New York

Cybersecurity Jobs in New York

60 jobs found

Include remote jobs

Today

Medical Device Cybersecurity Specialist

Premier Global Links New York, NY

New York, NY

Today

$90k - $100k/yr Full time Cybersecurity Tools Incident Response Information Security

Apply Now

Job Description

Premier Global Links LLC is seeking a Clinical Engineering Cybersecurity Specialist / Medical Device Cybersecurity Specialist to help implement and execute a medical device cybersecurity program for a hospital in Far Rockaway, NY. The role blends biomedical and clinical engineering work with healthcare IT, risk management, and regulatory compliance to improve how connected medical devices are protected.

This position is based in New York, NY and is onsite, with a salary range of USD 90,000 to 100,000 per year. You will bring at least 3 years of relevant experience and a bachelor’s degree in a relevant field or equivalent professional experience.

Responsibilities

Lead the collection of critical cybersecurity data elements (CDEs) and manufacturer documentation in CMMS platforms.
Conduct cybersecurity risk assessments for medical devices using asset information and manufacturer guidance.
Configure medical devices in alignment with cybersecurity standards and manufacturer requirements.
Own planned and unplanned vulnerability remediation, including patching, upgrades, and responses to zero-day threats.
Coordinate cybersecurity activities with medical device manufacturers and healthcare IT teams.
Investigate cybersecurity alerts involving medical devices and analyze high- and critical-risk vulnerabilities.
Develop recommendations for vulnerability response and remediation.
Support testing and validation of network segmentation controls in coordination with hospital IT.
Track and report vulnerability remediation activities, cybersecurity metrics, and key performance indicators.
Maintain the quality and accuracy of cybersecurity asset data and documentation in CMMS.
Identify opportunities to improve cybersecurity practices across Clinical Engineering / HTM and IT teams.
Support cybersecurity education and awareness for HTM teams and coach BMETs on basic cybersecurity practices.
Support healthcare IT projects that affect connected medical devices.
Participate in cybersecurity industry workgroups and professional forums.
Support hospital cybersecurity audits and compliance activities involving HIPAA and Joint Commission requirements.

Requirements

Bachelor’s degree in a relevant field or equivalent professional experience.
3+ years of relevant functional experience.
Previous biomedical/biomed or clinical engineering experience, or equivalent hands-on experience working with medical devices.
Healthcare cybersecurity experience.
Experience with medical device cybersecurity, connected medical devices, or healthcare technology environments.
Knowledge of CMMS platforms and medical device asset management.
Understanding of cybersecurity frameworks such as NIST and ISO.
Knowledge of applicable healthcare cybersecurity and regulatory requirements, including FDA, HIPAA, and Joint Commission standards.
Strong technical analysis, problem-solving, communication, and project leadership skills.
Valid driver’s license with an acceptable driving record.

Technologies

CMMS
NIST
ISO
FDA
HIPAA
Joint Commission

Benefits

Medical, dental, and vision coverage
Wellness programs
401(k) with matching contributions
Paid time off and company holidays
Career development opportunities
Tuition reimbursement

Preferred Qualifications

CISSP
HCISPP
CEH
CompTIA Security+
Additional medical device cybersecurity or healthcare IT certifications

View full job page →

Today

Senior Associate, Cybersecurity & Data Privacy

Ankura New York, NY 🇺🇸 Remote

New York, NY

Today

$90k - $120k/yr Full time Manager Ad Tech Compliance Ccpa

Apply Now

Job Description

Lead privacy technology and systems integration work for clients, translating privacy compliance requirements into practical automation, consent, and data protection implementation.

Responsibilities

Assess clients’ current ad tech practices and identify privacy compliance gaps tied to applicable regulations
Implement changes across ad tech technologies to operationalize compliance strategies
Design and deploy data protection by design methodologies across the SDLC, covering requirements, elicitation, design, implementation, testing, deployment, and ongoing administration and maintenance
Develop methodologies to help clients apply consent models to cookies, pixels, beacons, and other tracking technologies for websites and mobile applications
Create and deploy website scanning strategies and technologies; recommend and implement technical measures to support consent and preference management obligations
Support Privacy Technology engagement delivery, including integrations and configurations, privacy by design, SDLC integration, privacy source code analysis, website and application compliance, and Privacy Technology training and adoption
Act as a key system architect for API and system integrations that use privacy tools
Monitor and troubleshoot integration issues to protect system reliability and performance
Conduct in-depth analyses of network traffic using advanced network scanning tools
Produce documentation that maps and describes data flows between systems and technologies
Coordinate engagement work with team members, subject matter experts, external counsel, and client contacts
Create project status summaries, reports, metrics, written analyses, assessments, and presentation materials
Create and maintain policies and procedures to support compliance with various regulations
Participate in and lead internal and external meetings, including client assessments, presentations, and status discussions
Manage time and tasks to meet internal and client deadlines
Develop standardized metrics, methodologies, and other work products delivered by client project teams
Stay current on industry trends and best practices in system architecture, automation, and integration

Requirements

Bachelor’s degree with solid academic performance
3+ years of relevant experience in consulting or industry-specific work
Knowledge and experience producing and managing privacy deliverables including Data Inventory, DPIA, PIA, Third-party Risk, Incident Response, Data Subject Access Rights, Tracking Technologies, Consent, Privacy Policy, and VRMs
Experience with tag management systems and marketing tools such as Google Tag Manager and Google Analytics
Knowledge of internet protocol layers with a holistic view of network security and performance
Deep knowledge of privacy regulations and frameworks and how to implement them in practice (GDPR, CCPA, HIPAA)
Proven record leading and managing privacy consultants or professionals
Excellent communication and interpersonal skills, including the ability to explain complex privacy concepts to non-technical stakeholders
Strong analytical and problem-solving skills to identify privacy risks and develop practical solutions
Certified Information Privacy Professional (CIPP) and/or OneTrust certifications (preferred)
Ability to travel as required
Must be currently authorized to work in the United States without visa sponsorship now or in the future

Technologies

Google Tag Manager
Google Analytics
GDPR
CCPA
HIPAA

Role Location and Work Arrangement

Remote in the United States
Location: New York, NY

Compensation

Base salary estimate: USD 90,000 to 120,000 per year
Estimated range is not a promise of a particular wage
Hiring is not typical at or near the top of the range; compensation depends on role facts and circumstances
Range excludes additional benefits outside salary

Equal Opportunity: Ankura is an Affirmative Action and Equal Opportunity Employer.

Tags: #LI-KW1, #LI-hybrid

View full job page →

1d ago

Security Engineer (GRC)

Whatnot New York, NY

New York, NY

1d ago

$175k - $230k/yr Full time Manager Cloud Platforms Data Security

Apply Now

Job Description

This hybrid Security GRC role at Whatnot focuses on secure configuration reviews, audit readiness, and a risk management program aligned to industry standards.

Responsibilities

Review and implement secure configurations across tools including Okta, Terraform, AWS, Lumos, Cloudflare, and GitHub
Develop security requirements for partner teams and drive progress toward execution of those requirements
Prepare for and run external security audits
Help shape the strategic direction of the Security GRC team
Lead the security risk management program to prioritize security risks and ensure appropriate mitigations are implemented

Requirements

5+ years of relevant experience in security governance, risk, and compliance, preferably in a tech startup environment
Bachelor’s degree in Computer Science, Information Security, or a related field
Deep knowledge of security best practices and industry standards, including ISO 27001, SOC 2, PCI, and GDPR/CCPA
Experience at a Big 4 firm or a similar reputable audit firm
Experience supporting complex third-party audit projects in a cloud-centric environment, with an ability to understand emerging technologies to meet regulatory and compliance needs
Excellent written communication skills to document, communicate, and report security assessments and the status and effectiveness of cybersecurity controls with product and business leaders
Experience creating and running a security risk management program that balances security risks with business priorities

Technologies

Okta, Terraform, AWS, Lumos, Cloudflare, GitHub
ISO 27001, SOC 2, PCI, GDPR, CCPA

Benefits

Generous Holiday and Time off Policy
Health insurance options: Medical, Dental, Vision
Work From Home Support
Home office setup allowance
Monthly allowance for cell phone and internet
Care benefits
Monthly allowance for wellness
Annual allowance towards Childcare
Lifetime benefit for family planning, such as adoption or fertility expenses
Retirement: 401k offering for Traditional and Roth accounts in the US (employer match up to 4% of base salary) and Pension plans internationally
Monthly allowance to dogfood the app
Parental Leave
16 weeks of paid parental leave plus one month gradual return to work

Role Details

Location: New York, NY (hybrid)
Salary: USD 175,000 - 230,000 per year
Commuting requirement: must be within commuting distance of one of the hubs: Los Angeles, CA, San Francisco, CA, Seattle, WA, or New York, NY

View full job page →

1d ago

Cyber Security Analyst

CONSUMER AND WORKER PROTECTION New York, NY

New York, NY

1d ago

$92k - $132k/yr Full time Cloud Platforms Cybersecurity Tools Endpoint Security

Apply Now

Job Description

DCWP is hiring a Cyber Security Analyst Level II to help defend agency information technology against cybersecurity incidents and support implementation of cybersecurity policies, standards, directives, and guidelines. The role is based in New York, NY and works closely with NYC OTI and ITOPS.

Key Responsibilities

Under supervision, assist DoTSS in liaising with the NYC Office of Technology and Innovation (OTI) by helping ensure DCWP mitigates security threats in a timely manner.
Respond to alerts and events that could impact the Agency’s information technology security posture while maintaining a proactive stance.
Characterize and analyze network traffic and server or cloud performance metrics to identify anomalous activity and potential threats.
Complete appropriate patching across multiple systems, including workstations, servers, and network equipment such as switches, voice gateways, and routers.
Analyze malicious activity to determine the means, methods, and details of exploitations against agency systems and applications.
Evaluate commercial software in coordination with OTI for safe use by NYC DCWP.
Guide ITOPS in reimage and restore activities to return devices and equipment to previous known good states after an incident.
Validate, analyze, investigate, and mitigate reported trouble tickets or incidents from OTI.
Follow up to ensure DCWP staff take and follow Cyber Security Training.
Support secure development: ensure new software (including COTS and on-prem or cloud-based CRM) is developed following citywide security standards and protocols, and that it passes through SDLC and security accreditation from OTI.
Follow up on incident reports and application scan reports to ensure proper mitigation occurs in a timely manner.
Conduct network monitoring and intrusion detection analysis using tools such as intrusion detection or prevention systems, firewalls, and host-based security systems; review and adjust ACL based on source, destination, and port requirements.
Perform log-based and endpoint-based threat detection to protect against threats from multiple sources.
Correlate activity across assets and environments (on-premises and cloud) to identify patterns of anomalous or suspicious activity.
Support business continuity and disaster recovery planning, including conducting disaster recovery tests, publishing results, and applying changes to address deficiencies.
Research emerging threats and vulnerabilities to support identification of incidents.
Provide incident response support to users, including actions to contain activity and support forensic analysis when necessary.
Perform security standards testing against computers and IT equipment prior to implementation to confirm security standards are met.
Coordinate with OTI and ITOPS on providing IT inventory, performing DCWP security audits, and coordinating Comptroller and Criminal Justice Information Security (CJIS) directive audits.

Required Qualifications

Baccalaureate degree from an accredited college including or supplemented by 24 semester credits in specified cyber/security/IT areas; or
Four-year high school diploma or equivalent approved by a State department of education or recognized accrediting organization, plus three years of satisfactory experience in relevant areas; or
Education and/or experience equivalent to the above. College education may substitute for up to two years of required experience as described: 60 semester credits equals one year of experience. Additionally, 24 credits in specified areas from an accredited college or graduate school may be applied as described.

Tools and Technologies

Intrusion detection or prevention systems, firewalls, and host-based security systems
COTS, on-prem, and cloud-based CRM
SDLC
ACL
IS0 27000-1, IS0 27000-2
COBIT
NIST 800-53, NIST 800-171
CISSP, CISA, CISM
Delinea, Centrify
CISA Binding Operational Directives
Trellix, McAfee, CrowdStrike, Rapid7
Azure
CJIS

Program and Compliance Information

55-a Program: The position is also open to qualified persons with a disability eligible for the 55-a Program. Indicate at the top of your resume and cover letter that you would like to be considered through the 55-a Program.
Public Service Loan Forgiveness: As a City of New York prospective employee, you may be eligible for federal loan forgiveness programs and state repayment assistance. See https://studentaid.gov/pslf/ for more information.
Residency requirement: New York City residency is generally required within 90 days of appointment. City employees in certain titles who have worked for the City for 2 continuous years may be eligible to reside in Nassau, Suffolk, Putnam, Westchester, Rockland, or Orange County. Discuss with the agency representative at the time of interview to determine applicability.

Location and Compensation

Location: New York, NY (onsite)

Salary: USD 91,566 to 131,664 per year

Minimum Experience: 3 years

View full job page →

1d ago

Security Engineer

MANATT, PHELPS & PHILLIPS LLP New York, NY

New York, NY

1d ago

$80k - $100k/yr Full time Cybersecurity Tools Edr Mdr Endpoint Security

Apply Now

Job Description

Manatt, Phelps & Phillips LLP is seeking a Security Engineer to support and strengthen the firm’s Information Technology security operations. This hybrid role in New York, NY focuses on maintaining security controls, aiding incident response, and helping teams adopt secure practices across the organization.

Reporting into the firm’s security operations, you will help establish and enforce security policies while operating and improving the tools that protect the enterprise environment.

Responsibilities

Establish, monitor, and enforce security policies, procedures, and controls across the firm’s Information Technology environment.
Implement, administer, and maintain security infrastructure and tools, including endpoint protection, detection and response platforms, vulnerability management solutions, and related security controls.
Investigate security alerts, determine root cause, and coordinate timely remediation with appropriate stakeholders.
Monitor security risk trends and recommend updates to policies, practices, and tools to address evolving threats.
Coordinate additional protective measures, including targeted system scans and follow-up remediation as needed.
Partner with IT and business teams to provide practical security guidance and support secure technology use.
Support security awareness initiatives, including employee orientation, training, and ongoing guidance.
Maintain critical access information and related security records in accordance with firm procedures.
Perform other duties as assigned.

Requirements

5+ years of Information Technology security experience in a Microsoft Windows and enterprise environment.
Hands-on experience with CrowdStrike Falcon, including endpoint monitoring, threat detection, incident investigation, and response.
Experience implementing, administering, or monitoring Endpoint Detection and Response (EDR) and Managed Detection and Response (MDR) solutions.
Working knowledge of security monitoring, threat hunting, vulnerability management, and incident response best practices.
Minimum of 2 years of network security experience.
Strong written and verbal communication skills, with the ability to explain security concepts clearly to technical and non-technical audiences.
Strong organizational skills, attention to detail, and ability to manage competing priorities.
Ability to work independently with limited supervision while contributing effectively in a collaborative team environment.
Reliability and flexibility to work in a hybrid remote and in-office environment as business needs require.
Proficiency with Microsoft Office.
Hands-on experience with Microsoft Security technologies, including Microsoft Defender XDR, Microsoft Defender for Endpoint, Microsoft Sentinel, Microsoft Entra ID, and Microsoft Purview preferred.
Bachelor’s degree in Information Systems, Cybersecurity, or a related field preferred.
CISSP, GIAC, Microsoft Security, or other relevant cybersecurity certifications are a plus.

Technology Stack

Microsoft Windows
CrowdStrike Falcon
Endpoint Detection and Response (EDR)
Managed Detection and Response (MDR)
Microsoft Defender XDR
Microsoft Defender for Endpoint
Microsoft Sentinel
Microsoft Entra ID
Microsoft Purview
Microsoft Office

Compensation and Location

Location: New York, NY (hybrid)
Salary: USD 80,000 - 100,000 per year
Experience: Minimum 5 years

Benefits

A full range of medical, financial and/or other benefits dependent on the position

View full job page →

2d ago

Senior Security Engineer - Container & Cloud Security

Ecco Select New York, NY

New York, NY

2d ago

$65 - $65/hr Contract Cloud Native Security Cloud Native Workload Protection Cloud Platforms

Apply Now

Job Description

Sr. Security Engineer on a policy-as-code team focused on automating container and cloud security governance across Azure and GCP with Wiz.

Responsibilities

Design, implement, and maintain cloud-native container security controls for Kubernetes platforms including AKS, GKE, and EKS.
Develop, tune, and maintain container threat detection rules to identify malicious activity, anomalous behavior, and indicators of compromise.
Monitor runtime security events, investigate alerts, and support triage and incident response for container and Kubernetes workloads.
Deploy and optimize Wiz Defend/CWPP capabilities, including runtime sensors, workload protection, and attack path analysis.
Create and automate security guardrails using Infrastructure as Code (Terraform, Helm) and GitOps, including admission controller policies and preventative controls.
Strengthen container software supply chain with image scanning, SBOM validation, image signing, and registry security.
Identify, prioritize, and remediate container vulnerabilities and misconfigurations using risk-based exposure analysis.
Develop and maintain Compliance-as-Code policies aligned to CIS, NIST, and STIG security benchmarks.
Route Wiz findings and threat intelligence into ServiceNow and enterprise vulnerability management workflows.
Partner with Security Operations, Cloud Engineering, DevSecOps, and application teams to improve detection coverage and cloud security posture.
Conduct threat hunting and proactive analysis to improve detection logic and enhance runtime protection capabilities.
Support post-incident reviews with root cause analysis, corrective action recommendations, and continuous improvement of detection and response.

Requirements

Strong cloud security knowledge across AI/ML platforms, model pipelines, data layers, IAM, networking, and logging.
Hands-on Wiz CNAPP expertise (CSPM, CIEM, DSPM, CWPP), including applying it to AI workloads, model hosting, and data pipelines.
Experience designing preventive and detective security controls across model, data, and platform layers.
Compliance-as-Code fluency, including mapping Wiz findings to STIGs, native cloud policies, CI/CD, and governance workflows.
Ability to interpret Wiz risk graphs and communicate risk-based exposure analysis for model misuse, data leakage, privilege escalation, and blast radius.
Kubernetes experience across AKS, GKE, and EKS.
Working knowledge of Terraform, Helm, and GitOps-based pipelines.

Technologies

Wiz, Wiz Defend, CWPP, CSPM, CIEM, DSPM
Kubernetes, AKS, GKE, EKS
Terraform, Helm, GitOps, Azure, GCP
CIS, NIST, STIG
ServiceNow
Container image scanning, SBOM, image signing, registry security
Admission controller, Infrastructure as Code, CI/CD

Benefits

401(k)
401(k) matching
Dental insurance
Health insurance
Paid time off
Retirement plan
Vision insurance

Nice to have

Direct, hands-on Wiz platform experience is a significant plus.
Container image/repository scanning experience.
Deeper Terraform or IaC pipeline background.
Open to strong, trainable candidates with somewhat less hands-on experience, as long as foundational cloud and container security skills are solid.

Contract details

Duration: 6 months initial; strong intent to convert to full-time
Engagement length: engagements on this team have extended up to 4 years
Schedule: full-time, approximately 3 days/week onsite
Pay: USD 65 per hour

Location & work authorization

Work location: Hybrid remote in New York, NY 10001
Primary location: New York, NY (hybrid)
Secondary location: NY tri-state area (NJ, Philadelphia, NYC) considered
Strong preference: Toronto, ON
Work authorization: GC or USC only

Interview process

Panel interview with the Hiring Manager and two technical leads

View full job page →

12d ago

Senior Cybersecurity Advisor (vCISO Program Support)

Sigma Technology Partners, LLC New York, NY

New York, NY

12d ago

$110k - $133k/yr Contract Senior Cloud Identity And Access Management Cloud Platforms

Apply Now

Job Description

Join a long-term Virtual Chief Information Security Officer (vCISO) program supporting a public-sector organization in New York. This contract / consulting role is primarily remote, with periodic onsite meetings for NYC-local candidates. You will help strengthen cybersecurity outcomes through architecture review, testing oversight, cloud assessments, and risk reduction paired with clear executive reporting.

What you’ll do

Provide cybersecurity advisory and consulting services to support enterprise security direction.
Conduct security architecture reviews, delivering actionable recommendations.
Lead and oversee penetration testing activities and ensure results translate into improvements.
Support vulnerability management and remediation initiatives.
Perform cloud security assessments across Azure and/or AWS environments.
Develop and advise on secure architecture and Zero Trust recommendations.
Support IAM and access control initiatives as part of broader risk reduction.
Participate in risk assessments and cybersecurity reviews.
Assist with executive reporting, including presentations of technical findings and recommendations.
Collaborate with cross-functional technical and business stakeholders to align security priorities.
Attend occasional onsite meetings in New York City.

What you bring

Minimum 7 years of cybersecurity experience.
Minimum 3 years of cybersecurity advisory, consulting, or security leadership experience.
Experience supporting enterprise cybersecurity programs.
Background in penetration testing and vulnerability management.
Experience with cloud security architecture.
Experience with Microsoft and/or AWS security technologies.
Strong written and verbal communication skills for executive-facing updates.
Ability to work independently in a remote environment.

Technologies

Azure
AWS
Zero Trust
IAM

Certifications

Must possess one or more of the following:

GPEN (GIAC Penetration Tester)
OSCP (Offensive Security Certified Professional)
CEH (Certified Ethical Hacker)
eCPPT (Certified Professional Penetration Tester) or equivalent
CompTIA PenTest+
Equivalent advanced cybersecurity certifications may also be considered.

Preferred experience

New York public-sector experience
State or municipal government experience
Pension fund or financial services experience
NIST Cybersecurity Framework expertise
Zero Trust Architecture initiatives
Security Architecture leadership

Role details

Location: Hybrid remote in New York, NY 10279 (primarily remote; periodic onsite in NYC)
Employment type: Contract / Consulting
Pay: $110,494.02 - $133,068.06 per year
Work authorization: Candidate must be allowed to work for any employer in the United States.