Cybersecurity Engineer (Application Security)
Core
Safeguard city digital infrastructure by identifying and mitigating security risks in software applications through the Software Security Assurance Program (SSAP).
Role type
Application Security Engineer (IC)
Builds
Secure software applications and third-party components for over 100 NYC agencies
Domain
Public sector cybersecurity / Application security
Required skills
SAST, DAST, Software Composition Analysis (SCA), secure coding practices, cloud vendor security reviews, OWASP guidelines, NIST/CIS compliance frameworks
Preferred skills
Mentorship, training development, emerging threat analysis
Technologies
SAST tools, DAST tools, SCA tools, cloud platforms
Responsibilities
Execute SSAP to ensure applications meet security standards prior to deployment; Perform SAST and DAST security testing to identify vulnerabilities; Utilize SCA tools to track third-party component vulnerabilities; Serve as liaison between developers and security teams; Review cloud vendor applications for compliance; Provide guidance and training materials on secure coding standards; Maintain security documentation and compliance frameworks; Participate in team mentorship; Handle special projects
Seniority
Mid-level, hands-on IC with mentorship
