EngineerJobs.io
← Back to all jobs
TECHNOLOGY & INNOVATION

Cybersecurity Engineer (Application Security)

TECHNOLOGY & INNOVATION
Brooklyn, NY $75k - $95k/yr Full time Posted 2d ago
Application Security Application Security Testing Automated Security Testing Cybersecurity Tools Dynamic Application Security Testing Information Security InfoSec Security Testing Software Composition Analysis Software Security Static Application Security Testing
Apply Now

Job Description

Join a mission-driven environment in Brooklyn, NY where you’ll help strengthen software security across the City of New York. In this Application Security focused role, you’ll support the Software Security Assurance Program (SSAP) by finding vulnerabilities early, improving secure development workflows, and guiding teams with clear, actionable guidance.

Salary range: $75,000 to $95,000 per year. Location: Brooklyn, NY (onsite). Experience: 4+ years. Education: baccalaureate degree.

What you will do

  • Help run the daily Software Security Assurance Program (SSAP) to support security standards before applications are deployed.
  • Support SAST and DAST security testing to identify vulnerabilities across citywide applications.
  • Use Software Composition Analysis (SCA) tools to identify, track, and report vulnerabilities in open-source and third-party components.
  • Act as a bridge between developers and security teams to integrate security requirements into development workflows.
  • Complete foundational security reviews of cloud vendor applications to validate alignment with city security guidelines.
  • Contribute guidance and training materials for development teams based on established secure coding standards and OWASP guidance.
  • Assist with updates and maintenance for security documentation, guidelines, and compliance tracking frameworks (including NIST, CIS, OWASP).
  • Stay current on emerging cybersecurity threats and participate in team mentorship to grow application security expertise.
  • Take on special projects and initiatives as assigned.

What you bring

  • A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to the projects and policies required for the position; or equivalent education and/or experience.
  • Hands-on exposure to standard SAST, DAST, and/or SCA tools and basic vulnerability assessment techniques. Examples include Veracode, Checkmarx, Snyk, and Burp Suite.
  • Familiarity with OWASP Top 10, secure coding concepts, and common development languages such as Python, Java, and JavaScript.
  • Understanding of core cloud concepts (AWS, Azure, or GCP) and common web API security practices (OAuth, REST).
  • Understanding of municipal government operations, including the ability to communicate technical security risks to diverse agency stakeholders.
  • Active pursuit or completion of entry-level security certifications such as CompTIA Security+, eJPT, or GIAC GSEC.

Tools and standards you will use

SAST, DAST, SCA (Veracode, Checkmarx, Snyk, Burp Suite), OWASP Top 10, and guidance aligned to NIST and CIS, including OWASP. Development and security concepts include Python, Java, JavaScript, AWS, Azure, GCP, OAuth, and REST, plus relevant certifications such as CompTIA Security+, eJPT, and GIAC GSEC.

Schedule

Daytime work is typical, but due to technical duties in a 24/7 operation, candidates may be required to work various shifts, including weekends and/or nights/evenings.

Additional details

  • Public service loan forgiveness: As a prospective City of New York employee, you may be eligible for federal loan forgiveness and state repayment assistance programs.
  • Residency: New York City residency is not required.
  • How to apply: Interested applicants with other civil service titles who meet the preferred requirements should submit a resume for consideration.

Similar Jobs