Urban Tech Researcher

  • $75,000.00 - $155,000.00/year
  • About New York City Cyber Command
    NYC Cyber Command was created in 2017 by Executive Order to lead the City’s cyber defense efforts, working across more than 100 agencies and offices to prevent, detect, respond, and recover from cyber threats. NYC Cyber Command is committed to protecting NYC infrastructure and critical systems from malicious attacks through the use of the latest technologies, public-private partnerships, and regular training and exercises for City employees.

    Job Description
    The Urban Technology division of New York City Cyber Command provides security services that enable City agencies to fully leverage the future of Smart City technologies, Next Generation 9-1-1 communications, autonomous vehicles, smartphones, Cloud, analytics and more in a secure way. We are looking for talented, motivated individuals who enjoy working in creative, stimulating environments to advise City Agencies on the secure deployment of
    technologies that solve the City’s problems and advance the state of the art in cybersecurity for a vast array of problems in Urban Technology.

    Responsibilities will include:
    • Develop secure Urban Technology architecture blueprints that can be leveraged by Agencies;
    • Review and create Urban Technology designs, solutions and proposals;
    • Perform market research on urban technology security vendors;
    • Conduct vulnerability research against smart devices;
    • Collaborate with City Agencies and the Office of the CTO on security aspects of smart city initiatives, identifying potential risks and developing solutions to mitigate those risks;
    • Maintain situational awareness of the current cyber threat landscape, with a focus on potential impacts to New York City.
    • Projects will be undertaken in small teams with close coordination with the Department of Information Technology and Telecommunications, other Agencies and the CTO’s office.

    Minimum Qualification Requirements

    1. A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position;
    or
    2. Education and/or experience which is equivalent to "1" above.

    Preferred Skills

    The preferred candidate should possess the following:
    • 2+ years of experience, BS or MS in Computer Engineering or Electrical Engineering Reverse Engineering; Vulnerability Research; Wireless and Network Communications; Malware; Mobile/Embedded Development; RTOS Kernel development; Constraint Solving; Exploit mitigation techniques;
    • Deep knowledge in specific areas: privacy, vulnerability management, resiliency and Next Generation 9-1-1; experience in responsible vulnerability disclosure and vendor bug management is preferred;
    • Familiarity with at least one common IoT low-level architecture (Qualcomm, Intel, ARM, Atmel, Freescale, etc.) is important, as is the ability to conduct vulnerability research against Smart devices/IoT technologies built on that architecture;
    • Experience with two or more embedded operating system and real-time operating systems (RTOS) (Windows 10 for IoT, VxWorks, Android Things, ARM Mbed, QNX, etc.) is required as is experience with Bluetooth, Zigbee, 802.11 and other communications protocols, and one or more IoT Platforms (AWS, Azure, GE, etc.);
    • Familiarity with modern exploit mitigation techniques and countermeasures is strongly preferred;
    • Development experience is preferable, but at least some scripting experience in python or ruby, or another language is required;
    • Quickly developing the tools needed to succeed in reverse engineering IoT devices and vulnerability research efforts;
    • Variety of low-level IoT operating systems experience as well as cross-platform vulnerability research;
    • Ability to play both sides of the fence, both defeating and developing new and advanced security techniques.

    To Apply

    * Interested applicants with similar civil service titles who meet the preferred requirements should also submit a resume for  consideration

    Please submit resume in the fields below

    SUBMISSION OF A RESUME IS NOT A GUARANTEE THAT YOU WILL RECEIVE AN INTERVIEW

    APPOINTMENTS ARE SUBJECT TO OVERSIGHT APPROVAL

    Want to apply later?

    Type your email address below to receive a reminder

    Apply to Job

    ErrorRequired field
    ErrorRequired field
    ErrorRequired field
    Error
    Error
    insert_drive_file
    insert_drive_file