Cybersecurity Incident Response Engineer – NYC IT

NYC Department of Citywide Administrative Services; New York (NY); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Public Service Loan Forgiveness

Job summary

NYC Department of Citywide Administrative Services is seeking an IT Infrastructure Engineer to protect and optimize the City’s information systems. The role focuses on cybersecurity operations, incident response, and governance across on‑premise and cloud environments.

The ideal candidate will lead security initiatives, perform threat assessments, and collaborate with City agencies and vendors to strengthen cyber resilience.

Qualifications

• Bachelor’s degree in computer science, engineering, or a related field with 4+ years of full-time related experience; or 8 years equivalent.
• Education or experience equivalent to the above is acceptable.

Responsibilities

• Assist the Agency CISO to align cyber security change management and CI/CD with NIST duties.
• Lead and coordinate cybersecurity incidents, forensics, malware analysis, threat hunting, containment, eradication, and recovery.
• Monitor security events, logs, and threat intel using SIEM and cloud security tools.
• Perform vulnerability assessments and risk analyses across infrastructure, apps, cloud, and endpoints.
• Conduct cybersecurity audits, risk reviews, and control testing per NIST CSF, NIST 800-53, and CIS Controls.

Skills

Cybersecurity expertise

Incident response

Threat hunting

Policy development

GRC knowledge

Tools

Qualys

Wiz

Rapid7

Veracode

HCL AppScan

Snyk

CrowdStrike

Microsoft Defender

SolarWinds SEM

ServiceNow

Jira

GitHub Enterprise Copilot Security

GitHub Copilot

BitSight

Security Scorecard

Shodan

Azure AD

SAML 2.0

OAuth 2.0

OpenID Connect

MFA

RBAC

Identity governance

AirTable

Miro

Canva

SurveyMonkey

Job description

NYC Department of Citywide Administrative Services is seeking an IT Infrastructure Engineer to protect and optimize the City’s information systems. The role focuses on cybersecurity operations, incident response, and governance across on‑premise and cloud environments.

The ideal candidate will lead security initiatives, perform threat assessments, and collaborate with City agencies and vendors to strengthen cyber resilience.