Cybersecurity Engineer (Application Security)
About The Position
The Cybersecurity Engineer (Application Security) supports the City of New York’s Software Security Assurance Program (SSAP) and helps safeguard city digital infrastructure by identifying and mitigating security risks in software applications. The role uses Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) to identify application vulnerabilities and monitor third-party components across city agencies. The position provides an opportunity to develop application security expertise with structured mentorship from senior engineers. The position is with the Office of Technology and Innovation’s Cyber Command, which protects City systems against cyber threats and supports more than 100 agencies and offices. The role is based in Brooklyn, New York. The listed schedule is day shift, although various shifts—including weekends and nights or evenings—may be required due to the technical duties of the position in a 24/7 operation.
Requirements
- A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position, or equivalent education and/or experience.
- Experience related to projects and policies required by the particular position.
Responsibilities
- Participate in the daily execution of the Software Security Assurance Program to ensure applications meet security standards before deployment.
- Assist with SAST and DAST security testing to identify vulnerabilities across citywide applications.
- Use SCA tools to identify, track, and report vulnerabilities in open-source and third-party software components.
- Serve as a point of contact between developers and security teams to help integrate security requirements into development workflows.
- Conduct foundational security reviews of cloud vendor applications for compliance with city security guidelines.
- Help provide development teams with guidance and training materials based on established secure coding standards and OWASP guidelines.
- Assist in maintaining security documentation, guidelines, and compliance tracking frameworks, including NIST, CIS, and OWASP.
- Stay informed about emerging cybersecurity threats and participate in team mentorship to expand application security expertise.
- Handle special projects and initiatives as assigned.
Benefits
- The employer describes its benefits as great but does not specify individual benefits.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
