Security Engineer AWS / DevSecOps

Security Engineer AWS / DevSecOps

Location: Boston, MA
Work Arrangement: Hybrid 3 Days Onsite
Experience: 7+ Years
Job Type: Contract

Job Summary

We are looking for an experienced Security Engineer with 7+ years of professional experience, including strong U.S. experience, to join our team in Boston. The ideal candidate will have a strong understanding of Security Engineering, Information Security, AWS, and DevSecOps practices, with hands-on experience integrating security into CI/CD pipelines and cloud environments.

Required Skills

7+ years of experience in Security Engineering / Information Security

7+ years of U.S. professional experience

Strong understanding of security engineering principles, application security, and information security

Strong hands-on experience with AWS required

Experience implementing and managing DevSecOps practices and security controls

Hands-on experience with Jenkins and CI/CD pipelines

Experience with GitHub Actions and integrating security into development workflows

Experience with application security tools such as:

Mend

Contrast Security

GitHub security capabilities

Experience integrating security scanning and testing into CI/CD pipelines

Understanding of SAST, SCA, DAST, vulnerability management, and secure software development practices

Ability to identify security vulnerabilities and recommend appropriate remediation

Strong understanding of cloud security concepts and best practices

Excellent communication, analytical, and problem-solving skills

Responsibilities

Design, implement, and maintain security controls across AWS cloud environments

Integrate security tools and processes into DevSecOps and CI/CD pipelines

Configure and manage security scanning tools such as Mend and Contrast

Implement security practices using Jenkins and GitHub Actions

Monitor vulnerabilities, security findings, and compliance issues and coordinate remediation

Work closely with development, DevOps, and infrastructure teams to embed security throughout the SDLC

Assess application and infrastructure security risks and provide recommendations

Support security automation and continuous security monitoring

Help establish and enforce secure coding and deployment practices

Troubleshoot security-related issues and contribute to continuous improvement of the organization's security posture

Preferred Qualifications

Experience with AWS security services and cloud security architecture

Experience with infrastructure/application security automation

Knowledge of security frameworks and secure SDLC methodologies

Relevant security certifications such as AWS Security Specialty, CISSP, Security+, or equivalent are a plus