Cybersecurity Engineer (Test & Evaluation)
Core
Conduct technical security testing including red teaming, penetration testing, and threat/adversary emulation against City agency systems to assess vulnerability exploitability and operational impact.
Role type
Senior IC cybersecurity engineer (red teaming & penetration testing)
Builds
Security testing artifacts, risk assessments, and remediation recommendations for NYC government agencies
Domain
Public sector cybersecurity / Government IT
Required skills
Penetration testing, Red teaming, Threat emulation, Vulnerability assessment, Risk analysis, Technical reporting, Control framework mapping (NIST/CIS), Threat intelligence analysis
Preferred skills
None stated
Technologies
None explicitly listed
Responsibilities
Plan and execute technical security assessments including penetration tests and red team engagements; Identify and validate vulnerabilities and assess real-world exploitability; Document findings and methodology in actionable testing reports; Evaluate technical validity of risk review submissions and test compensating controls; Translate technical findings for non-technical stakeholders; Analyze findings across engagements to identify systemic weaknesses; Map findings to control frameworks like CIS Controls and NIST; Maintain awareness of threat actor TTPs and incorporate threat intelligence; Contribute to improvement of testing methodologies and tooling
Seniority
Mid-level to Senior, hands-on IC
