Cybersecurity Engineer Level 7

Join a hybrid, mission-focused cybersecurity team supporting secure operations across IT and OT environments. As a Level 7 Cybersecurity Engineer for the Metropolitan Transportation Authority (MTA), you will apply advanced technical expertise to assess cybersecurity risk, strengthen infrastructure and applications, and help sustain a resilient security posture.

Location: New York, NY, United States (hybrid)
Compensation: USD 145,145 - 191,594 per year
Experience: 10+ years
Education: Bachelor’s Degree in Arts/Sciences (BA/BS)

Responsibilities

• Research emerging threats and vulnerabilities to support identification of network incidents and to inform new architecture, policies, standards, and guidance.
• Apply secure system configuration and hardening standards through practical implementation.
• Design, configure, and integrate secure solutions across assigned technology domains.
• Support incident response, including mitigating actions to contain activity, facilitating forensics analysis, hardening systems, and enabling recovery when needed.
• Provide installation, system configuration, hardening, and optimization for security components across infrastructure, applications, and security systems, including servers, workstations, mobile devices, directory services, operating systems, middleware, IOT, web and next generation firewalls, host-based security, security event and incident monitoring, and virtual, physical, and cloud platforms.
• Independently identify configuration gaps and coordinate with vendors to reduce cybersecurity risk.
• Review sensor alerts and data, and produce formal technical incident reports.
• Test new systems and manage cybersecurity risk and remediation activities, including testing, baseline development, and best practices.
• Respond to computer security incidents in accordance with the computer security incident response policy and procedures.
• Provide technical guidance to first responders during information security incidents and deliver timely updates to appropriate stakeholders and decision makers.
• Communicate investigation findings to relevant business units to strengthen the information security posture.
• Validate and maintain incident response plans and processes.
• Compile and analyze data for management reporting and metrics; monitor information sources to stay current on attacks and trends.
• Analyze potential impact of new threats and communicate risks to detection analysts, architects, technology SMEs, and management.
• Perform root-cause analysis, document findings, and support root-cause elimination activities; apply judgment that may challenge conventional wisdom.
• Hypothesize threats and indicators of compromise; monitor threat intelligence feeds to identify threats including indicators of compromise and advanced persistent threats (APTs).
• Identify tactics, techniques, and procedures (TTPs) using MITRE ATT&CK or similar frameworks.
• Contribute to enterprise security documents (policies, standards, baselines, guidelines, and procedures) under direction of the IT Security Manager, as appropriate.
• Support other assigned duties, comply with policies and standards, and participate in contractor observation, invoice review and approval where applicable, performance issue escalation, and issue escalation when needed.
• Provide guidance and training to the IT community and act as a technical resource across multiple technologies to improve effectiveness and efficiency.
• Support enterprise architecture understanding, including interoperability of technologies to integrate MTA systems and align with long-term business strategies.
• Create complete RFPs and RFIs, negotiate contract terms and conditions with vendors and procurement, and evaluate vendor service levels to enforce SLAs and penalties.
• Establish systems to monitor compliance with architectural standards and ensure technical integrity; lead evaluation of new technologies to determine applicability to MTA and constituent agencies.
• Propose technology investments supported by technical analysis and a business case.
• Develop disaster recovery and contingency plans for assigned domains to minimize service interruptions.

Requirements

• Bachelor’s Degree in Arts/Sciences (BA/BS). Combination of education and experience may be considered in lieu of a degree.
• Minimum 10 years of relevant technology-based or cybersecurity experience, or experience in a specific cybersecurity subdomain (Cloud, Applications, Infrastructure, Security Technology, etc.).
• Minimum 5 years, with at least two professional certifications in the subject domain (including but not limited to CISSP, GIAC, CISM, CRISC, CISA, or other related certifications).
• Some scripting or programming skills preferred (PERL, Python, PowerShell, etc.).
• Expert ability to conduct and analyze security risk assessments.
• Expert understanding of TCP/IP (OSI Layers 1-4) and Internet and Intranet technologies required (OSI Layers 5-7).
• Proven track record implementing architectural designs.
• Proven track record configuring and hardening systems.

Technologies

• PERL, Python, PowerShell
• MITRE ATT&CK
• TCP/IP, OSI Layers 1-4, OSI Layers 5-7
• IOT
• APTs

Teleworking eligibility: This position is eligible for teleworking, currently one day per week. New hires are eligible to apply 30 days after their effective date of hire.

Compliance notice: Pursuant to the New York State Public Officers Law and the MTA Code of Ethics, employees who hold a policymaking position must file an Annual Statement of Financial Disclosure with the NYS Commission on Ethics and Lobbying in Government.

Equal Employment Opportunity: MTA and its subsidiary and affiliated agencies are Equal Opportunity Employers, including with respect to veteran status and individuals with disabilities. MTA encourages qualified applicants from diverse backgrounds, experiences, and abilities, including military service members, to apply.