> Markdown version of [/jobs/ext/3023316-cyber-security-analyst](https://www.wearedevelopers.com/jobs/ext/3023316-cyber-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Security Analyst - **Company:** City of New York - **Location:** New York, NY, United States - **Experience:** Experienced - **Salary:** $115,000.0 - $141,180.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, JIRA, Microsoft Azure, Software as a Service, Cloud Computing Security, Cloud Engineering, CompTIA Security+, Cyber Security, Information Systems, Computer Networks, Continuous Integration, Digital Forensics, Multi-Factor Authentication, Identity and Access Management, Intrusion Detection and Prevention, Microsoft Security Essentials, OAuth, Software Maintenance, Role-Based Access Control, Openid Connect, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Security Information and Event Management, Software Vulnerability Management, Enterprise Software Applications, Cloud Platform System, GitHub Copilot, Software Security, Veracode, Malware, HybridCloud, Information Technology, SolarWinds (Software), Cybercrime, Github Enterprise, CIS Benchmarks, Appscan, Interactive Whiteboards, Surveymonkey, Qualys, Servicenow, Vulnerability Analysis - **Published:** September 21, 2026 - **Apply:** https://www.careerjet.com/job/usce23ee13e297981eed947be225763e89/eaa ## About the Role 1. A baccalaureate degree from an accredited college in computer science, engineering or a related field and four years of satisfactory full-time experience related to datacenter engineering and operations, cloud engineering and operations, complex IT infrastructure engineering; or, 2. A baccalaureate degree from an accredited college and eight years of satisfactory full-time experience related to datacenter engineering and operations, cloud engineering and operations, complex IT infrastructure engineering; or, 3. Education and/or experience which is equivalent to "1" or "2" above. Preferred Skills The preferred candidate will bring the following skills and experience to this position. - Experience with Qualys, Wiz, Rapid7, Veracode, HCL AppScan, Snyk, CrowdStrike, Microsoft Defender, SolarWinds SEM, ServiceNow, Jira, GitHub Enterprise Copilot Security, GitHub Copilot, BitSight, Security Scorecard, Shodan, or similar platforms. - Experience supporting Microsoft Entra ID (Azure AD), SAML 2.0, OAuth 2.0, OpenID Connect, Conditional Access, MFA, RBAC, and enterprise identity governance. - Experienced SaaS Security Support for Air Table, Miro, Canva, SurveyMonkey and similar Enterprise cloud-based applications. - Digital forensics, malware analysis, threat hunting, SIEM operations, threat. - Knowledge of digital forensics, malware analysis, threat hunting, SIEM operations, threat intelligence, and incident response methodologies. - Experience conducting cybersecurity audits, GRC assessments, risk reviews, and control testing. - Experience analyzing large datasets, cybersecurity metrics, trends, KPIs, and operational performance indicators. - Strong understanding of cloud security principles and enterprise application security. - Excellent written, verbal, presentation, and stakeholder management skills. - Ability to work independently, manage multiple priorities, providing technical leadership. - Industry certifications such as Microsoft Security and Compliance SC-900, Azure AZ-900, AWS Cloud Practitioner, Security+, CySA+, GCIH, GCFA, CISSP, CISM, CEH, or comparable. - Experience supporting public-sector, regulated, or large enterprise environments. Public Service Loan Forgiveness ## Description DCAS Information Technology works in conjunction with the NYC Office of Technology and Innovation (OTI) on the daily management and support of the DCAS computer network. DCAS IT team members are responsible for the agencies software and hardware needs, the development and maintenance of applications, maintenance of the DCAS internet and intranet (DCASConnect) sites, the DCAS Help Desk, telecommunications services and equipment for DCAS employees, and the Cyber Security program to thwart any attempts at unauthorized access to the network The Infrastructure Engineer reports directly to the agency Chief Information Security Officer (CISO), responsible for protecting, monitoring, and enhancing the infrastructure and security posture of NYC Department of Citywide Administrative Services information systems, applications, networks, and cloud environments. The position combines advanced incident response, digital forensics, threat detection, vulnerability management, cybersecurity analytics, governance, risk and compliance (GRC), and security operations functions. The role serves as a technical escalation point for cybersecurity incidents, supports enterprise security initiatives, conducts cybersecurity assessments and audits, develops policies and procedures, and collaborates with City agencies, vendors, and stakeholders to improve cyber resilience and operational security. - Assist the Agency CISO in ensuring cybersecurity-related change management and CI/CD processes align with NIST separation of duties requirements. - Support the CISO with agency cyber awareness training, security onboarding and readiness assurance, and knowledge transfer for cloud-based applications. - Lead and coordinate cybersecurity incident response, digital forensics, malware analysis, threat hunting, containment, eradication, recovery, and post-incident activities. - Monitor and analyze security events, alerts, logs, and threat intelligence using SIEM, endpoint protection, cloud security, and monitoring platforms. - Perform vulnerability assessments, risk analyses, remediation tracking, validation testing, and reporting across infrastructure, applications, cloud environments, and endpoints. - Conduct cybersecurity audits, control assessments, risk reviews, and compliance evaluations aligned with NIST CSF, NIST SP 800-53, CIS Controls, Zero Trust principles, and Citywide cybersecurity policies. - Develop and maintain cybersecurity policies, standards, procedures, playbooks, incident response plans, and operational documentation. - Support Identity and Access Management (IAM) operations, including SSO, MFA, RBAC, access reviews, provisioning, deprovisioning, and privileged access governance. - Analyze cybersecurity metrics, trends, vulnerabilities, incidents, and operational performance indicators; develop executive-level reports and recommendations. - Partner with internal technology teams, application owners, vendors, City agencies, and external partners to improve cybersecurity capabilities and remediation outcomes. - Support cloud security reviews, application security assessments, secure application onboarding, and software security initiatives. - Provide technical leadership, mentoring, and guidance to junior cybersecurity staff and cross-functional stakeholders. - Assist with audit readiness, evidence collection, regulatory compliance activities, and cybersecurity governance initiatives. - Research emerging threats, technologies, attack techniques, and industry best practices to strengthen defensive capabilities. ## Related Videos - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)