Application Security Engineer - SSAP & Secure Coding

Cybersecurity Jobs; New York (NY); Presencial; USD 75.000 - 95.000; Jornada completa

Descripción de la vacante

The City of New York is seeking a Cybersecurity Engineer (Application Security) to advance the Software Security Assurance Program (SSAP). This onsite role in Brooklyn will support application security testing across city systems, identify software and third‑party risks, and help teams strengthen secure development practices aligned to recognized security guidance.

You will work with security testing tools, contribute to cloud vendor security reviews, and support guidance and training grounded

Formación

• Bachelor's degree and four years relevant full‑time experience.
• Hands‑on with SAST/DAST/SCA tools (e.g., Veracode, Checkmarx) and basic vulnerability assessment techniques.
• Familiarity with OWASP Top 10, secure coding concepts, and languages such as Python, Java, JavaScript.

Responsabilidades

• Participate in the daily execution of the SSAP to ensure applications meet security standards before deployment.
• Assist with SAST and DAST testing to identify vulnerabilities across citywide applications.
• Use SCA tools to identify, track, and report vulnerabilities in open‑source and third‑party components.
• Act as a point of contact between developers and security teams to help integrate security requirements into development workflows.
• Conduct foundational security reviews of cloud vendor applications to verify compliance with city security guidelines.
• Support guidance and training materials for development teams based on secure coding standards and OWASP guidelines.
• Help update and maintain security documentation, guidelines, and compliance tracking frameworks (e.g., NIST, CIS, OWASP).
• Stay current on emerging cybersecurity threats and participate in team mentorship to grow application security expertise.
• Take on special projects and initiatives as assigned.

Conocimientos

Security testing

Secure coding

Cloud concepts

Stakeholder communication

OWASP Top 10 knowledge

Educación

Bachelor's degree

Herramientas

Veracode

Checkmarx

Snyk

Burp Suite

OWASP Top 10

NIST

CIS

AWS

Azure

GCP

OAuth

REST

Descripción del empleo

The City of New York is seeking a Cybersecurity Engineer (Application Security) to advance the Software Security Assurance Program (SSAP). This onsite role in Brooklyn will support application security testing across city systems, identify software and third‑party risks, and help teams strengthen secure development practices aligned to recognized security guidance.

You will work with security testing tools, contribute to cloud vendor security reviews, and support guidance and training grounded