IT Infrastructure Engineer

About the role

The IT Infrastructure Engineer reports directly to the Chief Information Security Officer (CISO) of the NYC Department of Citywide Administrative Services (DCAS). This role is responsible for protecting, monitoring, and enhancing the security posture of DCAS information systems, applications, networks, and cloud environments.

Key responsibilities

• Lead and coordinate cybersecurity incident response, digital forensics, malware analysis, threat hunting, containment, eradication, recovery, and post‑incident activities.
• Monitor and analyze security events, alerts, logs, and threat intelligence using SIEM, endpoint protection, cloud security, and monitoring platforms.
• Perform vulnerability assessments, risk analyses, remediation tracking, validation testing, and reporting across infrastructure, applications, cloud environments, and endpoints.
• Conduct cybersecurity audits, control assessments, risk reviews, and compliance evaluations aligned with NIST CSF, NIST SP 800‑53, CIS Controls, Zero Trust principles, and citywide policies.
• Develop and maintain cybersecurity policies, standards, procedures, playbooks, incident response plans, and operational documentation.
• Support Identity and Access Management initiatives and collaborate with city agencies, vendors, and stakeholders to improve cyber resilience.

Required profile

• Proven experience in incident response, digital forensics, threat detection, vulnerability management, and security operations.
• Strong knowledge of governance, risk, and compliance (GRC) frameworks and cybersecurity analytics.
• Ability to serve as a technical escalation point for security incidents and work with multiple city agencies and external partners.

Required skills

• SIEM platforms
• Endpoint protection solutions
• Cloud security tools
• Vulnerability assessment techniques
• Risk analysis and remediation tracking
• NIST Cybersecurity Framework (CSF)
• NIST SP 800‑53
• CIS Controls
• Zero Trust architecture
• Identity and Access Management (IAM)
• Digital forensics
• Malware analysis
• Threat hunting
• Incident response