The Office of Technology and Innovation (OTI) leverages technology to drive opportunity, improve public safety, and help government run better across New York City. From delivering affordable broadband to protecting against cybersecurity threats and building digital government services, OTI is at the forefront of how the City delivers for New Yorkers in the 21st century. Watch our welcome video to see our work in action, follow us on social media @NYCOfficeofTech, and visit oti.nyc.gov to learn more.

At OTI, we offer great benefits, and the chance to work on projects that have a meaningful impact on millions of people. You'll have the opportunity to work with cutting-edge technology, and collaborate with other passionate professionals who share your drive and commitment to making a difference through technology.

The Security Sciences division provides highly functional, available, trusted solutions that enable the City government to prevent, detect, respond, and recover from cyber threats. Security Sciences is responsible for security architecture and engineering, with an emphasis on big data and emerging technology, also develops, constructs, tests, and maintains the software architecture necessary for big data analytics. Our Security Architecture team designs and implements highly defensible security infrastructure on behalf of NYC government agencies. The Application Security program defines, promotes, assures, and measures the security of business applications and data; and empowers city agencies to build and operate secure-by-design software.

As part of the Security Sciences leadership team and the head of the Application Security program, the Director of Cyber Command Application Security is the ideal blend between a senior executive and a technician, able to serve as a subject matter expert and direct a team of personnel to ensure that the city provides secure and resilient digital platforms for its residents, employees, and visitors.

The Director of Cyber Command Application Security will be responsible for shaping and executing the strategy to empower software development teams across city agencies to adopt a culture of secure-by-design development through the design and implementation of governance mechanisms, processes, technologies, and training.

Responsibilities will include:
- Sets strategy and provide technical direction to the NYC3 Application Security team and development teams across city agencies;
- Lead day-to-day operations including reviews and assessments of application design architectures, static, dynamic, and manual testing;
- Define, collect, and communicate application vulnerability metrics;
- Leverage application vulnerability metrics to identify skill gaps, and develop tailored training curricula;
- Cultivate and maintain relationships with software development and security teams at city agencies at varying organizational levels;
- Assist with executive communication to senior leadership teams on status of Application Security program and discrete initiatives.

Hours/Shift: Day - due to the necessary technical duties of this position in a 24/7 operation, candidate may be required to work various shifts such as weekends and/or nights/evenings.

To Apply
Interested applicants with other civil service titles who meet the preferred requirements should also submit a resume for consideration

Please go to www.cityjobs.nyc.gov and search for Job ID # 610504

SUBMISSION OF A RESUME IS NOT A GUARANTEE THAT YOU WILL RECEIVE AN INTERVIEW
APPOINTMENTS ARE SUBJECT TO OVERSIGHT APPROVAL

OTI participates in E-Verify

A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position; or,

Education and/or experience which is equivalent to "1" above.

The successful candidate should possess the following: - At least 8 years of experience and 18 months supervisory experience in Cybersecurity, including risk management, application vulnerability assessments, penetration testing, strategy and program development, and software architecture - Domain specialist in application security technologies with ability to lead across enterprise Application Security functions - Expert-level understanding of common application vulnerabilities, security testing methodologies and common testing platforms - Knowledge of cloud-based services, container security, and security challenges involved in deploying container applications - Understanding of common authentication and authorization mechanisms - Experience with application development build pipelines, automation, and CI/CD - Experience designing and leading secure application development training programs - Experience in leading enterprise teams, evaluating team member performance, and providing career development mentorship - Excellent research and analytical skills - Excellent oral and written communication skill - Willingness to travel in the five boroughs of NYC.

As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/.

New York City Residency is not required for this position

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.