Lead design, implementation, and management of security infrastructure across on-prem, cloud, and hybrid environments. Drive incident response, threat detection tuning, vulnerability assessments, risk and compliance (HIPAA, PCI-DSS, NIST, ISO 27001), security policy development, and security training. Collaborate with IT, DevOps, legal, and procurement to integrate security into SDLC and vendor selection.
Job Summary
We are seeking an experienced and highly motivated Senior Security Engineer to lead the design, implementation, and management of our organization’s security infrastructure. This role will focus on proactively protecting systems, networks, and applications from internal and external threats while ensuring compliance with industry regulations and best practices. The ideal candidate will possess a strong technical background, excellent problem-solving skills, and the ability to communicate effectively across departments.
Key Responsibilities
Security Architecture & Engineering
· Design, implement, and maintain security solutions including firewalls, SIEM, EDR, DLP, VPNs, IDS/IPS, and zero trust architecture.
· Provide technical expertise on encryption, authentication, cloud security, and secure network design.
· Conduct threat modeling and develop mitigation strategies for on-prem, cloud, and hybrid environments.
Monitoring & Incident Response
· Lead incident response efforts including triage, investigation, containment, eradication, and lessons learned.
· Maintain and tune threat detection systems (SIEM, EDR) to ensure actionable alerts and timely response.
· Conduct root cause analysis on security incidents and develop playbooks for repeatable, automated response.
Vulnerability & Risk Management
· Perform regular vulnerability assessments and penetration tests; track remediation and provide executive-level reporting.
· Conduct risk assessments and support audit activities (HIPAA, PCI-DSS, NIST, ISO 27001).
· Work with DevOps/IT to validate secure configurations, patch management, and system hardening.
Governance, Compliance & Training
· Develop and enforce security policies, procedures, and standards aligned to industry frameworks.
· Support compliance efforts across internal stakeholders and external auditors.
· Deliver security awareness and secure coding training to engineering and business teams.
Cross-Functional Collaboration
· Partner with IT, Legal, HR, and business units to align security initiatives with organizational goals.
· Participate in software development lifecycle (SDLC) and CI/CD pipeline reviews to ensure security-by-design.
· Advise procurement teams on security requirements for third-party vendors and SaaS solutions.
Qualifications
Required
· Bachelor’s degree in computer science, Information Security, or related field—or equivalent experience.
· Minimum 5–8 years in cybersecurity, with at least 2 years in a senior-level role.
· Strong understanding of networking, system administration (Windows/Linux), and cloud environments (Azure, AWS, or GCP).
· Deep knowledge of industry standards: NIST, CIS, MITRE ATT&CK, OWASP, ISO 27001.
· Hands-on experience with security platforms: SIEM (e.g., Splunk, Sentinel), EDR (e.g., CrowdStrike, Defender), and vulnerability scanners (e.g., Tenable, Qualys).
Preferred
· Certifications: CISSP, OSCP, GIAC (GSEC/GCIH/GCIA), CISM, or relevant cloud security certifications.
· Experience in regulated industries such as healthcare, finance, or government.
· Familiarity with Kubernetes, containers, Terraform/IaC, and DevSecOps practices.
Similar Jobs
Artificial Intelligence • Cloud • Sales • Security • Software • Cybersecurity • Data Privacy
Lead enterprise-scale service mesh implementation across AWS EKS clusters and hundreds of microservices. Establish Kubernetes standards, operate production infrastructure, improve GitOps and CI/CD automation, support PCI DSS compliance, mentor engineers, and drive reliability, observability, capacity planning, incident response, and global platform architecture for a 24/7 SaaS environment.
Top Skills:
Amazon EksAWSAws App MeshCi/CdGitopsGoGrafanaHelmIstioKubernetesLinkerdLinuxMtlsNetwork PoliciesOpensearchPci DssPod Security StandardsPrometheusPythonRbacTerraform
Artificial Intelligence • Cloud • Sales • Security • Software • Cybersecurity • Data Privacy
Manage post-acquisition integration programs and workstreams within SailPoint’s Integration Management Office. Responsibilities include creating integration plans, tracking milestones, dependencies, RAID logs, and TSA deliverables; coordinating cross-functional teams; supporting due diligence and Day 1 readiness; preparing executive status reports; improving integration playbooks; and leading complex integrations while managing budgets, risks, and synergies.
Top Skills:
ConfluenceJIRAMicrosoft ProjectSlack
Artificial Intelligence • Automotive • Greentech • Information Technology • Machine Learning • Software • Cybersecurity
Owns relationships and retention for a regional portfolio of automotive dealership clients. Drives product adoption, analyzes account performance, addresses at-risk relationships, identifies upsell opportunities, communicates client needs internally, and improves client processes. The role requires onsite and virtual engagements, product knowledge, independent work, and travel of up to 50% across Colorado, Arizona, Utah, and New Mexico.
Top Skills:
Microsoft SuiteScreen Sharing TechnologiesWeb-Based Systems
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
