Security Engineer

• Assist in the design, audit, and implement technical guardrails that protect our infrastructure and govern our data and AI systems.
• Actively contribute to the development of solutions addressing enterprise security and AI needs.
• Gain practical experience in implementing automated identity lifecycle management.
• Conduct security audits for both cloud and on-premises infrastructures.
• Establish data governance policies that enable the secure expansion of AI initiatives.

Cybersecurity & AI/Data Governance Intern

• Accountable for business growth, company market share and revenue increases.
• Coordinates all company sales activities in the area-of-control.
• Sets quota and goals for organizations.
• Develops tactics to generate new sales.
• Provides input to team on overall sales strategy, cost optimization, and disciplined process management.
• Ensures optimum sales coverage through direct and partner sales resources and different routes to markets.
• Develops sales resources and management talent to ensure a pipeline of qualified sales talent to support future growth.
• Implementation of master pipeline management.
• Builds lasting, consultative relationships with customer accounts.
• Proactive change management.
• Coach and support sales teams and leadership in developing key and/or difficult account opportunities.
• Builds long-term growth opportunities using the Account Business Planning process.
• Develops the consultative, solution selling capability in their organization to develop compelling business cases to differentiate and highlight the value of the company's broad portfolio.
• Ensures resource deployment encompasses end-to-end selling support.

North America Cybersecurity Sales Leader

• Lead enterprise-wide data-at-rest discovery, classification, and risk assessment initiatives across cloud, SaaS, structured, and unstructured data repositories
• Design and implement data security architectures leveraging platforms such as Varonis, BigID, Microsoft Purview, and similar DSPM (Data Security Posture Management) technologies
• Define onboarding, scanning, classification, and monitoring strategies to improve visibility into sensitive data locations, ownership, and exposure risks
• Partner with Data & AI, Cloud, Infrastructure, Application, Privacy, and Risk teams to develop remediation plans and reduce sensitive data exposure
• Establish data security standards, governance frameworks, and strategic roadmaps supporting enterprise data protection, AI adoption, and regulatory compliance
• Provide architecture leadership for data discovery, data classification, DSPM, AI data security, and data governance initiatives

Data Security Architect – VP

• Conducting technical and administrative tasks including preparing Risk Management Framework (RMF) artifacts
• Defining cybersecurity requirements
• Conducting cyber scans and generating associated reports for maintaining Authority to Operate (ATO) for multiple systems
• Managing the cyber team’s tasking using JIRA
• Working closely with the customer to define and prioritize the work across the Leidos and Government cyber teams
• Reporting to the program Technical Director and coordinating with program management, engineering staff, and customer stakeholders

Senior Cybersecurity Engineer

• Lead Secure Development Lifecycle practices, integrating threat modeling, static/dynamic analysis, fuzz testing, and formal verification into the development process.
• Work with R&D Engineering to define hardware security architecture, including trust zones, hardware root of trust (HRoT), and secure microcontroller protections.
• Implement memory safety strategies to mitigate buffer overflows, side-channel attacks, and execution vulnerabilities in real-time operating systems (RTOS) and bare-metal firmware.
• Respond to customer cybersecurity questionnaires and contractual language for post-market medical devices under your responsibility as necessary.

Principal Med Device Security Engineer

• Develop and maintain a multi-year roadmap for Platform Security capabilities including certificate lifecycle management, PKI infrastructure, secrets management, token security, and cryptographic compliance (FIPS 140-3, TLS modernization)
• Manage strategic decisions to ensure the highest impact from security engineering investments in a dynamic and fast-paced environment
• Lead product strategy for secure-by-default foundation services
• Drive security strategy for AI agent workloads and runtime environments
• Partner closely with engineering, architecture, compliance, and product teams to deliver security-critical outcomes
• Drive product development end-to-end
• Influence direction and elevate standards through clear roadmap narratives, technical proposals, and risk-impact evaluations
• Champion a platform-wide security culture focused on resilience, crypto-agility, and continuous improvement

Senior Staff Product Manager – Platform Security

• Develop and enhance security strategies to protect against emerging threats
• Deploy and manage SIEM, EDR, and cloud security technologies to monitor and respond to incidents effectively
• Lead or participate in security incident handling and response, including SOC operations and DFIR
• Enforce least privilege access principles and secure network architectures
• Support AI governance initiatives, including evaluating AI security risks, contributing to AI usage policies, and implementing controls for AI tools and integrations used across the organization
• Work autonomously while also thriving in a collaborative team environment
• Utilize defense-in-depth methodology to enhance and sustain a secure environment

Security Engineer – Corporate Security

• Develop and maintain Premonition, Comcast’s internal platform for managing, deploying, and composing agentic pipelines.
• Build a robust, scalable platform for LLM and agent driven workflows.
• Optimize the high-performance data layer supporting workflows, including storage formats, compression, latency, and query performance across large datasets.
• Work with large language models, orchestration frameworks, and cyber focused agentic pipelines.
• Partner closely with security operations, incident response, and threat hunting teams to translate real-world workflows into secure, composable, and observable agentic systems.

Cyber Security Engineer – AI & Agentic Platforms

• Working closely with Wikimedia movement organizers to mitigate risks and define best practices.
• Strengthening the Foundation’s risk management approach.
• Leading risk assessments for community conferences and other events.
• Creating emergency response plans for physical security threats.
• Being on-call to review emergency alerts and ensuring response to threats.
• Briefing the Deputy General Counsel and senior leadership regularly.

Principal, Global Event Security and Risk Management

• Owning our compliance program end to end: driving our annual SOC 2 Type 2 audits from evidence collection through auditor walkthroughs, and running Vanta as our governance home base year-round.
• Completing security questionnaires, addendums, and AI risk assessments for the IT and security teams at our hospital clients — and making sure they understand we're doing the right thing. (Health systems ask great, hard questions. You'll have great answers.)
• Running real BCDR tests and treating them like live incidents to find the gaps before the gaps find us.
• Coordinating annual pen tests and driving remediation of findings within SLA.
• Managing security across our stack: AWS, Heroku, Cloudflare, Google Workspace, GitHub, and our communication tools.
• Administering our laptop fleet for a fully remote team — imaging, shipping, MDM enrollment, inventory, and end-of-life — so every machine is encrypted, managed, and remotely wipeable.
• Running access reviews and enforcing least privilege: pruning admin lists, enforcing SSO and 2FA, and tuning password policies.
• Ensuring new employees get access to everything they need on day one, and departing ones are locked out the same day — partnering with HR and Finance on a tight onboarding/offboarding loop through Rippling and Google.
• Evaluating and securing AI tooling — from how our team uses Claude and MCP servers to partnering with engineering on customer questions about AI risk, bias testing, and model governance.
• Doing vendor management and procurement reviews, and finding savings while you're at it.
• Staying on top of the rapidly evolving AI threat landscape and adapting our defenses and team training as fast as the attackers adapt theirs.
• Playing professor and educating our team on everything security.
• Advising leadership on security matters during project planning, and working with our full stack engineers to ship improvements you identify.
• Being the savior in the event of a security incident — leading response, analysis, and the write-up afterward.
• Supporting co-workers when they manage to put their computers in a bad place. (They should enjoy talking to you, and you to them!)

Senior IT/Security Engineer – AI-native

• Ensure appropriate operational security posture is maintained for an information system.
• Work in close collaboration with the ISSM and ISO.
• Manage the security aspects of an information system.
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
• Monitor system recovery processes to ensure security features are restored and functioning.
• Coordinate changes or modifications to the system with the ISSM and AO/DAO.

Information Systems Security Officer III

• Partner with engineering and other cross-functional teams (cloud, console, pump, etc.) to drive successful adherence to J&J Heart Recovery's product security program.
• Deliver documentation for pre-market development activities including security plans, architecture and data flow diagrams, threat models, requirements, SBOM, and risk documentation.
• Define and implement key management infrastructure (PKI, HSMs, TPMs, and secure enclave integration) for device identity, authentication, and software signing.
• Monitor and drive post-market vulnerability management activities, with adherence to strict timelines.
• Support compliance certification activities, such as SOC2, FedRAMP, ISO 27001, etc.
• Identify, research, evaluate, and integrate new compliance requirements and industry standards/trends into the product security program.
• Guide teams to make decisions that balance business needs with security objectives.
• Thinks across organizational boundaries and empathizes with customers, both internal and external.
• Perform other related duties and responsibilities, as assigned.

Lead Product Security Engineer

• Responsible for implementation of J&J’s enterprise Product Security strategy and framework throughout the Heart Recovery portfolio of medical devices and supporting platforms.
• Provide technical expertise and strategic leadership in securing Impella heart pump technologies, next-generation cardiac support systems, and connected medical devices.
• Deliver security architecture, cryptographic controls, embedded system protections/controls, and threat mitigation techniques to ensure robust, regulatory-compliant security across the product lifecycle.
• Support heart recovery throughout a new product’s development phases.
• Review product security requirements and recommend security design solutions.
• Complete Quality documentation, threat modelling, coordinate third-party penetration testing, software architecture review and design recommendations, code analysis and other security testing work as needed.
• Monitor for new vulnerabilities, assisting with patching and remediation plans, as well as responding to customer security questionnaires and reviewing security language within contractual agreements as needed.
• Drive alignment to J&J Product Security’s overarching framework.
• Define and implement secure boot, firmware integrity validation, and anti-tamper mechanisms to protect Heart Recovery Device firmware against unauthorized modification.
• Enforce cryptographic protocols for data-at-rest and data-in-transit, ensuring compliance with FDA cybersecurity requirements, NIST 800-175, FIPS 140-3, and IEC 62443.
• Define and implement key management infrastructure (PKI, HSMs, TPMs, and secure enclave integration) for device identity, authentication, and software signing.
• Develop real-time vulnerability assessment techniques for detecting security flaws in wireless communications (Bluetooth LE, NFC, Wi-Fi, 5G, proprietary RF) used in Heart Recovery’s medical devices.
• Implement Zero Trust security for device-to-cloud connectivity, integrating mTLS and continuous authentication models into clinical applications.
• Oversee secure OTA (over-the-air) update mechanisms, ensuring firmware rollbacks, code signing, and supply chain integrity validation.
• Lead Secure Development Lifecycle practices, integrating threat modeling, static/dynamic analysis, fuzz testing, and formal verification into the development process.
• Work with R&D Engineering to define hardware security architecture, including trust zones, hardware root of trust (HRoT), and secure microcontroller protections.
• Implement memory safety strategies to mitigate buffer overflows, side-channel attacks, and execution vulnerabilities in real-time operating systems (RTOS) and bare-metal firmware.
• Respond to customer cybersecurity questionnaires and contractual language for post-market medical devices under your responsibility as necessary.

Principal Medical Device Security Engineer

• The Principal Product Security Engineer will be responsible for implementation of J&J’s enterprise Product Security strategy and framework throughout the Heart Recovery portfolio of medical devices and supporting platforms.
• This role will join Abiomed, part of Johnson & Johnson MedTech, to provide technical expertise and strategic leadership in securing Impella heart pump technologies, next-generation cardiac support systems, and connected medical devices.
• This role is responsible for delivering security architecture, cryptographic controls, embedded system protections/controls, and threat mitigation techniques to ensure robust, regulatory-compliant security across the product lifecycle.
• Specific responsibilities include supporting heart recovery throughout a new product’s development phases, review product security requirements and recommend security design solutions, complete Quality documentation, threat modelling, coordinate third-party penetration testing, software architecture review and design recommendations, code analysis and other security testing work as needed.
• Additionally, this position will have post market responsibilities for Heart Recovery marketed devices include monitoring for new vulnerabilities, assisting with patching and remediation plans, as well as responding to customer security questionnaires and reviewing security language within contractual agreements as needed.
• Drive alignment to J&J Product Security’s overarching framework.
• Support the Product Security strategy and objectives within Heart Recovery
• Define and implement secure boot, firmware integrity validation, and anti-tamper mechanisms to protect Heart Recovery Device firmware against unauthorized modification.
• Enforce cryptographic protocols for data-at-rest and data-in-transit, ensuring compliance with FDA cybersecurity requirements, NIST 800-175, FIPS 140-3, and IEC 62443.
• Define and implement key management infrastructure (PKI, HSMs, TPMs, and secure enclave integration) for device identity, authentication, and software signing.
• Develop real-time vulnerability assessment techniques for detecting security flaws in wireless communications (Bluetooth LE, NFC, Wi-Fi, 5G, proprietary RF) used in Heart Recovery’s medical devices.
• Implement Zero Trust security for device-to-cloud connectivity, integrating mTLS and continuous authentication models into clinical applications.
• Oversee secure OTA (over-the-air) update mechanisms, ensuring firmware rollbacks, code signing, and supply chain integrity validation.
• Lead Secure Development Lifecycle practices, integrating threat modeling, static/dynamic analysis, fuzz testing, and formal verification into the development process.
• Work with R&D Engineering to define hardware security architecture, including trust zones, hardware root of trust (HRoT), and secure microcontroller protections
• Implement memory safety strategies to mitigate buffer overflows, side-channel attacks, and execution vulnerabilities in real-time operating systems (RTOS) and bare-metal firmware.
• Respond to customer cybersecurity questionnaires and contractual language for post-market medical devices under your responsibility as necessary.

• Configure business operating environments securely using CIS best practices.
• Perform penetration testing and threat hunting to identify potential risks.
• Monitor for and respond to incidents in the Firm’s hybrid environment.
• Keep infrastructure current, making recommendations and continually improving security technologies.
• Analyze, design, and develop programs, shell scripts, tests, and infrastructure automation capabilities.
• Work with analysts and engineers across the organization to continually improve cyber resilience.
• Provide support to understand and develop system requirements and technical solutions for cybersecurity engineering based on system architectures (CIS Controls, MITRE ATT&CK Framework, and NIST Cyber Security Framework).
• Support the maturation of the enterprise architecture to align with the Firm’s information security and risks to the organizational operations, organizational assets, and individuals.
• Develop alternatives of system designs and/or architecture, which consider trade-offs between security requirements, functional/operational requirements, and cost.
• Identify and define the requirements of the overall security of the network.
• Plan, engineer, and monitor overall security implementation of network systems.
• Support in configuring and implementing network security tools.
• Test and provide solutions for system weaknesses, threats, and security issues.
• Research and identify latest suitable technologies and processes that will improve the overall security of the system.
• Regularly audit the existing network configuration and provide improvement recommendations.
• Other duties as assigned.

• Set the security standards and guardrails for the AI platform.
• Define the principles, reference architectures, and policy-as-code that all AI tooling at DraftKings adheres to, so that many teams can build agents and workflows while still meeting a consistent security bar.
• Focus on specifying the environment, infrastructure, and authentication methods agents rely on, rather than reviewing every individual implementation.
• Review and build the architecture of AI gateways and tooling.
• Provide security review, sign-off, and possibly pair on implementation of these systems, and the systems that they interface with.
• Make the security review process scale.
• Streamline how AI services move through InfoSec review on their way to production, so the bar stays high but does not become the bottleneck.
• Reduce AI-driven security noise.
• Partner with platform and detection teams on telemetry (tool-call metrics, auditing agents over that data) and on lightweight controls like standardized system prompts that cut unnecessary investigations without slowing engineers down.
• Drive remediation efforts of complex, cross-functional security issues. When relevant, you’ll be called into investigations to assist.
• Coach and raise the bar. Mentor security and platform engineers, lead technical and SME discussions on AI security, and elevate the team's overall capability in this space.

Staff Security Engineer, AI

• Own and optimize the Elastic Security platform (Elasticsearch, Kibana, Fleet, Logstash, Elastic Agents)
• Design and maintain ingestion pipelines for cloud, endpoint, network, and application telemetry
• Improve telemetry quality, data retention, performance, and investigation workflows
• Integrate SIEM workflows with SOAR and automation tooling
• Build and maintain a Detection-as-Code pipeline using Git-based workflows and CI/CD automation
• Develop, test, tune, and maintain high-fidelity detections using Elastic Security, EQL, and KQL
• Reduce alert noise through tuning, enrichment, suppression, and exception handling
• Map detections to MITRE ATT&CK and drive detection coverage strategy
• Assist with complex alert escalations and perform initial incident scoping
• Translate incident learnings into improved detections and telemetry coverage
• Partner with other teams to improve logging and visibility

Senior Security Engineer – Elastic SIEM, Detection Engineering

• Help define and evolve the vision for NinjaOne’s endpoint management and security capabilities.
• Contribute to and own key parts of the endpoint management and security roadmap.
• Drive product direction for features to identify security gaps, and remediate or protect against them.
• Work closely with engineering, design, support, and other stakeholders to bring new capabilities from concept to delivery.
• Engage with customers, MSPs, and internal teams to understand how endpoint management and security features are used in practice.
• Write clear product requirements, define workflows and edge cases, and ensure features are delivered to a high standard.
• Ensure capabilities work cohesively across NinjaOne and enable other product areas to build on top of them effectively.

Product Manager – Endpoint Management, Security

• Responsible for ensuring that Samsung Healthcare’s medical imaging devices are designed, developed and maintained to protect against cybersecurity threats throughout the product lifecycle.
• Responsible for cybersecurity risk management, secure product development, DoD Risk Management Framework (RMF) compliance, vulnerability management and support of FDA and other global cybersecurity regulatory requirements.
• Lead product cybersecurity incident response activities and coordinate technical escalations from customers, service teams and internal stakeholders.
• Maintain and support Department of Defense Risk Management Framework (RMF) compliance, including Authorization to Operate (ATO) packages, security documentation, continuous monitoring activities and Plan of Action & Milestones (POAM) management.
• Perform cybersecurity risk assessments, including asset identification, threat modeling, vulnerability analysis, and security control evaluation for medical devices.
• Collaborate with R&D teams to integrate cybersecurity throughout the secure software development lifecycle (SSDLC) and ensure traceability between cybersecurity requirements, risks, mitigations, verification activities and design documentation.
• Complete RFPs, RFQs, and security questionnaires during the sales process, and respond to customer cybersecurity inquiries.
• Support cybersecurity verification and validation activities, including penetration testing, vulnerability assessments, security testing and remediation verification.
• Coordinate vulnerability management activities including security advisories, CVE assessments, software bill of materials (SBOM) review, patch evaluation, remediation planning and security updates for all products.
• Engage customers, government agencies, and other stakeholders to ensure compliance with cybersecurity requirements and define best practices.
• Collaborate with sales and marketing to integrate cybersecurity as part of go-to-market strategy.
• Stay current on applicable security laws, regulations and industry standards.
• Maintain technical knowledge of Samsung Healthcare products and associated cybersecurity architecture.
• Work independently with minimal supervision, and collaboratively as part of a cross functional team.
• Effectively manage priorities while balancing technical, regulatory and business objectives.

Senior Product Cybersecurity Engineer

• Responsible for creating PAM (Privileged Access Management) solutions
• Develop a framework, roadmap, and program optimization
• Work on process engineering, risk remediation, and mitigation of operational risk
• Analyze competitive strategies, cyber technologies, metrics models, and performance indicators
• Report to the Senior Manager, Cybersecurity
• Collaborate with IT and business team to identify, assess, and mitigate cybersecurity risk
• Manage, analyze, and respond to changing system and data access needs

Security Engineer jobs in Massachusetts

See all jobs on JobTailor

Cybersecurity & AI/Data Governance Intern

North America Cybersecurity Sales Leader

Data Security Architect – VP

Senior Cybersecurity Engineer

Principal Med Device Security Engineer

Senior Staff Product Manager – Platform Security

Security Engineer – Corporate Security

Cyber Security Engineer – AI & Agentic Platforms

Principal, Global Event Security and Risk Management

Senior IT/Security Engineer – AI-native

Information Systems Security Officer III

Lead Product Security Engineer

Principal Medical Device Security Engineer

Principal Med Device Security Engineer

Security Engineer

Staff Security Engineer, AI

Senior Security Engineer – Elastic SIEM, Detection Engineering

Product Manager – Endpoint Management, Security

Senior Product Cybersecurity Engineer

Cybersecurity Engineer – PAM