• Primarily responsible for application security assessments and code review as part of the software development lifecycle (SDLC). Scan for, analyze, and disposition of vulnerabilities.
• Provide regular status reports on the security of the software within the organization. Implement and govern automated secure coding tools and processes (SAST, DAST) to review code as it is written, promoted through the development lifecycle, and into production.
• Detect, analyze, and eliminate viruses and malicious code. Work with information security analysts to refine web application penetration testing methods and breadth of security services. Collect, analyze, triage, and disposition information from all threat sources.
• Develop processes to monitor active system users and their system usage for appropriateness, including but not limited to developing inappropriate access and usage scenarios, performing data matches and big data manipulation, and using appropriate tools.
• Assist with periodic security risk assessments, IT security audits, and management reporting. Help Build, maintain, and enforce application security development policies, procedures & standards.
• Maintain liaison with technical staff in federal agencies such as the Department of Homeland Security (DHS), state agencies such as the NYS Office of Temporary Disability and Assistance (OTDA), representatives of other networks and technical representatives of vendors of security software.
• Assist in official investigations by generating PC and application log data as well as internet activity history reports for the users in question, and scan computers for any unauthorized software or processes. Organize and develop responses to security audits requested by various internal and external entities.

Required Qualifications

​

• A baccalaureate degree from an accredited college, including or supplemented by twenty-four (24) semester credits in computer science or a related computer field and two (2) years of satisfactory full-time software experience in designing, programming, debugging, maintaining, implementing, and enhancing computer software applications, systems programming, systems analysis and design, data communication software, or database design and programming, including one year in a project leader capacity or as a major contributor on a complex project; or
• A four-year high school diploma or its educational equivalent and six (6) years of full-time satisfactory software experience as described above, including one year in a project leader capacity or as a major contributor on a complex project; or
• A satisfactory combination of education and experience that is equivalent to the above. College education may be substituted for up to two years of the required experience on the basis that sixty (60) semester credits from an accredited college is equated to one year of experience. A master’s degree in computer science or a related computer field may be substituted for one year of the required experience. However, all candidates must have a four year high school diploma or its educational equivalent, plus at least one (1) year of satisfactory full-time software experience in a project leader capacity or as a major contributor on a complex project.

​

Note:

To be eligible for placement in Assignment Level IV, in addition to the Qualification Requirements stated above, individuals must have one year of satisfactory experience in a project leader capacity or as a major contributor on a complex project in data administration, database management systems, operating systems, data communications systems, capacity planning, and/or on-line applications programming.

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.