Secures software applications, cloud infrastructure, and IT systems by conducting assessments, threat modeling, vulnerability management, penetration testing, and incident response. Integrates security testing into the SDLC and CI/CD, supports AWS security architecture, improves security tools and dashboards, maintains documentation, and educates technical and non-technical stakeholders about security best practices, phishing, and social engineering.
The Cybersecurity Engineer is responsible for the security of software applications, IT systems, and ensuring security best practices throughout Business Wire. This role involves assessing, identifying, and mitigating vulnerabilities in web applications, cloud, and IT systems. This position works closely with development teams to integrate security best practices during the software development process, from design to deployment. The is position works to educate technical and non-technical personnel about threats such as library exploits, phishing attacks, and social engineering. The Cybersecurity Engineer is responsible for ensuring the proper implementation and usage of security tools including vulnerability scanning, email security, and logging.
What You Will Do
- Assist in conducting application and cloud security assessments to identify potential risks and vulnerabilities.
- Collaborate with security and development teams to integrate security testing into the SDLC and support vulnerability management efforts.
- Support the development of cloud security architecture, ensuring it aligns with industry standards and best practices.
- Assist in triaging vulnerabilities and be engaged in engineering prioritization of findings.
- Conduct security assessments and assist in threat modeling exercises, contributing to the identification of potential security risks.
- Assist in vulnerability management by helping with penetration testing, remediation efforts, and security controls implementation.
- Help maintain security documentation and reports to ensure security requirements are followed during product development.
- Support incident response activities, assisting in investigating and resolving application security incidents.
- Collaborate with cross-functional teams to promote security awareness and follow established security best practices.
- Conduct educational exercises on security best practices, phishing, and social engineering.
- Support the continuous improvement of security tools, dashboards, and other resources for monitoring and improving product security.
What You Will Need
- 2 – 4 years of experience in application security with knowledge of AWS.
- Hands-on experience in designing secure Infrastructure solutions for AWS as well as on-prem applications, demonstrating proficiency in architecting robust and scalable security measures within cloud and on-prem environments.
- Understanding of security testing tools such as GitHub Advanced Security to encompass Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST), utilizing these tools effectively to identify and address potential vulnerabilities proactively.
- Experience in training and providing educational materials to increase security maturity.
- Experience in application security automation and interjecting security into CICD.
- Expertise in technical assessments, threat modeling, and cloud security architecture.
- Knowledge software security best practices, penetration testing, vulnerability management, and remediation advisory.
- Demonstrated proficiency in investigating and effectively managing security incidents pertaining to applications operating within AWS and on-prem environments.
- Strong problem-solving abilities and a deep understanding of cybersecurity principles and practices.
- The ability to communicate complex security concepts to technical and non-technical stakeholders.
- Previous software development experience is plus.
- Bachelor’s degree in computer science or related field.
What We Offer
- Ability to work remotely
- Excellent health benefits that begin on your first day of employment
- $100 monthly fitness allotment, a tuition reimbursement program, and enhanced mental health resources
- 401(k) plan with generous company match, and annual profit sharing contribution (subject to company performance)
- PTO, Floating Holidays, Wellness Day Off, Birthday Day Off, and more!
The base salary range for this position is $150K to $155K/year. Offered salary will be determined by several factors, including but not limited to: applicant’s education, experience, knowledge, skills and abilities, as well as internal equity and alignment with geographic market data. Business Wire reserves the right to modify this salary range at any time. Offered candidate must pass a background check.
Business Wire’s total rewards include:
Business Wire will not sponsor a new applicant for employment authorization for this position.
Business Wire New York, New York, USA Office
New York, United States, 0
Similar Jobs
Artificial Intelligence • Cloud • Machine Learning • Software • Business Intelligence • Cybersecurity • Big Data Analytics
Engineer and assess Zero Trust security capabilities across identity, devices, networks, applications, and data. Translate federal security requirements into technical controls, support authorization activities, review security evidence, analyze vulnerabilities and control gaps, manage remediation plans, and advise stakeholders on security architecture and compliance. Assess cloud, hybrid, and on-premises environments for authorization readiness and continuous monitoring, while preparing technical reports, risk summaries, and briefings.
Top Skills:
FedrampFismaNist Risk Management FrameworkNist Sp 800-53Zero Trust
Healthtech • Pharmaceutical • Telehealth • Manufacturing
Manages cybersecurity infrastructure and operations, identifies vulnerabilities, leads incident response, digital forensics, and e-discovery, and administers data classification and DLP programs. Evaluates vendor security, supports security projects, maintains documentation, audits access controls, and ensures encryption and compliance across systems, networks, and endpoints. Provides technical guidance to IT staff and travels quarterly to company locations as needed.
Top Skills:
Data Loss Prevention (Dlp)Digital Forensics ToolsMicrosoft 365 Compliance SuiteSecurity Monitoring Platforms
Artificial Intelligence • Cloud • Information Technology • Cybersecurity
Implements and manages cybersecurity controls for AWS GovCloud environments and DevSecOps pipelines. Integrates RMF and NIST SP 800-53 controls into infrastructure and configuration code, remediates security findings, develops risk assessments and POA&Ms, documents risks, recommends mitigations, and evaluates tools supporting Zero Trust and compliance.
Top Skills:
Aws GovcloudConfiguration As Code (Cac)DevsecopsInfrastructure As Code (Iac)Nist Sp 800-53 Rev. 5Risk Management Framework (Rmf)Zero Trust
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
