Security Engineer AWS / DevSecOps
Location: Boston, MA
Work Arrangement: Hybrid 3 Days Onsite
Experience: 7+ Years
Job Type: Contract
Job Summary
We are looking for an experienced Security Engineer with 7+ years of professional experience, including strong U.S. experience, to join our team in Boston. The ideal candidate will have a strong understanding of Security Engineering, Information Security, AWS, and DevSecOps practices, with hands-on experience integrating security into CI/CD pipelines and cloud environments.
Required Skills
7+ years of experience in Security Engineering / Information Security
7+ years of U.S. professional experience
Strong understanding of security engineering principles, application security, and information security
Strong hands-on experience with AWS required
Experience implementing and managing DevSecOps practices and security controls
Hands-on experience with Jenkins and CI/CD pipelines
Experience with GitHub Actions and integrating security into development workflows
Experience with application security tools such as:
Mend
Contrast Security
GitHub security capabilities
Experience integrating security scanning and testing into CI/CD pipelines
Understanding of SAST, SCA, DAST, vulnerability management, and secure software development practices
Ability to identify security vulnerabilities and recommend appropriate remediation
Strong understanding of cloud security concepts and best practices
Excellent communication, analytical, and problem-solving skills
Responsibilities
Design, implement, and maintain security controls across AWS cloud environments
Integrate security tools and processes into DevSecOps and CI/CD pipelines
Configure and manage security scanning tools such as Mend and Contrast
Implement security practices using Jenkins and GitHub Actions
Monitor vulnerabilities, security findings, and compliance issues and coordinate remediation
Work closely with development, DevOps, and infrastructure teams to embed security throughout the SDLC
Assess application and infrastructure security risks and provide recommendations
Support security automation and continuous security monitoring
Help establish and enforce secure coding and deployment practices
Troubleshoot security-related issues and contribute to continuous improvement of the organization's security posture
Preferred Qualifications
Experience with AWS security services and cloud security architecture
Experience with infrastructure/application security automation
Knowledge of security frameworks and secure SDLC methodologies
Relevant security certifications such as AWS Security Specialty, CISSP, Security+, or equivalent are a plus
