Top Tech Jobs & Startup Jobs in NYC, NY

Performs incident response and digital forensics across enterprise and cloud environments. Responsibilities include real-time incident management, malware and memory analysis, evidence preservation, network and filesystem analysis, technical reporting, threat hunting, detection-rule development, security monitoring enhancement, customer assessments, tabletop exercises, and lessons learned. The role also maintains forensic laboratories, develops security procedures, supports SOC leadership, and participates in rotating on-call coverage.

The Business Analyst gathers and documents requirements, analyzes business processes and data, develops functional specifications and business cases, and recommends improvements. The role facilitates stakeholder workshops, collaborates with developers and project managers, supports project planning and reporting, conducts user acceptance testing, creates training materials, and helps ensure information systems meet business, accessibility, security, and compliance needs.

The Senior Archer Engineer develops, implements, administers, and supports RSA Archer eGRC solutions. Responsibilities include custom Archer development, system administration, integrations through APIs, data imports and exports, reporting, user account management, troubleshooting, system availability, user training, and technical support. The role also applies NIST risk management and security control frameworks, collaborates with security and infrastructure teams, and participates in on-call support.

Provides security engineering and compliance expertise for FedRAMP Cloud Service Providers. Reviews cloud architectures, authorization packages, security controls, system security plans, assessment reports, vulnerability scans, and penetration tests. Leads architecture interviews, identifies technical and documentation gaps, advises government stakeholders on risk and compliance, supports continuous monitoring, and guides vendors on FedRAMP, NIST, FISMA, RMF, and agency requirements.

Owns and governs cybersecurity systems architecture across cloud-native AWS GovCloud environments. Designs Zero Trust solutions, security controls, integration patterns, architecture blueprints, and engineering design documents. Leads integration of SIEM, SOAR, CDM, TDSP, EDR, identity platforms, and DevSecOps pipelines. Oversees cloud architecture, modernization, technical roadmaps, governance reviews, and collaboration with engineering and business stakeholders while ensuring compliance with federal security standards and FedRAMP requirements.

Leads cybersecurity GRC programs for government clients, overseeing contractor teams, task orders, project deliverables, compliance, security assessments, RMF sustainment, risk mitigation, schedules, budgets, SLAs, and performance metrics. The role requires technical program management, customer and stakeholder engagement, executive presentations, requirements gathering, reporting, and support for information security solutions across networks, systems, and applications.

Designs, implements, and maintains enterprise security solutions; operates EDR, SIEM, web application firewall, and vulnerability-scanning tools; advances Zero Trust maturity; integrates security into DevSecOps, CI/CD, and infrastructure-as-code processes; addresses vulnerabilities and security gaps; develops security performance dashboards; and validates system designs against requirements.