Lead Application Security Engineer – Secure SDLC

New York City Office of Technology & Innovation; New York (NY); On-site; USD 140,000 - 180,000; Full time

Job summary

New York City Office of Technology & Innovation in Brooklyn seeks a Senior Application Security Engineer to lead security assessments across the City’s software portfolio. You will operate advanced scanning platforms, perform deep manual validation, and mentor colleagues to raise our secure coding standards.

The role emphasizes translating findings into concrete remediation guidance, shaping long-term security practices, and delivering high-quality reports to stakeholders in a 24/7 operations

Qualifications

• At least 8 years of experience in cybersecurity, focusing on application security, vulnerability assessments or penetration testing.
• Domain specialist in application security vulnerabilities, testing methodologies, and enterprise testing platforms.
• Expertise in manual deep-dive validation testing to confirm risk and business impact.
• Ability to explain complex vulnerabilities to developers with code-level remediation guidance.
• Demonstrated experience mentoring or leading others in assessment methodologies and security workflows.
• Strong understanding of CI/CD, APIs, container security, and cloud-native architectures.
• Excellent analytical and communication skills bridging technical teams and management.

Responsibilities

• Operate, configure, and optimize enterprise-level SAST/DAST/SCA platforms.
• Perform advanced manual testing and exploit reproduction to validate findings.
• Translate vulnerability findings into actionable remediation requirements and coding guidance.
• Identify recurring vulnerability patterns and systemic weaknesses to shape secure coding practices.
• Serve as lead technical resource and mentor for scans and assessments.
• Generate defensible, high-quality technical reports and executive summaries.
• Handle special projects and initiatives as assigned.

Skills

Cybersecurity

Application security

Mentoring

Communication

Education

Bachelor's degree

Tools

SAST

DAST

SCA

CI/CD pipelines

Job description

New York City Office of Technology & Innovation in Brooklyn seeks a Senior Application Security Engineer to lead security assessments across the City’s software portfolio. You will operate advanced scanning platforms, perform deep manual validation, and mentor colleagues to raise our secure coding standards.

The role emphasizes translating findings into concrete remediation guidance, shaping long-term security practices, and delivering high-quality reports to stakeholders in a 24/7 operations