Public Sector Cybersecurity Test & Evaluation Engineer

New York City Office of Technology & Innovation; New York (NY); On-site; USD 110,000 - 170,000; Full time

Job summary

The Cybersecurity Engineer (Test & Evaluation) at New York City Office of Technology & Innovation leads technical security testing for City agencies, including red teaming, penetration testing, and threat emulation, translating findings into risk-aware guidance for leadership and technical staff.

Based in Brooklyn, NY, this role supports Cyber Command’s mission, develops actionable reports, maps findings to CIS/NIST controls, and collaborates across risk, compliance, and IT teams to strengthen

Qualifications

• Hands-on exposure to penetration testing and vulnerability assessments.
• Understanding of translating technical findings to risk language for diverse audiences.
• Familiarity with CIS Controls, NIST CSF/800-53, and MITRE ATT&CK frameworks.

Responsibilities

• Plan and execute technical security assessments including pentests, red team engagements, and adversary emulation.
• Identify vulnerabilities and assess real-world exploitability and impact.
• Document findings, methodology, and evidence in clear reports for technical/non-technical stakeholders.
• Evaluate risk submissions and review testing artifacts for risk acceptance and policy exceptions.
• Translate findings for agency needs and collaborate with Cyber Command and partner agencies.
• Map findings to control frameworks to support defensible risk determinations.
• Stay aware of threat actor TTPs and incorporate intelligence into testing and risk discussions.
• Contribute to continuous improvement of testing methodologies and reporting standards.
• Handle special projects as assigned.

Skills

Penetration testing

Vulnerability assessments

Red team operations

Threat emulation

Technical reporting

Education

Bachelor's degree

Tools

Burp Suite

Nmap

Metasploit

Job description

The Cybersecurity Engineer (Test & Evaluation) at New York City Office of Technology & Innovation leads technical security testing for City agencies, including red teaming, penetration testing, and threat emulation, translating findings into risk-aware guidance for leadership and technical staff.

Based in Brooklyn, NY, this role supports Cyber Command’s mission, develops actionable reports, maps findings to CIS/NIST controls, and collaborates across risk, compliance, and IT teams to strengthen