Application Security Engineer
City of New York10 hours ago
New York, NY, USAMid Level
Responsibilities
- Execute application security assessments for web applications, APIs, and mobile systems under the Software Security Assurance Program.
- Perform SAST, DAST, and manual application security reviews; validate vulnerabilities, eliminate false positives, and prioritize findings by operational risk.
- Operate SCA tools to monitor and drive remediation of open-source and third-party component vulnerabilities.
- Conduct threat modeling and logic reviews during application design.
- Serve as a technical contact for agency development teams and provide remediation guidance and secure-coding advice.
- Configure and integrate automated security scanning tools into agency development pipelines.
- Review third-party vendor solutions and web APIs, including OAuth and REST implementations.
- Maintain secure-coding guidelines, application security documentation, and training materials.
Requirements
- Baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to the position, or equivalent education and experience.
- Experience with application security assessments, SAST, DAST, SCA, manual security reviews, threat modeling, and vulnerability remediation.
- Ability to work with agency developers and provide clear technical remediation guidance.
- Ability to work various shifts, including possible nights, evenings, and weekends, in a 24/7 operational environment.
Benefits
- Great benefits and the opportunity to work on projects with meaningful impact for millions of New Yorkers.
- Day shift in Brooklyn, NY, with possible nights, evenings, and weekend work due to 24/7 operational requirements.
Tech Stack
GitHub Actions
Categories
About City of New York
The City of New York is the municipal government for the five boroughs, delivering public services such as housing, social assistance, public safety, and digital tools for residents and businesses. It is publicly funded and operates agencies including the Department of Social Services (HRA and DHS) and the New York City Housing Authority. Headquartered in New York, NY, it builds and maintains large-scale systems supporting benefits eligibility, case management, housing, and civic services.