Security Engineer

Responsibilities

• Harden and maintain cloud, endpoint, and software environments across AWS GovCloud and Microsoft GCC High.
• Investigate and remediate vulnerabilities, including container, image, dependency, and CI/CD security issues.
• Generate and manage software bills of materials, artifacts, and dependencies to improve supply chain security.
• Lead threat modeling sessions using methodologies such as STRIDE and PASTA.
• Build and maintain infrastructure as code using Terragrunt and Terraform.
• Automate configuration management, patching, and policy enforcement for networks, servers, and endpoints.
• Monitor security events with cloud-native alerting services and SIEM tools.
• Collaborate with product, platform, and compliance teams to embed security in the software development lifecycle.
• Support incident response and post-incident reviews, growing toward leading these efforts over time.

Requirements

• Demonstrated coding skills in Python or Rust.
• Knowledge of container and CI/CD security, including Kubernetes, image hardening, and vulnerability scanning.
• Experience with supply chain security, including SBOMs, artifact generation, and dependency management.
• Experience securing government cloud environments, especially AWS GovCloud, and ensuring compliance with federal security requirements.
• Practical exposure to CMMC, NIST 800-53, and FedRAMP security frameworks.
• Hands-on experience with AWS GuardDuty, AWS Security Hub, Azure Defender, or comparable cloud-native incident alerting services.
• Experience monitoring security events using Microsoft Sentinel, Splunk, or comparable SIEM tools.
• Must be eligible to obtain a DoD security clearance.
• U.S. citizenship is required.
• Ability to work in the Boston office at least three days per week.