> Markdown version of [/jobs/ext/4635498-sr-security-engineer-ii](https://www.wearedevelopers.com/jobs/ext/4635498-sr-security-engineer-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr. Security Engineer II

- **Company:** Hi Marley
- **Location:** Boston, MA, United States
- **Experience:** Expert
- **Salary:** $121,000 - $200,000
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Intrusion Detection and Prevention, Python (Programming Language), Security Information and Event Management, Software Vulnerability Management, Large Language Models, Generative AI, Agentic-AI, Terraform
- **Published:** November 8, 2026
- **Apply:** https://www.juju.com/job/16_fddc76504

## About the Role

* 5+ years in security engineering, cloud security, or infrastructure security, including leading threat modeling and design reviews
 * Hands-on experience securing AWS and corporate identity, plus strong Python and security controls built as code with Terraform or similar
 * A track record running vulnerability management and producing audit evidence for SOC 2, ISO 27001, or a similar framework, and explaining risk clearly to engineers and auditors alike
 * Real interest in how AI changes the attack surface, and able to work from our Boston office 3 days a week

Nice to Have

 * Experience securing LLM-based systems, agent frameworks, or MCP connectors
 * Familiarity with ISO/IEC 42001 or the NIST AI RMF
 * Detection engineering or SIEM experience in cloud and SaaS environments

## Description

Our teams are building LLM integrations, agents, and MCP connectors into the tools they use every day, and you'll make sure they do it securely. You'll work side by side with the people building those tools, shaping the security architecture of our corporate and cloud environment and writing the guardrails that let teams move quickly without reinventing controls. You don't need to be an AI security specialist. If you think in systems, write real code, and want to learn the AI attack surface by doing, you'll love this role.

We spend Mondays, Tuesdays, and Thursdays together in our Boston office to connect, collaborate, and learn from one another. Recurring meetings generally fall between 9:30am and 4:30pm, allowing flexibility around the start and end of your day. Wednesdays and Fridays are remote.
What You'll Do

 * Shape the security architecture of our corporate and cloud environment, from identity and SaaS configuration to the AWS accounts behind our business and AI tools
 * Build guardrails as code with Terraform and policy tooling, and lead threat modeling and design reviews before new tools go live
 * Secure our agentic workloads with isolation, scoped credentials, and data boundaries, and help test them against risks like prompt injection
 * Design controls that produce audit evidence by default for our SOC 2 Type II and ISO 42001 programs