Talent.com
IT Security Engineer
IT Security EngineerNYCIRB • New York, NY, US
IT Security Engineer

IT Security Engineer

NYCIRB • New York, NY, US
job_description.job_card.1_day_ago
serp_jobs.job_preview.job_type
  • serp_jobs.job_card.full_time
job_description.job_card.job_description

Job Description

Job Description

The New York Compensation Insurance Rating Board (NYCIRB) is a non-profit, unincorporated association of insurance carriers. NYCIRB is licensed by the New York State Department of Financial Services as the official workers’ compensation rate service organization in the State.  In this capacity, NYCIRB provides a variety of services to the workers’ compensation industry, including data collection and analysis, and the development of loss costs and rating values. These activities, along with analytical tools, research, and customer focused services, are intended to foster a stable and healthy workers’ compensation system in the State of New York.

The IT Security Engineer plays a critical role in safeguarding the organization’s digital infrastructure. This individual is responsible for designing, implementing, optimizing security systems, and maintaining the organization’s cybersecurity infrastructure, ensuring robust protection against evolving threats. The role is hands-on strategic planning, engineering, responding to threats, and enforcing security protocols across networks, systems, and applications. In addition, this position will provide mentorship to junior analysts and partners with IT, compliance, and business units to enforce strong security governance.

ESSENTIAL DUTIES AND RESPONSIBILITIES :

  • Security Architecture & Implementation

Design and implement comprehensive security architectures and solutions (e.g. firewalls, intrusion detection / prevention systems, endpoint protection, SIEM, EDR, and zero-trust, etc.) that protect the organization's information systems and data assets from a wide range of threats.

  • Implement and manage identity and access management (IAM) systems and user access controls.
  • Recommend, configure, manage, maintain, and optimize the NYCIRB’s cybersecurity applications and tools.
  • Monitoring & Incident Response
  • Monitor network, endpoints, cloud environments for irregular activity.

  • Respond to security incidents and conduct forensic investigations.
  • Maintain, lead, and test disaster recovery and business continuity plans.
  • Conduct root cause analysis and forensic investigations for major incidents.
  • Continuously improve incident response playbooks and automation.
  • Compliance & Risk Management
  • Conduct risk assessments and vulnerability analyses on existing systems and networks, recommending enhancements and ensuring timely implementation of security patches and updates.

  • Ensure compliance with internal policies and external regulations, specifically NIST CSF 2.0, DFS 23 NYCRR part 500, and NY SHEILD act.
  • Develop and maintain vulnerability management systems across on-premises and cloud assets.
  • Lead remediation efforts and report findings to executive leadership.
  • Oversee patch management, application control, and endpoint security policies
  • Training & Awareness
  • Lead internal security awareness programs and technical workshops to educate employees on cybersecurity best practices.

  • Provide mentorship and training to junior security and technical engineer personnel, enhancing the overall security awareness and capabilities.
  • Stay current with emerging threats and industry trends, recommending proactive measures to safeguard organizational assets.\
  • Collaboration & Reporting
  • Work closely with IT operations, infrastructure, and development teams to integrate security into all aspects of technology planning.

  • Collaborate with vendors and managed service providers for escalated incidents.
  • Report on security metrics, incidents, and risk assessments to senior leadership.
  • Partner with infrastructure, application, and DevOps teams to integrate security into CI / CD pipelines.
  • Provide regular updates to the CIO and board-level stakeholders on security posture and initiatives.
  • Develop and maintain security policies and procedures.
  • QUALIFICATIONS :

  • 5+ years of hands-on experience in cybersecurity IT security engineering
  • Expertise in network security, cloud security (AWS / Azure), zero trust, and endpoint protection.
  • Strong background in incident response, vulnerability management, risk assessment, cryptography, identity management, and vulnerability management.
  • Familiarity with security frameworks and standards (e.g. NIST CSF 2.0, ISO 27001).
  • Demonstrated experience with tools such as enterprise CheckPoint Security Suite, Azure, Okta, ThreatLocker, and Microsoft 365 security controls.
  • Proven ability to write clear, concise, and comprehensive technical documentation.
  • Excellent communication and interpersonal skills to interact with both technical and non-technical stakeholders.
  • Proven track record of leading security projects and influencing cross-functional teams.
  • Ability to execute and lead projects accurately and quickly.
  • Solid team player, must be self-motivated, and punctual.
  • Must be responsible, and detail oriented.
  • EDUCATION REQUIREMENTS :

  • Bachelor’s degree in Information Technology, Business Administration, or a related field.
  • Certification in Business Analysis (e.g., CBAP, PMI-PBA) is a plus.
  • PHYSICAL DEMANDS AND WORK ENVIRONMENTS :

    The physical demands described in this section are to be representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential job functions.

  • Hybrid work location, requiring 60% in office attendance.
  • Work requires mobility with frequent bending and standing.
  • Frequent use of arms for stretching and reaching and use of legs for walking and lifting. 80% -90% of work hours are spent sitting down.
  • This job operates in an office setting. This role routinely uses standard office equipment such as computers, phones, photocopiers, and the like.
  • The position description is a guide to the critical duties and essential functions of the job, not an all-inclusive list of responsibilities, qualifications, physical demands and work environment conditions. Position descriptions are reviewed and revised to meet NYCIRB’s changing needs, at the sole discretion of management.

    SALARY RANGE :

    $135,000.00 - $165,000.00

    Powered by JazzHR

    Compensation details : 135000-165000 Yearly Salary

    PIe64a9512be57-25405-38846654

    serp_jobs.job_alerts.create_a_job

    It Security Engineer • New York, NY, US

    Job_description.internal_linking.related_jobs
    Lead Security Engineer - Cyber Security

    Lead Security Engineer - Cyber Security

    Relativity • New York, NY, United States
    serp_jobs.job_card.full_time
    As a Lead Cyber Security Engineer, you will ensure the security of Relativity's network and infrastructure.In this role, the main responsibilities will be to investigate and analyze emerging threat...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Infrastructure Security Engineer / System Engineer

    Infrastructure Security Engineer / System Engineer

    Computer Task Group, Inc • New York, NY, US
    serp_jobs.job_card.temporary
    CTG is seeking an Infrastructure Security Engineer / Systems Engineer to work onsite in NYC.Must have proper work authorization, and this position does not allow for C2C or 1099.Onsite in NYC 5 day...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Infrastructure Security - Security Engineer

    Infrastructure Security - Security Engineer

    CoreWeave • Livingston, NJ, US
    serp_jobs.job_card.permanent
    CoreWeave is the AI Hyperscaler™, delivering a cloud platform of cutting edge services powering the next wave of AI.Our technology provides enterprises and leading AI labs with the most perfo...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Network Security Engineer -Middletown, NJ Onsite, 2nd Shift

    Network Security Engineer -Middletown, NJ Onsite, 2nd Shift

    Lincoln IT • Middletown, NJ, US
    serp_jobs.job_card.full_time
    We are currently seeking for a Network Security Engineer with a minimum of 3-5 years of hands-on experience.Manage our network segmentation and network visibility solution.Routi...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Senior OT Security Engineer

    Senior OT Security Engineer

    VirtualVocations • Yonkers, New York, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Security Engineer specializing in Operational Technology, working remotely from anywhere in the U. Key Responsibilities Deliver OT security engineering services, ...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_1_day • serp_jobs.job_card.promoted
    Information System Security Engineer

    Information System Security Engineer

    VirtualVocations • Newark, New Jersey, United States
    serp_jobs.job_card.full_time
    A company is looking for an Information System Security Engineer.Key Responsibilities : Serve as the technical lead for system security engineering efforts supporting FISMA and FedRAMP ATOs Devel...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Senior Cloud Security Engineer

    Senior Cloud Security Engineer

    VirtualVocations • Paterson, New Jersey, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Security Engineer, Cloud Security.Key Responsibilities Design, implement, and maintain secure AWS infrastructure following best practices Embed security control...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Staff Threat Engineer

    Staff Threat Engineer

    VirtualVocations • Newark, New Jersey, United States
    serp_jobs.job_card.full_time
    A company is looking for a Staff Threat Engineer responsible for managing and mitigating cybersecurity risks.Key Responsibilities Participate in incident response, threat detection, and offensive...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_hours • serp_jobs.job_card.promoted • serp_jobs.job_card.new
    Advanced Security Engineer - Cyber Security

    Advanced Security Engineer - Cyber Security

    Relativity • Newark, NJ, United States
    serp_jobs.job_card.full_time
    As an Advanced Cyber Security Engineer, you will ensure the security of Relativity's network and infrastructure.In this role, the main responsibilities will be to investigate and analyze emerging t...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Senior Security Engineer

    Senior Security Engineer

    VirtualVocations • Jamaica, New York, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Security Engineer to lead and enhance enterprise security capabilities across cloud and hybrid environments. Key Responsibilities Guide security initiatives and l...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Information Security Engineer

    Information Security Engineer

    VirtualVocations • Flushing, New York, United States
    serp_jobs.job_card.full_time
    A company is looking for an Information Security Engineer III.Key Responsibilities Monitor cybersecurity devices and investigate events and incidents Escalate or mitigate incidents and conduct c...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Senior Information Security Engineer

    Senior Information Security Engineer

    VirtualVocations • Bronx, New York, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Information Security Engineer.Key Responsibilities Collaborate with business partners to achieve data protection goals Develop and implement data protection str...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Security Engineer

    Security Engineer

    The Rockridge Group • New York, NY, US
    serp_jobs.job_card.temporary
    Company X is seeking an exceptional Security Engineer to join its IT Security Team in our New York office.This person will join a distributed, highly collaborative team that is responsible for the ...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Cyber Security Engineer

    Cyber Security Engineer

    VirtualVocations • Elizabeth, New Jersey, United States
    serp_jobs.job_card.full_time
    A company is looking for a Cyber Security Engineer for a Contract-to-Hire position, which is 100% remote.Key Responsibilities Serve as a subject matter expert for the cybersecurity operations tea...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Cloud Security Engineer

    Cloud Security Engineer

    Axis Capital • Red Bank, NJ, United States
    serp_jobs.job_card.full_time
    This is your opportunity to join AXIS Capital - a trusted.We stand apart for our outstanding client service, intelligent risk taking and superior risk adjusted returns for our shareholders.We also ...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Product Security Engineer

    Product Security Engineer

    VirtualVocations • Elizabeth, New Jersey, United States
    serp_jobs.job_card.full_time
    A company is looking for a Product Security Engineer to maintain and enhance its Product Security Program.Key Responsibilities Lead Product Security Vulnerability Management efforts and ensure ti...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Security Engineer

    Security Engineer

    VirtualVocations • Flushing, New York, United States
    serp_jobs.job_card.full_time
    A company is looking for a Security Engineer.Key Responsibilities Design, implement, and maintain security controls for cloud environments (AWS, Azure, or GCP) Perform application security asses...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Security Engineer FIPS Certified

    Security Engineer FIPS Certified

    VirtualVocations • Bronx, New York, United States
    serp_jobs.job_card.full_time
    A company is looking for a Security Engineer, FIPS / CC (Mobile Devices).Key Responsibilities Lead the end-to-end validation process for IT products, including assessment, development of security t...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted