City of New York logo

Cybersecurity Engineer (Application Security)

City of New York

New York, NYFull-time$75–95K/yrSeen 2 days agoSeen in employer's feed 2 days ago

Most applications go out cold — see where you stand first. No sign-up to start.

You apply on the employer's site, with no Olive account needed.

Watch jobs like this.

Don't just apply. Show up ready.

Olive works from this exact posting.

At a glance

Compensation
$75–95K/yr
Location
New York, NY
Schedule
Full-time
Work Authorization
Not specified

Olive lists jobs from US employers, including remote roles you can work from the United States.

Job overview

The Cybersecurity Engineer (Application Security) supports New York City’s Software Security Assurance Program by identifying and mitigating application security risks. The role uses SAST, DAST, and software composition analysis to find vulnerabilities, supports security reviews of cloud vendor applications, and helps integrate security requirements into development workflows. It offers structured mentorship while building expertise in secure coding practices.

Skills & qualifications

RequiredNice to have

Skills

SASTDASTSoftware Composition AnalysisSecure CodingOWASPNISTCISApplication SecurityCloud Security Reviews

Qualifications

Bachelor's Degree or EquivalentFour Years Related Experience

Full job description

Job Description

The Office of Technology and Innovation (OTI) leverages technology to drive opportunity, improve public safety, and help government run better across New York City. From delivering affordable broadband to protecting against cybersecurity threats and building digital government services, OTI is at the forefront of how the city delivers for New Yorkers in the 21st century. Follow us on social media @NYCOfficeofTech, and visit www.nyc.gov/oti to learn more.

At OTI, we offer great benefits, and the chance to work on projects that have a meaningful impact on millions of people. You'll have the opportunity to work with cutting-edge technology and collaborate with other passionate professionals who share your drive and commitment to making a difference through technology.

About Cyber Command

Cyber Command is charged with protecting all City systems against cyber threats, including systems that deliver vital services to New Yorkers. Headed by the Chief Information Security Officer of the City of New York, we provide in-depth support to over 100 agencies and offices to protect, detect, identify, respond to, and recover from cyber threats.

Job Description

The Cybersecurity Engineer (Application Security) will play a key supporting role in safeguarding the city's digital infrastructure by identifying and mitigating security risks in software applications. The role will support the execution of the Software Security Assurance Program (SSAP) and involves using SAST and DAST methodologies to help uncover vulnerabilities and Software Composition Analysis (SCA) tools to monitor third-party components across city agencies. This position offers a valuable opportunity to build technical expertise in secure coding practices while receiving structured mentorship from senior engineers.

Responsibilities will include:

  • Participate in the daily execution of the Software Security Assurance Program (SSAP) to ensure applications meet security standards prior to deployment.

  • Assist with SAST and DAST security testing to identify vulnerabilities across citywide applications.

  • Utilize Software Composition Analysis (SCA) tools to identify, track, and report vulnerabilities in open-source and third-party software components.

  • Serve as a point of contact between developers and security teams to help integrate security requirements into development workflows.

  • Perform foundational security reviews of cloud vendor applications to verify compliance with city security guidelines.

  • Help provide guidance and training materials to development teams based on established secure coding standards and OWASP guidelines.

  • Assist in updating and maintaining security documentation, guidelines, and compliance tracking frameworks (e.g., NIST, CIS, OWASP).

  • Stay informed on emerging cybersecurity threats and actively participate in team mentorship to expand application security expertise.

  • Handle special projects and initiatives as assigned.

HOURS/SHIFT

Day - Due to the necessary technical duties of this position in a 24/7 operation, candidate may be required to work various shifts such as weekends and/or nights/evenings.

WORK LOCATION

Brooklyn, NY

TO APPLY

  • Interested applicants with other civil service titles who meet the preferred requirements should also submit a resume for consideration

Please go to www.cityjobs/jobs/search and search for Job ID # 809082

SUBMISSION OF A RESUME IS NOT A GUARANTEE THAT YOU WILL RECEIVE AN INTERVIEW

APPOINTMENTS ARE SUBJECT TO OVERSIGHT APPROVAL

OTI participates in E-Verify

IT SECURITY SPECIALIST - 95622

Qualifications

A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position; or,

Education and/or experience which is equivalent to "1" above.

Additional Information

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.

Salary Min: $ 75,000.00

Salary Max: $ 95,000.00

How this job compares

Set against the 1,766 open Cybersecurity Engineer jobs on Olive Jobs, counted November 3, 2026.

Pay
  • This posting$75–95K/yr
  • New York median$105–183K/yr52 salary ranges
  • US median$120–198K/yr1,409 salary ranges

This range's midpoint, $85K, is 43% below the New York median midpoint ($149K) — in the lowest quarter of Cybersecurity Engineer salary ranges in New York.

Openings
Olive Jobs lists 68 open Cybersecurity Engineer jobs in New York and 1,766 across the US. 3% of them nationwide are listed as remote or flexible.
Hiring the most in New York
Experience
This posting asks for at least 4 years of experience; Cybersecurity Engineer postings that state a minimum ask for 5 years at the median (1,636 postings).
Education
564 of the 1,766 open Cybersecurity Engineer jobs (32%) ask for a bachelor's degree or higher.

Counted across the open, public US postings on Olive Jobs on November 3, 2026. Pay medians are the middle values of the low ends and of the high ends of postings that list both ends of a range in the same cadence (a yearly salary or an hourly rate); a range's midpoint is halfway between its ends. Pay and experience figures resting on fewer than 20 postings are left out.

Prepare for this role

You've read the whole posting — now see how you match it.