Security Engineer

• Threat model Snyk’s cloud infrastructure across GCP and AWS
• Identify security requirements and negotiate changes with platform teams
• Use AI coding agents to draft Terraform, Kubernetes, and pipeline security fixes
• Raise infrastructure changes for owning teams to review and merge
• Run agent-driven fixes across many repositories
• Write and maintain agent guidance, prompts, instruction files, and security baselines
• Connect agents to live cloud, CSPM, and ticketing data through MCP servers, CLI tools, and provider APIs
• Review AI-generated infrastructure changes for invented resources, unsafe defaults, and excessive IAM permissions
• Harden GCP and AWS identity and access management
• Improve Kubernetes and container security, primarily on GKE
• Add automated security testing and CSPM tooling to CI/CD and GitOps pipelines
• Benchmark infrastructure against CIS Google Cloud Foundation Benchmark, ISO 27001, and NIST 800-53 controls
• Limit risks introduced by AI agents, including prompt injection, excessive permissions, leaked secrets, and unreviewed changes
• Measure and improve the effectiveness of agent-driven security fixes across teams

Senior Product Security Engineer

• Coordinate with Oxfam International InfoSec, affiliate infrastructure teams, local and international business units, staff, business applications managers, vendors and consultants
• Lead and maintain the stability, security and scalability of Oxfam’s IT systems
• Manage day-to-day IT infrastructure operations and coordinate with the Managed Security Services Provider
• Monitor, report on and resolve cybersecurity threats and vulnerabilities
• Lead security incident response, including investigation, documentation, analysis and remediation
• Maintain compliance with security policies, standards, data privacy and acceptable-use guidelines
• Manage firewalls, VPN access and other security infrastructure
• Perform vulnerability scans, penetration tests and remediations
• Manage backup and disaster recovery plans for office and cloud infrastructure
• Conduct regular security audits and assessments
• Maintain IT infrastructure documentation, network diagrams, system architecture, configuration standards, asset inventories and procedures
• Oversee on-premise and cloud infrastructure, network devices, servers and backups
• Administer Microsoft Intune, endpoint protection, device provisioning, configuration, compliance and lifecycle management
• Manage and support the O365 environment for OUS
• Oversee patch management across servers, endpoints and network devices
• Optimize AV equipment and conference room technology for hybrid and in-person meetings
• Troubleshoot system performance issues and lead upgrades and improvements
• Lead the helpdesk team, ticket management and escalation support
• Implement and optimize end-user tools, account provisioning and access controls
• Assess and procure IT hardware and software
• Collaborate with vendors on quotes, negotiations and recommendations
• Maintain IT asset inventories and manage asset lifecycles

Manager, Cybersecurity and Infrastructure

• Serve as principal advisor on security matters for information systems under purview
• Provide day-to-day support for Collateral, SCI, and SAP activities
• Oversee development, implementation, and evaluation of information system security program policy
• Integrate existing SAP network infrastructures
• Develop and oversee RMF- and JSIG-based network security policies and authorization processes
• Advise customers and government program managers on RMF assessments, authorization issues, security testing methodologies, and processes
• Perform risk assessments and make recommendations to DoD agency customers
• Evaluate authorization documentation and provide written recommendations to government PMs
• Develop and maintain the formal Information Systems Security Program
• Train IAOs, network administrators, and cybersecurity personnel
• Develop, review, endorse, and recommend action on system assessment documentation
• Establish procedures for clearing, sanitizing, and destroying hardware and media
• Develop and execute security assessment plans
• Maintain repositories for system authorization documentation and modifications
• Institute and implement a Configuration Control Board charter
• Develop incident response policies and procedures, including investigation and reporting
• Ensure corrective measures are taken for incidents and vulnerabilities
• Establish data ownership, accountability, access rights, and special handling requirements
• Develop and implement security education, training, and awareness programs
• Evaluate threats and vulnerabilities and determine additional safeguards
• Assess system and environmental changes affecting authorization
• Ensure valid authorization determinations for authorization boundaries
• Review AIS assessment plans
• Coordinate approval of external information systems with security officials
• Conduct periodic security posture assessments
• Ensure configuration management for security-relevant software, hardware, and firmware changes
• Ensure periodic security testing using intrusion, attack detection, and monitoring tools
• Monitor system recovery and reconstitution processes
• Keep authorization documentation current and accessible
• Ensure security requirements are addressed throughout the system life cycle
• Develop Assured File Transfers in accordance with JSIG
• Participate in self-inspections
• Perform ISSO duties when an ISSO is unavailable

Information Systems Security Manager I

• Provide multi-discipline security support for one or more customer Special Access Programs
• Perform day-to-day security analysis for Collateral, SCI, and SAP activities
• Ensure adherence to NISPOM, its Supplement, DoD Overprint, DCID, ICD, and SAP policy
• Develop and execute policies and procedures for safeguarding SAP, SCI, and collateral data
• Assess procedures, identify shortfalls, and recommend improvements to security policies, procedures, and systems
• Identify vulnerabilities, threats, and risks to test, training, and operational activities
• Develop, implement, and train the Operations Security program
• Provide contractor and subordinate facility assistance and oversight
• Brief government and senior civilian personnel on security topics
• Conduct and document SAP facility compliance reviews, follow-on reviews, and close-outs
• Monitor, report, and track corrective actions from compliance reviews
• Notify program technical and management staff of pertinent security matters
• Investigate loss, compromise, or suspected compromise of classified or sensitive information and prepare damage assessments
• Coordinate lessons learned for the SAP security education and awareness curriculum

Program Security Representative II

• Lead Risk Management Framework (RMF), Assessment and Authorization, continuous monitoring, vulnerability management, incident response support, security control implementation, and cybersecurity compliance activities
• Develop accreditation packages, security documentation, plans of action and milestones, and risk assessments
• Advise leadership on cybersecurity posture
• Ensure compliance with Department of Defense and Air Force cybersecurity requirements

Senior Cyber Security Specialist

• Serve as principal advisor on technical and other matters involving information systems security
• Provide day-to-day support for Collateral, SCI, and SAP activities
• Oversee development, implementation, and evaluation of information system security program policy
• Integrate existing SAP network infrastructures
• Develop and oversee RMF- and JSIG-based network security implementation policies and guidelines
• Advise customers and government program managers on RMF assessment, authorization, security testing, and process issues
• Perform risk assessments and recommend safeguards to DoD agency customers
• Evaluate authorization documentation and provide written recommendations to government program managers
• Develop and maintain a formal Information Systems Security Program
• Ensure IAOs, network administrators, and cybersecurity personnel receive required training
• Develop, review, endorse, and recommend action on system assessment documentation
• Establish procedures for clearing, sanitizing, and destroying hardware and media
• Develop and execute security assessment plans and verify required protection features and assurances
• Maintain repositories for authorization documentation and modifications
• Institute and implement a Configuration Control Board charter
• Develop incident response policies and procedures, including investigation and reporting
• Ensure protection or corrective measures are implemented for incidents and vulnerabilities
• Establish data ownership, accountability, access rights, and special handling requirements
• Develop and implement security education, training, and awareness programs
• Evaluate threats and vulnerabilities and assess system or environmental changes affecting authorization
• Ensure valid authorization determinations for all authorization boundaries under purview
• Review AIS assessment plans
• Coordinate approval of external information systems with PSO or cognizant security officials
• Conduct periodic security posture assessments
• Ensure configuration management for security-relevant software, hardware, and firmware changes
• Ensure periodic testing using intrusion, attack detection, and monitoring tools
• Monitor system recovery and reconstitution processes
• Keep authorization documentation current and accessible to authorized individuals
• Ensure security requirements are addressed throughout the system life cycle
• Develop Assured File Transfers in accordance with JSIG
• Participate in self-inspections
• Perform ISSO duties when an ISSO is unavailable

Information Systems Security Manager – Level I

• Serve as principal advisor on security matters for information systems under purview
• Provide day-to-day support for Collateral, SCI, and SAP activities
• Oversee development, implementation, and evaluation of information system security program policy
• Integrate existing SAP network infrastructures
• Develop and oversee RMF- and JSIG-based network security implementation policies and authorization processes
• Advise customers and government program managers on RMF assessments, authorization issues, security testing methodologies, and processes
• Perform risk assessments and make recommendations to DoD agency customers
• Evaluate authorization documentation and provide written authorization recommendations
• Develop and maintain a formal Information Systems Security Program
• Train IAOs, network administrators, and cybersecurity personnel
• Develop, review, endorse, and recommend action on system assessment documentation
• Establish procedures for clearing, sanitizing, and destroying hardware and media
• Develop and execute security assessment plans
• Maintain repositories for system authorization documentation and modifications
• Institute and implement a Configuration Control Board charter
• Develop incident-response policies and procedures, including investigation and reporting
• Ensure corrective measures and protections are implemented for incidents and vulnerabilities
• Establish data ownership, accountability, access rights, and special handling requirements
• Develop and implement information security education, training, and awareness programs
• Evaluate threats and vulnerabilities and determine additional safeguards
• Assess system and environmental changes affecting authorization
• Ensure valid authorization determinations for authorization boundaries
• Review AIS assessment plans
• Coordinate approval of external information systems with PSO or cognizant security officials
• Conduct periodic security-posture assessments
• Ensure configuration management for security-relevant software, hardware, and firmware changes
• Ensure periodic intrusion, attack-detection, and monitoring testing
• Monitor system recovery and reconstitution processes
• Keep authorization documentation current and accessible
• Ensure security requirements are addressed throughout the system life cycle
• Develop Assured File Transfers in accordance with JSIG
• Participate in self-inspections
• Perform ISSO duties when an ISSO is unavailable

Information Systems Security Manager – II

• Check identification of visitors and verify sponsorship and clearance through DISS or a local database
• Determine visitor access needs, log visitors, issue badges, and notify hosts
• Prevent prohibited items from entering the facility
• Assist with inspecting bags and hand-carried items
• Receive and distribute packages according to facility SOPs
• Check personnel access badges
• Perform emergency procedures for bomb threats, active shooters, force protection, anti-terrorism, fire evacuation, and other emergencies
• Account for logs, instructions, equipment, and badges at the beginning and end of each workday
• Assist with personnel, information, program security, and entry control functions
• Conduct random inspections of site areas and report suspicious materials or incidents
• Operate and maintain control of the Secure Storage Area
• Screen non-cleared workers, vehicles, and equipment entering or exiting the project site
• Follow and enforce customer SOPs
• Perform miscellaneous administrative support as directed
• Inspect and document materials delivered for secure-space construction

Security Engineer jobs in Massachusetts