Cyber Security Assurance Analyst – Cloud & DevSecOps

Federal Reserve System; New York (NY); On-site; USD 170,000 - 230,000; Full time

Benefits offered by this job

Learning & Growing programs

Parental leave & family support

Health & wellness programs

Financial planning resources

Job summary

The Federal Reserve Bank of New York is seeking a Cyber Security Risk Analyst within Information Security New York (ISNY). The role focuses on risk assessments, cloud mitigations, and security testing across development squads to protect critical Federal Reserve data and systems.

You will work in a dynamic, mission-driven environment embedded with product teams, providing security guidance during development and ensuring secure CI/CD practices.

Qualifications

• Background in application development with focus on security control implementation.
• Ability to review application code and assist developers with vulnerability remediation.
• Experience in Cloud security assessments and third-party SaaS risk.
• Knowledge of risk management based on NIST 800-53.
• Experience integrating security in DevSecOps and CI/CD pipelines.
• Strong leadership and project-management abilities.
• Experience addressing security findings in Agile environments.

Responsibilities

• Perform Cloud application security risk assessments.
• Execute assessments timely and accurately.
• Manage relationships with the assigned business unit.
• Embed within development squads to provide timely security guidance.
• Perform application security testing ensuring compliant workloads move to the Cloud.
• Support development squads in implementing security tooling in the CI/CD pipeline.

Skills

Cloud security risk assessments

DevSecOps collaboration

NIST 800-53 knowledge

Vulnerability remediation

Security testing

Risk management

3rd party vendor risk

AI security evaluation

Security metrics reporting

Job description

The Federal Reserve Bank of New York is seeking a Cyber Security Risk Analyst within Information Security New York (ISNY). The role focuses on risk assessments, cloud mitigations, and security testing across development squads to protect critical Federal Reserve data and systems.

You will work in a dynamic, mission-driven environment embedded with product teams, providing security guidance during development and ensuring secure CI/CD practices.