Security Assurance Engineer

Boston, MassachusettsHybridContract$70/hr - $90/hrThis opportunity is with a public-sector organization supporting economic development and regulatory modernization initiatives across Massachusetts. Based in Boston, this is a long-term contract engagement focused on application security, cloud security, vulnerability management, and security assurance for large modernization programs involving AWS, Salesforce, AI-enabled solutions, and public-facing digital services. The role follows a hybrid schedule, requiring onsite attendance in Boston, including a minimum of three days per week during the first 90 days and typically two to three days per week thereafter.This is an excellent opportunity for a security professional who enjoys being embedded within project delivery teams rather than working solely in operational security. The engineer will influence security decisions from design through deployment, collaborate with developers, architects, project managers, and vendors, and help drive secure modernization efforts across cloud, AI, and citizen-facing applications.

Candidates who thrive in environments that blend hands-on security engineering, vulnerability remediation, risk analysis, and stakeholder engagement will be particularly successful in this role.Contract Duration: October 2026 - June 2027 (approximately 8.5 months)Required Skills & Experience5+ years of experience in application security, cloud security, product security, security engineering, or a related fieldExperience defining security requirements and reviewing application architectures, integrations, data flows, and technical controlsStrong background coordinating and evaluating SAST, DAST, penetration testing, and vulnerability assessmentsExperience performing vulnerability triage, risk analysis, remediation planning, and validation of corrective actionsHands-on experience with AWS cloud environmentsWorking knowledge of Salesforce-based applicationsExperience using Tenable, Veracode, GitHub, Jira, and related security toolingKnowledge of identity management, logging, infrastructure security, deployment controls, and data protection practicesExperience documenting security findings, residual risk decisions, and production-readiness assessmentsStrong communication skills with both technical and non-technical stakeholdersBachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field, or equivalent experience with a security certification such as CISSPDesired Skills & ExperienceExperience securing public-facing applications and regulated environmentsExperience with cloud modernization and legacy application transformation initiativesExperience assessing AI solutions, Retrieval-Augmented Generation (RAG) architectures, large language models (LLMs), and AI voice technologiesKnowledge of prompt injection, retrieval poisoning, data leakage, jailbreak testing, and AI red-team exercisesFamiliarity with NIST security frameworksExperience working with managed security service providers (MSSPs)Public-sector, government, financial services, or consumer protection experienceRelevant certifications including CISSP, CCSP, CSSLP, or similar security credentialsExperience using GitHub Copilot or approved AI-assisted security testing toolsWhat You Will Be DoingDefine security requirements, control objectives, implementation criteria, and release-readiness standardsReview application architectures, integrations, AWS environments, Salesforce platforms, AI services, databases, identity systems, and logging solutionsConduct security risk assessments and document mitigation strategiesCoordinate SAST, DAST, penetration testing, and vulnerability scanning effortsAnalyze and triage findings from Veracode, Tenable, GitHub, penetration tests, and other security assessment toolsDevelop remediation plans and partner with engineering teams to drive resolutionVerify vulnerability closure through retesting and evidence validationPerform security reviews of AI-enabled applications, RAG pipelines, and LLM-based servicesExecute adversarial testing, red-team assessments, jailbreak testing, and guardrail evaluationsCollaborate with security teams, project managers, developers, vendors, and managed service providersPrepare risk documentation, testing evidence, security reports, and production-readiness assessmentsSupport modernization initiatives involving licensing systems, reporting platforms, citizen service portals, complaint management solutions, and AI-assisted workflowsTech BreakdownAWS Cloud SecuritySalesforce SecurityVeracode (SAST/DAST)Tenable CloudGitHub & GitHub CopilotJiraAI Security (LLMs, RAG Architectures, Voice AI)Identity & Access ManagementApplication Security TestingVulnerability ManagementRisk Analysis & Security AssuranceYou will receive the following benefits:Medical Insurance - Four medical plans to choose from for you and your familyDental & Orthodontia BenefitsVision BenefitsHealth Savings Account (HSA)Health and Dependent Care Flexible Spending AccountsVoluntary Life Insurance, Long-Term & Short-Term Disability InsuranceHospital Indemnity Insurance401(k) including match with pre and post-tax optionsPaid Sick Time LeaveLegal and Identity Protection PlansPre-tax Commuter Benefit529 College Saver PlanMotion Recruitment Partners (MRP) is an Equal Opportunity Employer. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under MRP’s Employment Accommodation policy.