Cybersecurity Engineer Level 7

The Cybersecurity Engineer Level 7 role provides technical leadership to assess, manage, and reduce cybersecurity risk across IT and OT environments. The position focuses on designing, building, and maintaining secure infrastructure and applications technology to support a strong security posture.

Role Summary

The Cybersecurity Engineer Level 7 delivers technical expertise to identify and analyze cybersecurity risks. The role designs, configures, and maintains secure solutions, and supports incident response activities to strengthen the organization’s security posture across IT and OT domains.

Responsibilities

• Research emerging threats and vulnerabilities to support identification of network incidents, and contribute to new architecture, policies, standards, and guidance.
• Apply secure system configuration and hardening standards using practical implementation.
• Design, configure, and integrate secure solutions within assigned technology domains.
• Provide incident response support, including containment actions and facilitating forensics analysis, as well as system hardening and recovery when necessary.
• Perform installation, configuration, hardening, and optimization for infrastructure, application, and security components and systems, including servers, workstations, mobile devices, directory services, operating systems, middleware, IoT, web and next generation firewalls, machine and human behavior learning tools, host-based security systems, security event and incident monitoring systems, and virtual, physical, and cloud platforms.
• Identify configuration gaps independently and/or with vendors to reduce cybersecurity risk.
• Review alerts and sensor data and document formal technical incident reports.
• Test new systems while managing cybersecurity risk, including remediation system testing, baseline activities, and best practices.
• Respond to computer security incidents according to the computer security incident response policy and procedures.
• Provide technical guidance to first responders handling information security incidents.
• Provide timely and relevant updates to appropriate stakeholders and decision makers.
• Communicate investigation findings to relevant business units to improve the information security posture.
• Validate and maintain incident response plans and processes to address potential threats.
• Compile and analyze data for management reporting and metrics.
• Monitor relevant information sources to stay current on attacks and trends.
• Analyze potential impact of new threats and communicate risks to detection analysts, architects, technology SMEs, and management.
• Conduct root-cause analysis, document findings, and participate in root-cause elimination activities as required.
• Use judgment to reach conclusions that may challenge conventional wisdom, including hypothesizing new threats and indicators of compromise.
• Monitor threat intelligence feeds to identify threats, including indicators of compromise and advanced persistent threats (APTs).
• Identify potential threat tactics, techniques, and procedures (TTPs) using MITRE ATT&CK or similar frameworks.
• Support development of enterprise security documents (policies, standards, baselines, guidelines, and procedures) under direction of the IT Security Manager, where appropriate.
• Comply with all policies and standards.
• May require work hours outside regular hours, as applicable.
• Observe contractor work, as applicable, and review invoices for contractual standards, approve when applicable, and address contractor performance issues when possible.
• Escalate issues to other parties as needed.
• Provide guidance and training to the IT community to maximize and share learning.
• Act as a technical resource across multiple technologies to improve system effectiveness and efficiency.
• Demonstrate understanding of current and future technology architecture, including interoperability needed to integrate MTA systems and support business long-term strategies.
• Create complete RFPs and RFIs and negotiate contract terms and conditions with vendors and procurement based on business needs.
• Interact with major providers at the technical expert level to address mission critical issues, evaluate vendor service levels, and enforce SLAs and penalties.
• Establish systems to monitor compliance with architectural standards and ensure technical integrity.
• Lead evaluation of new technologies in assigned domains to determine applicability and best meet MTA and constituent agency needs.
• Propose technology investments supported by technical analysis and a business case.
• Develop disaster recovery and contingency plans for assigned domains to minimize service interruptions for users.
• Perform installation, configuration, hardening, and optimization for infrastructure, application, and security components and systems, including servers, workstations, mobile devices, directory services, operating systems, middleware, IoT, web and next generation firewalls, machine and human behavior learning tools, host-based security systems, security event and incident monitoring systems, and virtual, physical, and cloud platforms.

Required Qualifications

• Bachelor’s Degree in Arts/Sciences (BA/BS). Combination of education and experience may be considered in lieu of a degree.
• Minimum 10 years of relevant technology-based or cybersecurity experience, or experience in a specific cybersecurity subdomain (Cloud, Applications, Infrastructure, Security Technology, etc.).
• Minimum 5 years. Must possess at least two professional certifications in the subject domain, including but not limited to: CISSP, GIAC, CISM, CRISC, CISA, or other related certifications.
• Some scripting or programming skills (PERL, Python, PowerShell, etc.) preferred.
• Expert ability to conduct and analyze a security risk assessment.
• Expert understanding of TCP/IP (OSI Layers 1–4) and Internet and Intranet technologies (OSI Layers 5–7).
• Proven track record of successful implementation of architectural designs.
• Proven track record in configuration and hardening of systems.

Technologies

• PERL
• Python
• PowerShell
• MITRE ATT&CK
• TCP/IP
• OSI Layers 1-4
• OSI Layers 5-7
• IoT
• APTs

Compensation and Location

• Salary range: USD 145,145 - 191,594 per year
• Location: New York, NY, United States (hybrid)

Telework Eligibility

• Teleworking is eligible at one day per week.
• New hires may apply 30 days after their effective date of hire.

Other Information

• Pursuant to the New York State Public Officers Law and the MTA Code of Ethics, employees who hold a policymaking position must file an Annual Statement of Financial Disclosure (FDS) with the NYS Commission on Ethics and Lobbying in Government.

Equal Employment Opportunity

• MTA and its subsidiary and affiliated agencies are Equal Opportunity Employers, including with respect to veteran status and individuals with disabilities.
• MTA encourages qualified applicants from diverse backgrounds, experiences, and abilities, including military service members, to apply.