Cybersecurity Incident Response Lead — PSLF Eligible

NYC Citywide Administrative Services; New York (NY); On-site; USD 120,000 - 190,000; Full time

Job summary

NYC Citywide Administrative Services is seeking an Infrastructure Engineer to protect and enhance the City’s IT infrastructure. You will spearhead cybersecurity incident response, forensics, threat detection, vulnerability management, and governance across on‑premises and cloud environments.

The role requires a strong foundation in NIST CSF, NIST SP 800-53, CIS Controls, Zero Trust, and enterprise security operations, with the ability to mentor junior staff and coordinate with City agencies and

Qualifications

• Bachelor level degree in computer science, engineering or related field and four years of satisfactory full-time experience in datacenter engineering and operations, cloud engineering and operations, or complex IT infrastructure engineering.
• Alternative: bachelor plus eight years of related experience; or equivalent combination.

Responsibilities

• Assist the Agency CISO with change management and CI/CD processes aligned to NIST separation of duties.
• Lead cybersecurity incident response, forensics, malware analysis, threat hunting, containment, eradication, and recovery activities.
• Monitor security events, logs, alerts, and threat intelligence using SIEM and cloud security tools.
• Perform vulnerability assessments, risk analyses, remediation tracking, validation testing, and reporting across infrastructure and cloud environments.
• Conduct cybersecurity audits, GRC assessments, risk reviews, and control testing per NIST CSF, NIST SP 800-53, CIS Controls.

Education

Bachelors in Computer Science, Engineering, or related field

Equivalent combination of education and experience

Tools

Qualys

Wiz

Rapid7

Veracode

HCL AppScan

Snyk

CrowdStrike

Microsoft Defender

SolarWinds SEM

ServiceNow

Jira

GitHub Enterprise Copilot Security

GitHub Copilot

BitSight

Security Scorecard

Shodan

Job description

NYC Citywide Administrative Services is seeking an Infrastructure Engineer to protect and enhance the City’s IT infrastructure. You will spearhead cybersecurity incident response, forensics, threat detection, vulnerability management, and governance across on‑premises and cloud environments.

The role requires a strong foundation in NIST CSF, NIST SP 800-53, CIS Controls, Zero Trust, and enterprise security operations, with the ability to mentor junior staff and coordinate with City agencies and