Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

The Cyber Security Assurance Analyst will play an important role in helping the Federal Reserve carry out its responsibilities by performing risk assessments, Cloud mitigations, security application testing, thread modeling, security design review, and overall information systems risk management. This individual contributor role will work closely with technology squads to deliver technological projects to business customers, focusing on application security testing for Cloud migration workloads and mission-critical systems supporting Markets operations.

Responsibilities

Perform Cloud application security risk assessments.
Execute assessments timely and accurately.
Manage relationships with assigned business units.
Embed within development squads to provide timely security advice.
Perform application security testing, ensuring only compliant workloads move to the Cloud.
Support development squads in implementing security tooling in the CI/CD pipeline.

Requirements

Background in application development with a focus on security control implementation.
Ability to review application code and assist developers with vulnerability remediation, including in-depth issue contextualization.
Experience executing assessments in the Cloud and against third-party SaaS solutions.
Knowledge of performing risk management based on NIST 800-53.
Experience determining vulnerability risk impact on key objectives and critical processes.
Ability to link risk management programs and initiatives to inform critical business strategies and processes.
Experience thriving in a DevSecOps culture and working closely with developers in an agile, quick-release environment.
Demonstrated leadership experience, managing projects, strong decision-making, and execution abilities.
Strong experience managing and resolving security findings within Agile practices.
Application security testing skills supporting CI/CD pipelines.
Experience evaluating third-party vendors supporting Bank processes with a focus on data protection.
Proven ability evaluating and securing Gen AI systems with internal and embedded models.
Possession of or ability to obtain and maintain National Security Clearance, which includes U.S. Citizenship when required.
Candidates must undergo an enhanced background check.
Candidates will be tested for all controlled substances prohibited by federal law, including marijuana.

Skills

Application development
Security control implementation
Code review
Vulnerability remediation
Cloud assessments
Third-party SaaS solution assessments
NIST 800-53 risk management
Vulnerability risk impact analysis
DevSecOps
Agile methodologies
Project management
Decision making
Execution
Security findings management
CI/CD pipeline support
Third-party vendor evaluation
Data protection
Gen AI system evaluation
National Security Clearance

Location

New York

Work Type

Full-time
Onsite

Experience Level

Individual contributor

Salary/Compensations

$170,000k-$230,000k

Benefits

Educational assistance
Career development tools
Stretch opportunities
Parental leave
Adoption assistance
Back-up dependent and elder care
College planning resources
Comprehensive insurance plans
Leave policies
Onsite Health & Wellness Center
Onsite Fitness Center
Pension plan
401(k) with generous match
Financial planning resources
Subsidized public transportation program

About the Company

The Federal Reserve Bank of New York's mission is to support the strength of the U.S. economy and the stability of the global financial system.
Information Security New York (ISNY) is responsible for developing, executing, and maintaining a superior information security program that promotes resiliency by identifying and mitigating cyber risks and threats.
The Cyber Security Assurance Department (CSA) assesses risks associated with third-party vendor systems, software, IoT devices, ICS, technology processes, or outsourcing arrangements handling Federal Reserve data.
The department integrates security practices into DevSecOps methodology, performs application security testing, and works on security tooling integration within the CI/CD pipeline.
CSA analysts are embedded in development squads to provide security advice and manage the Security Champion Program.

Equal Opportunity

The Federal Reserve Banks are committed to equal employment opportunity for employees and job applicants in compliance with applicable law and to an environment where employees are valued for their differences.