Cybersecurity Engineer

VARITE is looking for a qualified Cybersecurity Engineer for one of its clients located in Westford, MA

WHAT THE CLIENT DOES?
A global leader in smart building technologies, energy solutions, and industrial automation. The company provides products and services that optimize energy efficiency, sustainability, and performance across buildings, industrial facilities, and vehicles.


WHAT WE DO?
Established in the Year 2000, VARITE is an award-winning minority business enterprise providing global consulting & staffing services to Fortune 1000 companies and government agencies. With 850+ global consultants, VARITE is committed to delivering excellence to its customers by leveraging its global experience and expertise in providing comprehensive scientific, engineering, technical, and non-technical staff augmentation and talent acquisition services.


Job Title: Cybersecurity Engineer
Duration: 12 months
Location: Westford, MA
Work Mode: Hybrid
Pay Rate Range: $60.00 - $64.00/hr on W2

HERE'S WHAT YOU'LL DO:

• We are seeking a skilled Cybersecurity Engineer with hands-on experience in product security including secure design principles, vulnerability scanning (SAST, SCA, DAST, etc.), penetration testing practices, compliance auditing (SOC 2, ISO 27001), and automation of security processes.
• The ideal candidate will help strengthen our security posture by identifying vulnerabilities, ensuring compliance, implementing automated security controls, and supporting product security across multiple applications and releases.

Key Responsibilities:

• Perform security scans (e.g., GitHub) using SCA, SAST, DAST, and dependency scanning tools.
• Coordinate and support penetration testing (internal and external), including validation of findings and remediation tracking.
• Support and manage SOC 2 and ISO 27001 audits, including evidence collection, control validation, and remediation tracking.
• Prepare audit-ready documentation and evidence artifacts (e.g., architecture diagrams, hardening guides, control logs, and supporting documentation).
• Design, implement, and maintain security automation workflows (e.g., CI/CD integration, automated scans, and workflow automation).
• Monitor and analyze vulnerabilities, perform contextual risk-based triage, and coordinate remediation with development and DevOps teams.
• Validate and reconcile findings across multiple security tools and maintain accurate dashboards and reporting.
• Develop and maintain security policies, standards, and procedures aligned with industry best practices.
• Collaborate with DevOps teams to integrate secure coding practices and DevSecOps pipelines.
• Drive secure SDLC practices, including threat modeling, cyber approval processes, and release security sign-off.
• Perform risk assessments and maintain risk registers.
• Assist in incident response, root cause analysis, and continuous improvement initiatives.
• Support multiple products and concurrent releases, ensuring consistent security posture and release readiness.
• Respond to customer cybersecurity questionnaires and inquiries.
• Collaborate cross-functionally to address and remediate any cybersecurity issues within policy defined SLA.
• Generate, validate, and maintain SBOMs (e.g., CycloneDX, SPDX).
• Support compliance with emerging regulatory requirements (e.g., CRA, supply chain security expectations).
• Manage and validate outputs from SAST, DAST, SCA, and vulnerability management tools.
• Maintain data consistency across security platforms and reporting dashboards.

WHAT YOU'LL NEED TO WIN:
Required Skills & Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
• 5-7 years of experience in cybersecurity or related role.

Hands-on experience with:

• Code scanning tools (e.g., SonarQube, CodeQL, or similar).
• SBOM tools and frameworks (e.g., CycloneDX, SPDX, or equivalent).
• Vulnerability management platforms (e.g., ArmorCode, Qualys, or similar).

Strong understanding of:

• SOC 2 compliance framework.
• ISO 27001 standards and controls.
• Secure SDLC practices and threat modeling.
• Vulnerability triage and contextual risk assessment.
• Product security considerations across on-prem and cloud deployments.
• Experience with automation and scripting (Python, PowerShell, Bash).
• Knowledge of integrating security controls into CI/CD pipelines.
• Familiarity with cloud environments (Azure preferred).
• Understanding of OWASP Top 10 vulnerabilities.
• Familiarity with regulatory and industry frameworks (e.g., NIST, CRA, software supply chain security).

Preferred Qualifications:

• Experience with DevSecOps practices.
• Familiarity with SIEM tools and security monitoring.
• Experience with container and Kubernetes security.
• Experience supporting customer-facing security reviews or external assessments.
• Experience working across multiple products or concurrent releases.
• Experience preparing audit evidence and compliance documentation.

Soft Skills:

• Strong analytical and problem-solving abilities.
• Excellent communication and documentation skills.
• Ability to work cross-functionally with engineering, compliance, and operations teams.
• Proactive mindset with attention to detail.
• Ability to translate complex security topics into clear, audit-ready and customer-facing language.

Nice-to-Have:

• Knowledge of threat modeling frameworks (STRIDE, MITRE ATT&CK).
• Experience managing third-party/vendor security assessments.
• Experience with SBOM automation or security data aggregation platforms.

If this opportunity interests you, please respond by clicking on EasyApply.


BENEFITS:
We offer a comprehensive benefits package designed to support the health, well-being, and financial security of our employees and their families. Eligible employees may receive:

• Health Insurance: Medical, dental, and vision coverage
• Retirement Plans: Participation in a company-sponsored retirement savings plan.
• Legal Service Plans: Offering access to attorneys for legal advice and representation.

Know someone who would be perfect for this role? Refer them to us and if they are hired, you could be eligible for our employee referral bonus! Help us grow our team with top talent from your network.
VARITE is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status