> Markdown version of [/jobs/ext/2281066-information-security-specialist](https://www.wearedevelopers.com/jobs/ext/2281066-information-security-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Specialist

- **Company:** The Federal Reserve Bank
- **Location:** New York, NY, United States
- **Salary:** $93,600.0 - $99,840.0
- **Contract:** Temporary contract
- **Skills:** Agile Methodology, Software as a Service, Cloud Computing, Cyber Security, Information Systems, Continuous Integration, Software Engineering, Software Vulnerability Management, Cloud Migration, Devsecops
- **Published:** August 28, 2026
- **Apply:** https://www.jofdav.com/jobs/59418364-information-security-specialist

## About the Role

* Background in application development with focus on security control implementation is key to be successful in this role.
 * Ability to review application code and assist developers with vulnerability remediation including in depth issue contextualization.
 * Experience in executing assessments in the Cloud and against third party SaaS solutions.
 * Knowledge of performing risk management based on NIST 800-53.
 * Experience in determining vulnerability risk impact on key objectives and critical processes; ability to link risk management programs and initiatives to inform critical business strategies and processes.
 * Experience in thriving in the DevSecOps culture and working closely with developers on delivering business value in agile quick release environment.
 * Demonstrated leadership experience, managing projects, strong decision making and execution abilities.
 * Strong experience managing and timely resolving security findings in the Agile management practice.
 * Application security testing skills supporting CI/CD pipeline.
 * Experience evaluating 3rd party vendors supporting Banks processes with focus on date protection.
 * Proven ability evaluating and securing Gen AI systems with internal and embedded models.
 * Possession of or the ability to obtain and maintain National Security Clearance, which includes U.S. Citizenship when required

## Description

Information Security New York (ISNY) is responsible for developing, executing, and maintaining a superior information security program that promotes resiliency by identifying and mitigating cyber risks and threats through risk-based consultation, advice, and direction for controls, designs, and investments for the entire Bank.

Within Information Security, the Cyber Security Assurance Department (CSA) is responsible for assessing risks associated with 3rd party vendors systems, software, IoT devices, ICS, technology processes, or outsourcing arrangements handling, processing, or storing Federal Reserve data. The team works directly with the business, providing guidance and managing risks. The department is also responsible for the integration of security practices into DevSecOps methodology, performing application security testing and working directly on security tooling integration as part of the CI/CD pipeline. The engagement and guidance to the product development teams are implemented through CSA analysts being embedded in the development squads to provide security advice during development and by managing the Security Champion Program in the Bank ensuring each product team has developers trained in security matters.

How You'll Make an Impact as a Cyber Security Assurance Analyst

You will work in a dynamic team environment and play an important role in helping the Federal Reserve carry out its responsibilities. The Cyber Security Risk Analyst will be responsible for risk assessments, Cloud mitigations, security application testing, thread modeling security design review and overall information systems risk management. The role is an individual contributor who will work closely with technology squads to flawlessly deliver technological projects to the business customers. The candidate will be required to perform risk assessments which include application security testing focusing on Cloud migration workloads with specific focus on the mission critical systems supporting Markets operations. The position resides in the Information Security Function and reports to Cyber Security Assurance Manager.

Role's objectives are:

 * Perform Cloud application security risk assessments.
 * Execute assessments timely and accurately.
 * Manage relationship with the business unit assigned.
 * Embed within the development squad to provide timely security advice.
 * Preform application security testing ensuring only compliant workloads move to the Cloud.
 * Support development squads in implementing security tooling in the CI/CD pipeline.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)