Cybersecurity Engineer Level 6 - IAM Privileged Management

Metropolitan Transportation Authority; New York (NY); On-site; USD 128,041 - 174,177; Full time

Job summary

Metropolitan Transportation Authority is seeking a Cybersecurity Engineer Level 6 to manage and analyze cybersecurity risks. You will design, build, and maintain infrastructure and applications to support a secure posture across IT/OT domains.

Duties include system hardening, incident response, and collaborating with vendors, architects, and business units. The role requires leadership in security architecture, risk analysis, and incident handling, with ongoing updates to stakeholders.

Qualifications

• Bachelor’s degree in a related field and at least 8 years of cybersecurity experience.
• Bachelor’s degree in Computer Science or related fields preferred.

Responsibilities

• Research emerging threats and vulnerabilities to aid in incident response.
• Apply secure configuration and hardening standards.
• Design, configure, and integrate secure solutions.
• Provide incident response support and forensic analysis.
• Install, configure, harden, and optimize infrastructure and security components.
• Review alerts and document incident reports.
• Test new systems and manage cybersecurity risks.

Skills

Security controls

Technical breadth

Risk assessment

TCP/IP knowledge

Scripting/Programming

Education

BA/BS in related field

CS or related degree preferred

Job description

Job Title

Cybersecurity Engineer Level 6

Hours of Work

9:00 am – 5:30 pm (7.5 hours/day) or as required. This position is eligible for teleworking, which is currently one day per week. New hires are eligible to apply 30 days after their effective date of hire.

Salary Range

$128,041 – $174,177

Department / Division

Information Technology

Supervisor

CybSecOffMgr AccessMgmtIdentSec

Location

2 Broadway, New York, NY 10004

Job Summary

The purpose of this position is to provide technical expertise in managing and analyzing cybersecurity risks. The Cybersecurity Engineer will be responsible for designing, building, and maintaining infrastructure and application technology to support a secure cybersecurity posture. This includes systems that support cybersecurity directly and/or the business operations for Information and Operational Technology disciplines. Secure building and configuration of systems (applications, infrastructure, wireless, carrier systems, cloud, operational technology, IOT, etc.) from the outset reduces risk to MTA. Specialized and focused skill sets in various technology domains assist with the overall risk reduction for the MTA. The configuration, hardening, guidance, response, and analysis of these systems aid in reduction and containment of Cyber Security risk. Risk assessments, data analytics tools, operational process reviews, and collaboration with security engineers, architects, developers, vendors, and business units are used to constantly improve the overall security of the MTA.

Responsibilities

• Research emerging threats and vulnerabilities to aid in the identification of network incidents, and support the creation of new architecture, policies, standards, and guidance to address them.
• Apply secure system configuration and hardening standards.
• Design, configure, and integrate secure solutions in the technology domains assigned.
• Provide incident response support, including mitigating actions to contain activity and facilitate forensic analysis, system hardening, and recovery when necessary.
• Install, configure, harden, and optimize infrastructure, applications, and security components such as servers, workstations, mobile devices, directory services, operating systems, middleware, IOT, web and next‑generation firewalls, machine and human behavior learning tools, host‑based security systems, security event and incident monitoring systems, virtual, physical, and cloud platforms.
• Identify configuration gaps independently and/or with vendors to reduce cybersecurity risks.
• Review alerts and sensor data and document formal, technical incident reports.
• Test new systems and manage cybersecurity risks and remediation system testing, baselines, and best practices.
• Respond to computer security incidents according to the computer security incident response policy and procedures.
• Provide technical guidance to first responders for handling information security incidents.
• Provide timely and relevant updates to appropriate stakeholders and decision makers.
• Communicate investigation findings to relevant business units to help improve the information security posture.
• Validate and maintain incident response plans and processes to address potential threats.
• Compile and analyze data for management reporting and metrics.
• Monitor relevant information sources to stay up to date on current attacks and trends.
• Analyze potential impact of new threats and communicate risks back to detection analysts, architects, technology SMEs, and management functions.
• Perform root‑cause analysis to document findings, and participate in root‑cause elimination activities as required.
• Use judgment to form conclusions that may challenge conventional wisdom.
• Hypothesize new threats and indicators of compromise.
• Monitor threat intelligence feeds to identify a range of threats, including indicators of compromise and advanced persistent threats (APTs).
• Identify the tactics, techniques, and procedures (TTPs) of potential threats through the MITRE ATT&CK or similar frameworks.
• Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures) under the direction of the IT Security Manager, where appropriate.
• Serve as a technical resource for multiple components of the security architecture, risk analysis, and analytics to help define problems and identify remediation strategies.
• Troubleshoot and analyze most problems within assigned area(s), providing cybersecurity correlation, expertise, and resolution that may be complicated by technology interdependency and challenging security issues.
• Participate in planning for the future technical architecture and provide insight into the future of their area of technology to continually improve effectiveness and efficiency.
• Participate in or lead the development of roadmaps related to their area(s) of expertise to manage and meet identified technology needs.
• Participate in the evaluation of new technologies relative to their domain(s) to determine applicability to and best meet the needs of MTA and constituent agencies.
• Specify monitoring points to assess performance of technologies in their domain(s) and recommend the necessary actions to ensure optimal performance and reliability.
• Develop disaster recovery and contingency plans for their domain(s) to provide users with minimal interruptions in service.
• Provide technical leadership to project teams in their area of expertise to promote technical understanding and talent development or lead teams to complete projects when a project manager has not been assigned.
• Contribute to the technical elements of RFPs and RFIs and negotiate with vendors on technical issues to ensure results are delivered in line with user and organization requirements.
• Interact with major providers at the technical expert level to address mission‑critical issues, evaluate ongoing vendor service level, and enforce SLAs and penalties.
• Perform other duties and tasks as assigned, including compliance with all policies and standards.
• Observe the work performed by contractors, review invoices, and approve them if the work meets contractual standards, and address performance issues with the contractor when possible.
• Escalate issues to other parties as needed.

Qualifications

• Bachelor’s Degree in Arts/Sciences (BA/BS) and minimum 8 years of relevant experience in a specific cybersecurity subdomain (Cloud, Applications, Infrastructure, Security Technology, etc.) is required.
• Bachelor’s Degree in Computer Science or related fields is preferred.

Licenses & Certifications

• Certified Information Security Professional (CISSP) – Upon Hire Required
• Global Information Assurance Certification (GIAC) – Upon Hire Required
• Certified Information Security Manager (CISM) – Upon Hire Required
• Certified in Risk and Information Systems Control (CRISC) – Upon Hire Required
• Certified Information Systems Auditor (CISA) – Upon Hire Required
• Other related certification(s) – Upon Hire Required

Required Knowledge, Skills, and Abilities

• Verifiable implementation of security domain controls for enterprise technologies.
• Seasoned expertise in multiple technologies and strong understanding of current and future technology architecture, including the interoperability of technologies.
• Advanced ability to conduct and analyze a security risk assessment.
• Expert understanding of TCP/IP (OSI Layers 1–4) and Internet and Intranet technologies (OSI Layers 5–7).
• Some scripting or programming skills (PERL, Python, PowerShell, etc.) preferred as needed.

Competencies

• Cultivates Innovation – Adept – Creating new and better ways for the organization to be successful.
• Customer Focus – Adept – Building strong customer relationships and delivering customer‑centric solutions.
• Communicates Effectively – Expert – Developing and delivering multi‑mode communications that convey a clear understanding of the unique needs of different audiences.
• Tech Savvy – Advanced – Anticipating and adopting innovations in business‑building digital and technology applications.
• Technical Skills – Advanced – Specialized knowledge and expertise on tools, programs, domains, platforms, and products used for specific tasks.
• Values Diversity – Advanced – Recognizing the value that different perspectives and cultures bring to an organization.
• Collaborates – Advanced – Building partnerships and working collaboratively with others to meet shared objectives.

Equal Employment Opportunity

MTA and its subsidiary and affiliated agencies are Equal Opportunity Employers, including with respect to veteran status and individuals with disabilities. The MTA encourages qualified applicants from diverse backgrounds, experiences, and abilities, including military service members, to apply.