We are looking for a Security Assurance Engineer to join a large-scale public-sector technology modernization initiative in Boston, MA. This is a contract opportunity with a hybrid schedule, requiring 3 days onsite per week for the first 90 days and 2 days onsite thereafter. The role will focus on application security, cloud security, vulnerability management, security testing, and release readiness across AWS, Salesforce, GitHub, Jira, Tenable, Veracode, and AI-enabled applications.
This is a great opportunity for a security engineer who wants to be involved throughout the full project lifecycle rather than coming in after the fact to review vulnerabilities. You'll work directly with application, cloud, development, architecture, testing, and project teams to build security into two major modernization initiatives from design through deployment. The environment includes public-facing applications, cloud integrations, Salesforce, AI/LLM solutions, RAG pipelines, and sensitive data, giving you exposure to a wide range of modern security challenges. The ideal person will be hands-on, comfortable working independently, and able to communicate technical risk clearly to both technical and non-technical stakeholders.
Contract Duration: 6-12 Months, with the project currently running through June 2027 and potential for extension
Required Skills & Experience
5+ years of experience in application security, cloud security, product security, security engineering, or a related field
Experience defining security requirements and reviewing application architectures, data flows, integrations, and technical controls
Experience with SAST, DAST, penetration testing, vulnerability scanning, vulnerability triage, and remediation
Strong experience with risk analysis, remediation planning, and tracking security findings through closure
Hands-on experience with Jira and GitHub
Experience with cloud and application security, preferably AWS
Experience working with SaaS applications, APIs, identity, data protection, logging, and deployment controls
Ability to coordinate security initiatives across engineering, development, architecture, vendors, testing teams, and project leadership
Strong communication and documentation skills
Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, or equivalent experience
Desired Skills & Experience
Experience with Workday, Salesforce, or other large enterprise SaaS platforms
Experience with Tenable Cloud and/or Veracode
Experience with GitHub Copilot or other approved AI-assisted security tools
Experience securing AI/LLM applications, RAG pipelines, or voice/AI models
Knowledge of prompt injection, data leakage, retrieval poisoning, jailbreaks, and AI guardrails
Experience with AWS security and cloud-native applications
Knowledge of NIST security frameworks
Experience in public-sector, financial services, consumer protection, or another regulated environment
CISSP, CCSP, CSSLP, or comparable security certification
Experience with legacy application modernization, cloud migrations, and complex integrations
What You Will Be Doing
Tech Breakdown
25% Application & Cloud Security
20% Vulnerability Management & Security Testing
15% AI/LLM Security & Adversarial Testing
15% Risk Analysis & Security Controls
15% Remediation & Release Readiness
10% Security Documentation & Reporting
Daily Responsibilities
35% Hands-On Security Engineering - vulnerability triage, security testing, architecture reviews, control implementation, remediation validation, and AI security testing
25% Risk & Release Readiness - assessing findings, developing remediation plans, validating closure, and supporting go-live decisions
25% Team Collaboration - partnering with developers, architects, project teams, vendors, testing teams, and security stakeholders
15% Documentation & Reporting - maintaining security evidence, risk decisions, remediation status, and project reporting
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
- Dice Id: 10105282
- Position Id: 892070
- Posted 2 hours ago
