Senior Information Security Engineer

Location: Assembly Row, Somerville, MA • Hybrid - 1 day per week onsite, with occasional additional onsite days based on business needs

About The Role

We are seeking an Information Security Engineer III to join an enterprise Information Security Architecture team. This is a senior-level role focused on evaluating a broad range of technologies, business initiatives, operational processes, and strategic projects to identify security risks and provide practical, risk-based guidance. The ideal candidate is someone who can quickly understand complex and unfamiliar technology environments, analyze security implications, and clearly communicate recommendations to senior leadership and business stakeholders.

The strongest candidates will not simply identify security risks—they will be able to quickly understand the environment, determine what matters, develop a practical recommendation, and explain it clearly to the people responsible for making the decision.

Top 3 Qualifications

• Strong analytical ability across a broad technology landscape: Ability to evaluate a wide range of technologies, systems, business initiatives, and operational processes and identify meaningful cybersecurity risks.
• Exceptional communication skills: Ability to clearly communicate complex technical concepts, security risks, recommendations, and tradeoffs both verbally and in writing to senior leadership and business owners who may not have the same level of technical expertise. Ability to do both quickly and effectively.
• Strong judgment and the ability to rapidly understand unfamiliar technologies and business challenges, assess risk, and develop practical recommendations.

Responsibilities

• Evaluate technologies, business initiatives, operational processes, and proposed solutions to identify security risks.
• Perform security assessments, architecture reviews, risk analyses, and technology evaluations.
• Quickly assess unfamiliar technologies and understand their security implications.
• Develop practical, risk-based recommendations and appropriate security controls.
• Partner with technical teams, business stakeholders, vendors, project leaders, and security professionals.
• Research emerging technologies, evolving threats, regulatory requirements, and industry practices.
• Develop security assessments, recommendations, standards, reports, and other written deliverables.
• Communicate technical risks, tradeoffs, and recommendations to engineers, project teams, business leaders, and senior leadership.
• Present findings, facilitate discussions, answer questions, and help build stakeholder consensus.
• Serve as a trusted cybersecurity advisor to business and technology teams.
• Contribute to security standards, methodologies, assessment processes, and best practices.
• Mentor junior and mid-level security professionals.
• Lead or contribute to cross-functional technical initiatives.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field; equivalent experience may be considered.
• 5-7 years of experience in systems engineering, security engineering, security architecture, cybersecurity consulting, or a related field.
• Strong understanding of cybersecurity principles, risk management, and security frameworks.
• Experience performing security assessments, architecture reviews, risk analyses, technology evaluations, or similar analytical work.
• Ability to identify complex security issues and develop practical recommendations.
• Strong understanding of enterprise technology environments, including familiarity with:
  • Cloud platforms
  • Identity and access management
  • Networking
  • Applications
  • Infrastructure
  • Security operations
  • Emerging technologies
• Knowledge of Zero Trust, least privilege, defense-in-depth, data protection, secure software development, threat modeling, and vulnerability management.
• Strong written and verbal communication skills.
• Strong analytical, critical-thinking, and problem-solving abilities.
• Ability to work effectively in complex and ambiguous environments.
• Experience mentoring junior professionals and/or leading cross-functional initiatives.

Schedule

Monday-Friday, either 8:00 AM-4:00 PM or 9:00 AM-5:00 PM, with flexibility.

Pay

$93,953.60-$136,739.20 annually, with flexibility toward the higher end for candidates with approximately 6-8 years of experience. Candidates with additional relevant experience may be considered at a higher level.

Benefits

• Comprehensive benefits package, including:
  • Medical, prescription, dental, and vision insurance
  • AD&D and life insurance
  • Short-term disability
  • 401K plan (all benefits are based on eligibility)