> Markdown version of [/jobs/ext/4164987-cybersecurity-engineer-level-7](https://www.wearedevelopers.com/jobs/ext/4164987-cybersecurity-engineer-level-7). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Engineer Level 7 - **Company:** Metropolitan Transportation Authority - **Location:** New York, NY, United States (Remote available) - **Experience:** Expert - **Salary:** $145,145.0 - $191,594.0 - **Contract:** Internship / Graduate position - **Skills:** Data Analysis, Cloud Computing, Cyber Security, Information Systems, Computer Programming, System Configuration, Disaster Recovery, Middleware, Perl (Programming Language), Monitoring of Systems, Interoperability, OSI Models, Python (Programming Language), Windows PowerShell, System Testing, TCP/IP, Scripting, Mitre Att&ck, Cyber Threat Analysis, Operational Systems, Network Server - **Published:** October 21, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=3d89bc69c2689ccd ## About the Role * Bachelor's Degree in Arts/Sciences (BA/BS). Combination of education and experience may be considered in lieu of a degree * Minimum 10 years of relevant technology-based or cybersecurity experience or experience in a specific cybersecurity subdomain (Cloud, Applications, Infrastructure, Security Technology, etc.). * Minimum 5 years. Must possess at least two of the following professional certifications in the subject domain, including but not limited to: Certified Information Security Professional (CISSP), Global Information Assurance Certification (GIAC), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or Certified Information Systems Auditor (CISA), or other related certification(s), Specialized knowledge and expertise on tools, programs, domains, platforms, and products used for specific tasks Tech Savvy Expert Anticipating and adopting innovations in business-building digital and technology applications Communicates Effectively Expert Developing and delivering multi-mode communications that convey a clear understanding of the unique needs of different audiences ## Description The purpose of this position is to provide technical expertise in managing and analyzing cybersecurity risks. Cybersecurity Engineer will be responsible for design, building and maintaining infrastructure, applications technology to support a secure cybersecurity posture. These include systems that support cybersecurity directly and/or the business operations for Information and Operational Technology disciplines. Secure building and configuration of systems (applications, infrastructure, wireless, carrier systems, cloud, operational technology, IOT, etc.) from the outset reduces risk to MTA. Specialized and focused skillets in various technology domains assist with the overall risk reduction for the MTA. The configuration, hardening, guidance, response, and analysis of these systems aide in reduction and containment of Cyber Security risk. Risk assessments, data analytics tools, operational process reviews, and collaboration with security engineers, architects, developers, vendors, business units to constantly improve the overall security of the MTA The position will have seven (7) levels (including an internship level) which will require a combination of progressive experience, accomplishments, responsibilities, and/or education and may perform all or some of the responsibilities listed below depending on level. Responsibilities: * Researching emerging threats and vulnerabilities to aid in the identification of network incidents, and support the creation of new architecture, policies, standards, and guidance to address them * Knowledge and practical implementation of secure system configuration and hardening standards * Design, configure, and integrate secure solutions in the technology domains assigned * Provide incident response support, including mitigating actions to contain activity and facilitating forensics analysis, system hardening, and recovery when necessary * Provides installation, system configuration, hardening and optimization for infrastructure, application, and security components and systems such as servers, workstations, mobile devices, directory services, operating systems, middleware, IOT, web and next generation firewalls, machine and human behavior learning tools, host-based security system, security event and incident monitoring systems, virtual, physical, and cloud platforms. * Identifies configuration gaps independently and/or with vendors to reduce cybersecurity risks * Reviews alerts and data from sensors and documents formal, technical incident reports * Tests new systems and manage cybersecurity risks and remediation system testing, baseline, and best practices * Responds to computer security incidents according to the computer security incident response policy and procedures * Provides technical guidance to first responders for handling information security incidents * Provides timely and relevant updates to appropriate stakeholders and decision makers * Communicates investigation findings to relevant business units to help improve the information security posture * Validates and maintains incident response plans and processes to address potential threats * Compiles and analyzes data for management reporting and metrics * Monitors relevant information sources to stay up to date on current attacks and trends * Analyzes potential impact of new threats and communicates risks back to detection analyst, architect, technology SME, and management functions * Performs root-cause analysis to document findings, and participates in root-cause elimination activities as required * Uses judgment to form conclusions that may challenge conventional wisdom * Hypothesizes new threats and indicators of compromise * Monitors threat intelligence feeds to identify a range of threats, including indicators of compromise and advanced persistent threats (APTs) * Identifies the tactics, techniques and procedures (TTPs) of potential threats through the MITRE ATT&CK or similar frameworks * Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures) under the direction of the IT Security Manager, where appropriate. * Performs other duties as assigned * Complies with all policies and standards * May be required to work hours outside regular work hours, as applicable * Observes the work performed by contractors, as applicable * Reviews invoices and approves them if the work has contractual standards, as applicable * Addresses performance issues with the contractor when possible, as applicable * Escalates issues to other parties when needed, as applicable, * Researching emerging threats and vulnerabilities to aid in the identification of network incidents, and supports the creation of new architecture, policies, standards, and guidance to address them * Knowledge and practical implementation of secure system configuration and hardening standards * Design, configure and integrated secure solutions in the technology domains assigned * Provide incident response support, including mitigating actions to contain activity and facilitating forensics analysis, system hardening and recovery when necessary * Provides installation, system configuration, hardening and optimization for infrastructure, application, and security components and systems such as servers, workstations, mobile devices, directory services, operating systems, middleware, IOT, web and next generation firewalls, machine and human behavior learning tools, host-based security system, security event and incident monitoring systems, virtual, physical, and cloud platforms. * Identifies configuration gaps independently and/or with vendors to reduce cybersecurity risks * Reviews alerts and data from sensors and documents formal, technical incident reports * Tests new systems and manage cybersecurity risks and remediation system testing, baseline, and best practices * Responds to computer security incidents according to the computer security incident response policy and procedures * Provides technical guidance to first responders for handling information security incidents * Provides timely and relevant updates to appropriate stakeholders and decision makers * Communicates investigation findings to relevant business units to help improve the information security posture * Validates and maintains incident response plans and processes to address potential threats * Compiles and analyzes data for management reporting and metrics * Monitors relevant information sources to stay up to date on current attacks and trends * Analyzes potential impact of new threats and communicates risks back to detection analyst, architect, technology SME, and management functions Performs root-cause analysis to document findings, and participate in root-cause elimination activities as required * Uses judgment to form conclusions that may challenge conventional wisdom * Hypothesizes new threats and indicators of compromise * Monitors threat intelligence feeds to identify a range of threats, including indicators of compromise and advanced persistent threats (APTs) * Identifies the tactics, techniques and procedures (TTPs) of potential threats through the MITRE ATT&CK or similar frameworks * Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures) under the direction of the IT Security Manager, where appropriate. * The role will provide a proactive approach to cybersecurity while also performing investigation of security incidents related to MTA operations related to Cyber Security. * Acts as a technical resource for multiple technologies, with vast knowledge of the capabilities and constraints of technologies supported to continually improve system effectiveness and efficiency. * Demonstrates a strong understanding of the current and future technology architecture, including the interoperability of technologies to effectively integrate MTA systems and support the long-term strategies of the business. * Provides guidance and training to the IT community to maximize and share learning. * Analyzes cross-technology/platform issues and addresses problems factoring in an understanding of the current and future architectures to ensure optimal performance and reliability across systems. * Leads the evaluation of new technologies relative to their domain(s) to determine applicability to and best meet the needs of MTA and constituent agencies. * Proposes technology investments supported by a thorough technical analysis and business case. * Develops disaster recovery and contingency plans for their domain(s) to provide users with minimal interruptions in service. * Creates complete RFPs and RFIs and negotiates contract terms and conditions with vendors and procurement in consideration of the needs of the business. * Interacts with major providers at the technical expert level to address mission critical issues, evaluates ongoing vendor service level and enforces SLAs and penalties. * Establishes systems to monitor compliance with architectural standards and to ensure technical integrity. * Significant practical expertise in cybersecurity-related disciplines * Requires seasoned expertise in multiple security domains, technologies and strong understanding of the current and future technology and security architecture, including the inter-operability of security solutions and technologies. * Requires proven track record of successful implementation of architectural designs. * Requires proven track record in configuration and hardening of systems * Expert ability to conduct and analyze a security risk assessment * Expert understanding of TCP/IP (OSI Layers 1- 4) and Internet and Intranet technologies required (OSI Layers 5-7). * Some scripting or programming skills (PERL, Python, PowerShell, etc.) preferred as needed Critical Skills: * Serves as a multi-technology technical authority with expert knowledge of OT, security architecture, and cross-system interoperability. * Shapes long-term technology strategy, ensuring secure integration of enterprise and operational systems. * Provides specialized guidance, mentorship, and training across the IT and OT security community. * Evaluates emerging technologies, identifying applicability, operational risks, and strategic impact; develops technical business cases for investment. * Develops domain specific disaster recovery and resilience strategies to minimize service interruptions. * Authors comprehensive technical procurement documents (RFPs/RFIs) and leads contract discussions with vendors and procurement teams. * Engages at the expert level with major service providers, manages mission critical issues, and enforces technical service level commitments. * Establishes compliance monitoring systems to ensure alignment with architectural standards and security best practices. * Oversees project performance, reviews deliverables, and escalates issues as appropriate.