Cybersecurity Engineer (Application Security)
About The Position
The Office of Technology and Innovation (OTI) uses technology to improve opportunity, public safety, and government services across New York City. Its Cyber Command protects City systems against cyber threats and supports more than 100 agencies and offices in protecting, detecting, identifying, responding to, and recovering from threats. The Cybersecurity Engineer (Application Security) supports the Software Security Assurance Program (SSAP) by identifying and mitigating software application security risks. The role uses Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) methods and tools. It offers an opportunity to build technical expertise in secure coding practices with structured mentorship from senior engineers. The position is based in Brooklyn, NY. The listed shift is day, though various shifts—including weekends and nights or evenings—may be required because the technical duties support a 24/7 operation.
Requirements
- A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position, or equivalent education and/or experience.
Responsibilities
- Participate in the daily execution of the Software Security Assurance Program (SSAP) to help ensure applications meet security standards before deployment.
- Assist with SAST and DAST security testing to identify vulnerabilities across City applications.
- Use SCA tools to identify, track, and report vulnerabilities in open-source and third-party software components.
- Serve as a point of contact between developers and security teams to help integrate security requirements into development workflows.
- Perform foundational security reviews of cloud vendor applications for compliance with City security guidelines.
- Help provide development teams with guidance and training materials based on established secure coding standards and OWASP guidelines.
- Assist in updating and maintaining security documentation, guidelines, and compliance tracking frameworks, including NIST, CIS, and OWASP.
- Stay informed about emerging cybersecurity threats and participate in team mentorship to expand application security expertise.
- Handle special projects and initiatives as assigned.
Benefits
- The employer states that it offers great benefits, without specifying them.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
