Cyber Risk & Cloud Security Analyst (DevSecOps)

Federal Reserve Bank of New York; New York (NY); On-site; USD 170,000 - 230,000; Full time

Benefits offered by this job

Educational assistance

Comprehensive insurance plans

Pension plan and 401(k) with generous match

Job summary

The Federal Reserve Bank of New York is seeking a Cyber Security Assurance Analyst to assess risks related to third-party vendors and cloud infrastructure. This role will involve performing security assessments, managing security testing, and providing guidance throughout the software development life-cycle.

Key qualifications include experience with NIST 800‑53, strong DevSecOps culture experience, and the ability to maintain a National Security Clearance. The position offers a salary range between $170,000 and $230,000 per year and various employee benefits.

Qualifications

• Must possess or hold the ability to obtain and maintain a National Security Clearance; U.S. citizenship required.

Responsibilities

• Perform cloud application security risk assessments.
• Execute risk assessments according to NIST 800‑53 guidelines.
• Manage relationships with business units to deliver security advice.
• Perform application security testing for compliance.
• Support integration of security tooling into CI/CD pipeline.

Skills

Experience executing security assessments in cloud environments

Expert knowledge of risk management based on NIST 800‑53

Proficiency in vulnerability risk impact analysis

Strong DevSecOps culture experience

Demonstrated leadership and project management

Expert application security testing skills

Experience evaluating and securing third-party vendors

Ability to evaluate and secure generative AI systems

Job description

The Federal Reserve Bank of New York is seeking a Cyber Security Assurance Analyst to assess risks related to third-party vendors and cloud infrastructure. This role will involve performing security assessments, managing security testing, and providing guidance throughout the software development life-cycle.

Key qualifications include experience with NIST 800‑53, strong DevSecOps culture experience, and the ability to maintain a National Security Clearance. The position offers a salary range between $170,000 and $230,000 per year and various employee benefits.