> Markdown version of [/jobs/ext/3552107-security-engineer](https://www.wearedevelopers.com/jobs/ext/3552107-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - **Company:** Suffolk Construction - **Location:** Boston, MA, United States - **Experience:** Experienced - **Salary:** $115,000.0 - $155,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Apple Mac Systems, Software System Penetration Testing, Microsoft Azure, Cloud Computing Security, Cyber Security, Information Systems, Linux, DevOps, Distributed Systems, Identity and Access Management, Information Security Management, Network Security, Microsoft Security Essentials, Software Vulnerability Management, Data Logging, Data Processing, Enterprise Software Applications, Delivery Pipeline, Information Technology, Data Analytics, Server Operating Systems & Platforms, Vulnerability Analysis - **Published:** October 2, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/18508787?backUrl=%2Fcareer%2F18508787%2FSecurity-Engineer-Massachusetts-Boston ## About the Role * Strong interpersonal skills, including collaboration, communication, negotiation, and mediation * Strong peer influence skills with the ability to enable secure solutions while maintaining effective working relationships with business partners. * Excellent written documentation ability, including the flexibility to deliver varied content to varied audiences * Demonstrated experience designing, installing, and configuring enterprise security solutions while meeting enterprise architecture, security, and privacy needs. * Technical foundation in systems security and network security. Experience with pen testing, security scanning, threat modeling, and incident management are desirable. * Familiarity and experience with industry standard enterprise security solutions such as Microsoft security tools, vulnerability management platforms, cloud security platforms, and security monitoring solutions. * Familiarity and experience with information security frameworks (NIST, ISO 27001, etc.) and understanding of security configuration guides (DISA STIG, CIS, etc.) * Familiarity and experience with current regulatory and contractual security requirements and the ability to support organizational compliance efforts, including PCI, MA 201 CMR 17.00, CCPA, HIPAA, and similar requirements. * Strong working knowledge of endpoint and server operating systems (e.g. Windows, MacOS, Linux) and relevant security risks, controls, and vulnerabilities. * Strong collaboration skills with development, engineering, and DevOps teams, enabling the successful integration of security requirements, controls, and automation into software delivery pipelines., * BS degree in computer science, information systems management, or a related technical discipline or the equivalent combination of education, technical training, or work/military experience. * At least one industry certificate is desirable (CISSP, CISA, etc.) * 3+ years of experience with enterprise information security, preferably within complex organizations. * 3+ years of experience with enterprise cloud-based solutions (Azure, AWS, etc.) * 3+ years of experience with large, distributed systems. * At least 5 years of relevant work experience in IT and/or information security required, including hands-on experience supporting enterprise systems, security tools, or security operations. * Project management and audit experience desired. Working Conditions While performing the duties of this job, the employee is regularly required to sit for long periods of time; talk or hear; perform fine motor, hand and finger skills in the use of a keyboard, telephone, or writing. The employee is frequently required to stands; walk; and reach with arms and/or hands. Specific vision abilities include close vision, distance vision, depth perception and the ability to adjust focus. The employee will spend their time in an office environment with a quiet to moderate noise level. Job site walking. EEO Statement ## Description Roles and Responsibilities Diagnose and solve Level 2 issues related to security configurations and platforms as escalated by Level 1 support * Support standards for the classification, administration, and lifecycle management of Suffolk data, including helping apply established data handling requirements across systems and business processes. * Serve as a key security resource for Suffolk corporate applications by helping assess risks, support secure configurations, review access controls, and coordinate remediation with application owners and technical teams. * Participate in independent security audits, vulnerability scans, and penetration tests on Suffolk infrastructure to ensure confidentiality, integrity, and availability of Suffolk data. * Help enforce Suffolk identity and access management policies and procedures for on-premises and cloud-based services by supporting access reviews, role-based access controls, privileged access controls, secure authentication practices, and remediation of access-related findings. * Support identity manageability, access governance, provisioning, security, and privacy. Implement and manage solutions for secure identity through third-party providers. * Provide operational assistance with vulnerability scanning, gap analysis, and security initiatives. Monitor findings, validate risk and ownership, triage remediation priorities, track corrective actions, and report progress for Suffolk systems. * Help identify, investigate, and resolve security issues from development through operations by collaborating with application, infrastructure, service desk, and business teams to understand root causes, document findings, and coordinate practical remediation. * Maintain Suffolk information security dashboards, review security metrics, and perform risk analysis to help management understand trends, prioritize remediation, and track progress against security initiatives. * Support Suffolk's enterprise security systems and manage comprehensive, data-driven review processes to enhance critical security infrastructure * Mentor Help Desk Analysts, developing skillsets through exposure to security administration while promoting Suffolk information security standards. * Remain informed about evolving security challenges in IT and how they affect Suffolk. Maintain an understanding of the current threat and attack landscape, latest security trends, and Suffolk information systems. * Support Suffolk's information security posture in accordance with Suffolk's evolving business requirements by contributing to security operations, control improvements, and risk reduction initiatives. * Apply security controls and operational practices across enterprise cloud environments, including identity configuration, logging and monitoring, secure access, vulnerability remediation, and support for cloud workload protection in Azure, AWS, or similar platforms.