Cybersecurity Engineer Level 7

Pay

Salary range: $145,145 – $191,594 per year.

Schedule

Standard hours: 9:00 am – 5:30 pm (7.5 hours/day), with flexibility as required. This position is eligible for teleworking one day per week; new hires may apply after 30 days of employment.

Location

2 Broadway, New York, NY 10004.

About the role

The Metropolitan Transportation Authority (MTA) is North America’s largest transportation network, serving 15.3 million people across a 5,000‑square‑mile region around New York City, Long Island, southeastern New York State, and Connecticut. The MTA operates the nation’s largest bus fleet and more subway and commuter rail cars than all other U.S. transit systems combined.

The Cybersecurity Engineer Level 7 provides technical expertise in managing and analyzing cybersecurity risks. The role involves designing, building, and maintaining secure infrastructure, applications, and technology across Information and Operational Technology domains — including cloud, wireless, carrier systems, IoT, and operational technology. Responsibilities span secure configuration and hardening, incident response, threat intelligence, risk assessment, and collaboration with security engineers, architects, developers, vendors, and business units to continuously improve the MTA’s security posture.

Responsibilities

• Research emerging threats and vulnerabilities to aid identification of network incidents and support creation of new architecture, policies, standards, and guidance.
• Implement secure system configuration and hardening standards.
• Design, configure, and integrate secure solutions in assigned technology domains.
• Provide incident response support: containment, forensics analysis, system hardening, and recovery.
• Install, configure, harden, and optimize infrastructure, application, and security components (servers, workstations, mobile devices, directory services, OS, middleware, IoT, next‑gen firewalls, behavior‑learning tools, host‑based security, SIEM, virtual/physical/cloud platforms).
• Identify configuration gaps independently or with vendors to reduce cyber risk.
• Review alerts and sensor data; document formal technical incident reports.
• Test new systems; manage cybersecurity risk remediation, baselines, and best practices.
• Respond to computer security incidents per established policies and procedures.
• Provide technical guidance to first responders handling information security incidents.
• Deliver timely, relevant updates to stakeholders and decision‑makers.
• Communicate investigation findings to business units to improve security posture.
• Validate and maintain incident response plans and processes.
• Compile and analyze data for management reporting and metrics.
• Monitor information sources to stay current on attacks and trends.
• Analyze potential impact of new threats; communicate risks to detection analysts, architects, technology SMEs, and management.
• Perform root‑cause analysis; participate in root‑cause elimination activities.
• Use judgment to form conclusions that may challenge conventional wisdom.
• Hypothesize new threats and indicators of compromise.
• Monitor threat intelligence feeds for IOCs, APTs, and other threats.
• Identify threat TTPs using MITRE ATT&CK or similar frameworks.
• Participate in creation of enterprise security documents (policies, standards, baselines, guidelines, procedures) under the IT Security Manager.
• Comply with all policies and standards; work outside regular hours as needed.
• Observe contractor work, review/approve invoices, address performance issues, and escalate as applicable.

Qualifications

• Bachelor’s degree in Arts/Sciences (BA/BS); combination of education and experience may substitute.
• Minimum 10 years of relevant technology‑based or cybersecurity experience (or experience in a specific cybersecurity subdomain such as Cloud, Applications, Infrastructure, Security Technology).
• At least two of the following professional certifications (or related): CISSP, GIAC, CISM, CRISC, CISA.

Skills

• Serves as a multi‑technology technical authority with expert knowledge of OT, security architecture, and cross‑system interoperability.
• Shapes long‑term technology strategy, ensuring secure integration of enterprise and operational systems.
• Provides specialized guidance, mentorship, and training across IT and OT security communities.
• Evaluates emerging technologies for applicability, operational risks, and strategic impact; develops technical business cases for investment.
• Develops domain‑specific disaster recovery and resilience plans.
• Creates complete RFPs/RFIs; negotiates contract terms with vendors and procurement.
• Interacts with major providers at the technical expert level; enforces SLAs and penalties.
• Establishes systems to monitor compliance with architectural standards and ensure technical integrity.
• Significant practical expertise across cybersecurity disciplines; seasoned expertise in multiple security domains and technologies.
• Proven track record of successful architectural design implementation and system configuration/hardening.
• Expert ability to conduct and analyze security risk assessments.
• Expert understanding of TCP/IP (OSI Layers 1‑4) and Internet/Intranet technologies (OSI Layers 5‑7).
• Scripting/programming skills (Perl, Python, PowerShell, etc.) preferred.