Senior Cyber Security Engineer

QDAO - Investigate/Admin; New York (NY); On-site; USD 130,000 - 155,000; Full time

Benefits offered by this job

Health insurance

401(k)

Comprehensive benefits package

Job summary

QDAO - Investigate/Admin is seeking a Senior Cyber Security Engineer in New York City. This role involves designing and implementing security controls, conducting security assessments, and leading incident response efforts. Ideal candidates will have over 5 years of cybersecurity experience and a degree in Computer Science or a related field. The position offers a competitive salary range of $130,000 to $155,000 and a comprehensive benefits package, ensuring an inclusive environment for all employees.

Qualifications

• 5+ years of hands-on cybersecurity experience.
• Strong knowledge of network and security, encryption, and authentication protocols.
• Understanding of routing, firewall functionality, and intrusion detection systems.

Responsibilities

• Design and implement security controls across cloud and on-premises infrastructure.
• Conduct security assessments and architecture reviews.
• Perform vulnerability assessments and penetration testing.
• Lead security incident response efforts.

Skills

Hands-on cybersecurity experience

Knowledge of network and security protocols

Proficiency in scripting languages (PowerShell)

Understanding of cloud security (AWS, Azure, GCP)

Experience with SIEM tools

Experience with vulnerability scanners

Knowledge of DevSecOps practice

Education

Baccalaureate degree in Computer Science or related field

Job description

Senior Cyber Security Engineer

The Office of the Queens County District Attorney (QDA) is seeking an experienced Senior Cyber Security Engineer whose responsibilities include:

• Design and implement security controls across cloud and on-premises infrastructure.
• Conduct security assessments and architecture reviews for existing and new systems and applications.
• Process and analyze cyber threats, establishing the extent of the threat and its impact on the environment.
• Perform regular vulnerability assessments and penetration testing.
• Ensure compliance with relevant frameworks and requirements (CJIS, NIST, etc.).
• Perform detailed analysis of threats during the incident process, combining sound analytical skills with advanced knowledge of IT security and network threats.
• Perform postmortem analysis on logs, traffic flows, and other activities to identify malicious activity.
• Develop and present regular updates and reports for technical audiences on cyber threats and activity.
• Work to implement the Security Incident Event Management system.
• Lead and participate in security incident response efforts including off‑hours/on‑call support including performing detailed analysis of threats during the incident process, combining sound analytical skills with advanced knowledge of IT security and network threats.
• Coordinate remediation efforts with development and infrastructure teams.
• Contribute to the development of policies and documentation to support ongoing IT security activities (run books, procedure documentation, etc.).
• Assist in deploying security monitoring tools and countermeasures, security tool integration and optimization.
• Research, analyze, and understand log sources, particularly security and networking devices such as firewalls, routers, anti‑virus products, and operating systems.

Preferred Education and Qualification Requirements

1. A baccalaureate degree from an accredited college or university in Computer Science or related field and four years of satisfactory full‑time experience related to projects and policies required by the position, or equivalent.
2. 5+ years of hands‑on cybersecurity experience.
3. Strong knowledge of network and security, encryption, and authentication protocols.
4. Experience with SIEM tools, vulnerability scanners, and security orchestration platforms.
5. Proficiency in scripting languages (PowerShell).
6. Understanding of cloud security (AWS, Azure, GCP).
7. Knowledge of DevSecOps practice and security automation.

Must have excellent communication skills and experience in handling confidential information.

Strong preference given to candidates with an understanding of networking protocols and infrastructure designs; understanding of routing, firewall functionality, host and network intrusion detection systems including encryption and load balancing; network protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols) and topologies; experience in monitoring both commercial and open-source IDS/IPS; and knowledge of network forensic techniques.

Benefits and Compensation

Salary range: $130,000–$155,000 (Salary commensurate with experience).

Comprehensive benefits package including health insurance, 401(k) and more.

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.