability management to meet the essential security needs of the agency. Responsibilities include, but are not limited to:

 * Review scan results to ensure they complete successfully and report on any anomalies.
 * Report, investigate and troubleshoot discovered vulnerabilities.
 * Provide end user support for discovered vulnerabilities.
 * Create, configure, schedule, and monitor device security scans.
 * Recertify scheduled scans to ensure their accuracy.
 * Research emerging technologies and assist management with implementation planning.
 * Communicating effectively in planning and coordination with infrastructure and application development groups during major maintenance, upgrades, and deployment projects.
 * Maintenance, and enforcement of standards/best practices.
 * Perform installation, administration, testing, and maintenance of hardware and software for on premise Tenable, Black Duck and Sonatype tools.
 * Evaluate technical and non-technical risks, recommend controls, and assist in implementing fixes