Cybersecurity Infrastructure Engineer: Incident Response & Cloud

New-York-City-Department-of-Citywide-Administrative-Services; New York (NY); On-site; USD 100,000 - 170,000; Full time

Job summary

New York City’s Department of Citywide Administrative Services is seeking an Infrastructure Engineer to protect and optimize the agency’s information systems, networks, and cloud environments. The role combines incident response, digital forensics, threat detection, and governance across a broad IT stack.

You will lead cybersecurity initiatives, coordinate with City agencies and vendors, and guide security operations and policy development in a complex public-sector environment.

Qualifications

• Experience with NIST CSF, NIST SP 800-53, CIS Controls, Zero Trust and city cybersecurity policies.
• Experience supporting cloud security reviews, application security assessments and secure onboarding.
• Strong written, verbal and stakeholder management skills; ability to work independently.

Responsibilities

• Assist the Agency CISO ensuring cybersecurity-related change management aligns with duties and controls.
• Lead cybersecurity incident response, digital forensics, malware analysis and threat hunting.
• Monitor security events using SIEM, endpoint protection, cloud security, and monitoring platforms.
• Perform vulnerability assessments, risk analyses, remediation tracking and testing.
• Conduct cybersecurity audits, risk reviews and control testing.
• Develop and maintain cybersecurity policies, procedures, and incident response plans.
• Support IAM operations including SSO, MFA, RBAC and privileged access governance.
• Provide technical leadership and mentoring to staff and stakeholders.

Skills

Cybersecurity leadership

Written communication

Verbal communication

Stakeholder management

Education

Bachelors in computer science, engineering or related field with 4 years of relevant experience

Bachelors with 8+ years of relevant experience

Education/experience equivalent to above

Tools

Qualys

Wiz

Rapid7

Veracode

HCL AppScan

Snyk

CrowdStrike

Microsoft Defender

SolarWinds SEM

ServiceNow

Jira

GitHub Enterprise Copilot Security

GitHub Copilot

BitSight

Security Scorecard

Shodan

Job description

New York City’s Department of Citywide Administrative Services is seeking an Infrastructure Engineer to protect and optimize the agency’s information systems, networks, and cloud environments. The role combines incident response, digital forensics, threat detection, and governance across a broad IT stack.

You will lead cybersecurity initiatives, coordinate with City agencies and vendors, and guide security operations and policy development in a complex public-sector environment.