Associate Information Security Engineer Jobs (NOW HIRING)

Job Title: Information Security Engineer

Location: NYC, NY  

Duration: 12+ months

Local Candidates Only

Skills and Experience Needed

Technical & Professional Skills & Knowledge

1. Has a well-developed understanding of information security principles, frameworks, and best practices, and their application within enterprise and public-sector IT environments.
2. Designs, implements, and maintains security controls to protect systems, networks, applications, and data across on-premises and cloud environments.
3. Develops and formulates responses to security risks, vulnerabilities, and incidents in at least one technical security domain (e.g., network security, cloud security, identity and access management, or application security).
4. Demonstrates working knowledge of security monitoring, vulnerability management, incident response, and compliance requirements.

Creativity in Project & Program Development

1. Independently assesses security risks and proposes effective technical and procedural mitigation strategies with minimal supervision.
2. Develops and enhances security architectures, standards, and processes to address evolving threats and organizational needs.
3. Participates in the planning and implementation of security initiatives, system upgrades, and new technology deployments.
4. Provides ideas, risk analysis, and technical justification for security improvements and long-term cybersecurity strategy.

Organization Skills & Productivity

1. Demonstrates the ability to manage multiple security initiatives, assessments, and operational tasks concurrently.
2. Effectively prioritizes workload based on risk, impact, and organizational priorities.
3. Maintains accurate and timely documentation for security controls, incidents, and compliance activities.
4. Executes security operations and project assignments independently while adhering to established policies and procedures.
5. Demonstrates strategic thinking by aligning security efforts with organizational and program objectives.

Leadership / Interpersonal Relations / Judgement

1. Collaborates effectively with IT teams, application owners, and business stakeholders to integrate security into system design and operations.
2. Provides guidance and technical expertise to junior staff or team members when appropriate.
3. Exercises sound judgment when evaluating security risks, incidents, and remediation options.
4. Demonstrates professionalism, discretion, and strong interpersonal skills in handling sensitive and confidential information.

Communication Skills & External Relations

1. Produces clear, concise security documentation, reports, and risk assessments that require minimal revision.
2. Communicates technical security concepts and risks effectively to both technical and non-technical audiences.
3. Coordinates with external vendors, auditors, and partners during security assessments, audits, or incident response activities.

Primary Responsibilities, and Minimum and Preferred Qualifications

Skills to be successful:

1. Strong knowledge of cybersecurity principles, tools, and best practices
2. Excellent analytical, problem-solving, and communication skills
3. Ability to work independently and collaboratively across teams
4. Ability to manage multiple responsibilities and security priorities simultaneously
5. Experience supporting security operations in enterprise or public-sector environments (preferred)

Certifications and Qualifications needed:

1. 4 – 7 years of experience in information security or a related IT discipline
2. Bachelor’s degree in Information Security, Computer Science, or a related field
3. One or more security certifications such as CISSP, CISM, CEH, Security+, or equivalent
4. Cloud security certifications (e.g., Azure Security Engineer, AWS Security Specialty)

IT Systems Used:

1. Security monitoring and SIEM tools (e.g., Splunk, Sentinel, or equivalent)
2. Identity and Access Management platforms (e.g., Active Directory, Azure AD)
3. Cloud platforms (Azure, AWS)
4. Vulnerability scanning and endpoint security tools
5. Microsoft Office Suite

Tasks include:

1. Monitor, analyze, and respond to security events and incidents
2. Conduct vulnerability assessments and support remediation efforts
3. Implement and maintain security controls across applications, systems, and cloud environments
4. Support identity and access management processes and security reviews
5. Develop and maintain security documentation, standards, and procedures
6. Assist with compliance audits, risk assessments, and reporting activities
7. Perform other duties as assigned to support NYSERDA’s information security and IT operations