The Senior Information Security Engineer supports Geode’s security initiatives, leads application security efforts, and collaborates on risk management. Responsibilities include vulnerability management, security testing, and policy implementation.
Geode Capital Management, LLC is seeking a Senior Information Security Engineer. The primary responsibilities include supporting Geode’s Information Security and Technology Transformation initiatives. This position reports to the Director of Information Security and collaborates closely with the Technology and Risk Management teams. The ideal candidate is passionate about identifying, managing, communicating, and mitigating risks, fostering a risk-focused culture, and promoting effective Information Security practices at Geode.
This is a hybrid work environment opportunity located in Boston, MA with a weekly in-office schedule of Tuesdays, Wednesdays, and Thursdays with remote work from home on Mondays and Fridays.
Responsibilities:
This is a hybrid work environment opportunity located in Boston, MA with a weekly in-office schedule of Tuesdays, Wednesdays, and Thursdays with remote work from home on Mondays and Fridays.
Responsibilities:
- Lead security initiatives throughout Geode’s Software Development Life Cycle (SDLC) by utilizing Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) tools. Act as a subject matter expert and assist the Technology team in remediating application vulnerabilities.
- Support Geode’s key security initiatives such as, but not limited to, vulnerability management, application security, DevSecOps, access governance, cloud migration (AWS, Azure) etc.
- Assist in implementing information security requirements, including policies, standards, and controls, by collaborating with the Risk Management team.
- Partner with Technology, Internal Audit team and other teams to analyze security controls to ensure that Geode’s security requirements are implemented for effective security posture.
- Provide support and input for related audits or examinations from internal/external parties and collaborate with relevant stakeholders to ensure findings are appropriately remediated.
- Assist with risk assessments, identify gaps and document action items.
- Prepare data and metrics-based analysis to help proactively monitor and report on risks across the company through use of Key Risk Indicators (‘KRIs’).
- Perform additional duties as required.
Skills You Bring:
- Bachelor of Science degree in Computer Science, Engineering, Computer Security, or Information Systems.
- 7+ years of experience in software development, information security, and cloud environments, with broad working knowledge of information systems and the latest technologies.
- Strong knowledge of vulnerability management and security testing tools, as well as OWASP Top 10 vulnerabilities.
- Experience with frameworks such as CIS, NIST, ISO 27001, and SOC.
- Certifications such as CISSP, CISM, and CEH are preferred but not required.
- Strong interpersonal and communication skills, with the ability to solve problems as they arise.
- Ability to work independently across multiple simultaneous work streams and thrive in a fast-paced, small company culture environment.
Company Overview:
Founded in 2001, Geode is headquartered in Boston’s financial district, the center of one of the world’s most vibrant finance and technology hubs and employs approximately 180 employees.
Geode is an institutional asset manager providing core beta exposures across a range of equity and niche asset classes, with over $1 trillion in AUM. With a robust infrastructure and experienced investment professionals, Geode offers the scale of a large asset management firm with the benefits of a smaller organization.
Geode is proud to be an equal opportunity employer and support a diversified work environment. Learn more about Geode at www.geodecapital.com/careers.
Founded in 2001, Geode is headquartered in Boston’s financial district, the center of one of the world’s most vibrant finance and technology hubs and employs approximately 180 employees.
Geode is an institutional asset manager providing core beta exposures across a range of equity and niche asset classes, with over $1 trillion in AUM. With a robust infrastructure and experienced investment professionals, Geode offers the scale of a large asset management firm with the benefits of a smaller organization.
Geode is proud to be an equal opportunity employer and support a diversified work environment. Learn more about Geode at www.geodecapital.com/careers.
Top Skills
AWS
Azure
Dynamic Application Security Testing (Dast)
Software Composition Analysis (Sca)
Static Application Security Testing (Sast)
Geode Capital Management Boston, Massachusetts, USA Office
Our headquarters are located in Boston's Financial District, the center of one of the world's most vibrant finance and technology hubs. We're steps away from South Station MBTA subway, bus, and commuter rail lines.
Similar Jobs
Fitness • Hardware • Healthtech • Sports • Wearables
As a Senior Information Security Engineer, you will lead security initiatives, manage security technologies, conduct risk assessments, and mentor junior team members to safeguard WHOOP's systems and data.
Top Skills:
AWSAzureCasbCnappConfluenceCspmDlpGCPJIRASIEMSoarSwg
Artificial Intelligence • Cloud • Information Technology • Sales • Security • Software • Cybersecurity
The Senior Security Engineer will design and integrate security controls, manage vulnerabilities, provide consulting, and support automation in a hybrid IT environment.
Top Skills:
AWSGoPython
Consumer Web • eCommerce • Software
As an Information Security Operations Engineer II, you will manage security alerts, participate in incident response, and support vulnerability management programs to enhance the security of CarGurus' infrastructure.
Top Skills:
AWSAzureChefCspmDockerGCPKubernetesMongoDBMySQLPuppetRdsSIEMTerraform
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
