Cyber Security Analyst

About the role

The Department of Citywide Administrative Services (DCAS) is seeking a Cyber Security Analyst to strengthen the security posture of New York City’s municipal IT environment. Reporting to the agency Chief Information Security Officer (CISO), you will act as a technical escalation point for security incidents and support enterprise‑wide security initiatives.

Key responsibilities

• Lead advanced incident response, digital forensics, and threat‑detection activities across DCAS networks, applications, and cloud platforms.
• Conduct vulnerability assessments, manage remediation efforts, and perform cybersecurity analytics to identify emerging risks.
• Develop, maintain, and enforce governance, risk, and compliance (GRC) policies aligned with NIST standards.
• Support change‑management and CI/CD pipelines to ensure security controls are integrated into development workflows.
• Coordinate cybersecurity awareness training, onboarding, and readiness programs for DCAS staff and partner agencies.
• Collaborate with City agencies, vendors, and stakeholders to improve cyber resilience and operational security.

Required profile

• Demonstrated experience in incident response, digital forensics, and threat detection within a large, complex IT environment.
• Strong understanding of vulnerability management, security analytics, and GRC frameworks.
• Familiarity with NIST security guidelines and cloud security best practices.
• Ability to work collaboratively with cross‑functional teams and external partners.

Required skills

• Incident response
• Digital forensics
• Threat detection
• Vulnerability management
• Cybersecurity analytics
• Governance, risk, and compliance (GRC)
• NIST standards
• CI/CD security integration
• Cloud security

What we offer

• Opportunity to protect critical city services and infrastructure.
• Collaboration with a diverse team of IT and security professionals.
• Professional development in a high‑impact public sector environment.