manager, security engineering

security officer

architecture project lead

director, solutions engineering Jobs in Boston

director, solutions engineering

enterprise solutions engineer (pre-sales) Jobs in Boston

security team lead

Windwalker Group

<div>
 
 About Windwalker Group
 
 
 
 
 
 Windwalker Group
 
 
 is an award-winning, Minority-Owned business with over 25 years of experience delivering innovative solutions to help organizations grow, thrive, and achieve lasting success. Guided by our commitment to excellence, we specialize in security and preparedness, professional development, and cutting-edge technology solutions.
 
 
 
 Our Diverse Offerings Include
 
 
 
 <ul>
 <li>
 Building security design
 </li>
 <li>
 Concierge services
 </li>
 <li>
 Security Guards
 </li>
 <li>
 Access control
 </li>
 <li>
 Cybersecurity
 </li>
 <li>
 Customized training programs
 </li>
 <li>
 Project management
 </li>
 <li>
 Multimedia solutions
 
 
 </li>
 </ul>
 We tailor each solution to meet the unique needs of our clients, ensuring exceptional results that safeguard assets, enhance expertise, and foster continued success.
 
 
 At
 
 
 Windwalker
 
 
 , our mission is to deliver innovative security and professional development solutions that empower organizations, protect communities, and drive lasting success through excellence and care.
 
 
 
 
 Windwalker: Securing Today, Building Expertise for Tomorrow
 
 
 
 
 Discover more at www.Windwalker.com
 
 
 
 
 FIFA SRT Supervisor &mdash; Security Response Team
 
 
 
 
 
 
 Location:
 
 
 City Hall Plaza, Boston, MA
 
 
 
 
 Pay:
 
 
 $40.00 / hr
 
 
 
 
 Schedule Full program:
 
 
 May 20 &ndash; June 30, 2026 (41 days)
 
 
 
 
 Shifts:
 
 
 12-hr shifts aligned with the event rotation schedule
 
 
 
 About This Role
 
 
 
 Windwalker Group is hiring an SRT Supervisor to command our Security Response Team of 6 Officers for the Boston 26 FIFA Fan Festival&trade;. This is a named command role reporting directly to the Venue Security Manager. You will lead all SRT activations, coordinate with public safety agencies, and be responsible for your team's readiness and documentation throughout the program.
 
 
 
 What You Will Do
 
 
 
 <ul>
 <li>
 Command all SRT deployments and serve as incident commander during active responses
 </li>
 <li>
 Brief your team at every shift start &mdash; staging positions, activation protocols, radio channels
 </li>
 <li>
 Maintain constant radio contact with the command center, VSM, and public safety liaisons
 </li>
 <li>
 Activate the SRT on direction from the VSM or immediately during an active life-safety threat
 </li>
 <li>
 Lead joint responses with BPD, Boston Fire, and Boston EMS
 </li>
 <li>
 Manage SRT Officer positioning across the shift to maximize response coverage
 </li>
 <li>
 Submit written incident reports to the VSM within 2 hours of any incident resolution
 </li>
 <li>
 Participate in daily command briefings and after-action reviews
 
 
 </li>
 </ul>
 
 What We Are Looking For
 
 
 
 <ul>
 <li>
 Minimum 3&ndash;5 years security experience with at least 2 years in team command or incident response leadership
 </li>
 <li>
 Prior SRT command, law enforcement supervisory, or military leadership experience strongly preferred
 </li>
 <li>
 ICS/NIMS Incident Command training (ICS-100 and ICS-200) preferred
 </li>
 <li>
 Strong written skills for incident documentation under time pressure
 </li>
 <li>
 Must pass a background check before deployment
 
 
 </li>
 </ul>
 
 Hiring Incentives
 
 
 
 <ul>
 <li>
 $100 employee referral bonus &mdash; available to the first 50 hires
 </li>
 <li>
 $300 completion bonus &mdash; paid upon successful completion of all assigned shifts
 
 
 </li>
 </ul>
 
 Benefits
 
 
 
 <ul>
 <li>
 Weekly pay &mdash; every Friday
 </li>
 <li>
 Free uniform provided
 </li>
 <li>
 Free MBTA T-Pass for the month of June
 </li>
 <li>
 $100 sign-on bonus for the first 50 hires
 </li>
 <li>
 $300 completion bonus upon successful completion of all assigned shifts
 </li>
 <li>
 Once-in-a-generation experience securing the FIFA Fan Festival&trade; Boston 2026
 </li>
 <li>
 Career development and advancement opportunities within Windwalker Security
 
 
 </li>
 </ul>
 
 How To Apply
 
 
 
 Visit www.windwalker.com/careers to apply online.
 
 
 Phone: (833) 505-1022 | 529 Main Street, Suite P200, Boston, MA 02129
 
 
 
 The Pay Range For This Role Is
 
 
 
 40 - 40 USD per hour(Boston)
</div>

FIFA SRT Supervisor — Security Response Team

Fustis LLC

REMINDERS: 
 
This job description contains proprietary, confidential information intended solely for recruiting. Redistribution, posting, or sharing&mdash; in whole or in part&mdash;on job boards, websites, social media, or any public channel is prohibited without prior written consent. Any breach may result in immediate termination of our partnership. 
 
Vendor Rules (Read and Acknowledge) 
 
 
Do not post this content on any job boards or public sites. 
Do not reference the end Clients name in any posting or advertisement. 
Do not share Beacon Hill requirements with other vendors or third parties. 
Candidate employment: All submitted candidates must be (a) on your active W-2 or (b) transferring to your W-2. No sub-vendor layers or pass-throughs. 
Submission: Submit candidates by replying to this email only for pre-screen and consideration. 
 
 
 
 
 
 
 
Workday Security Lead 
Boston Area - Remote - some travel 
Pay Rate in the $85 - $95/hr range 
Remote - may be some travel that client will expense. 
 
 
 
 
This candidate will need to be on my direct W2 
 
Must be US Citizen or Green Card in case they want to convert them down the road. 
 
Must have Hospital experience (this hospital is in the Boston area. 
 
Must be a Workday Security Lead with heavy Administration and Architecture. 
 
 
 
Must Haves: 
 
 
Workday Security Administration 
Workday HCM Pro 
Deep expertise in Workday security models 
SOX 
Expertise in Workday security groups, domain security, business process security, and role-based access control. 
Hospital 
 
 
 
 
Pluses: 
 
 
CISSP, CISA, or related certification preferred 
The Workday Security Lead is responsible for the strategic architecture, governance, administration, and optimization of the Workday security model. This senior-level role requires deep expertise in Workday security structure, including security groups, domain security policies, business process security policies, role assignments, segregation of duties, and the organizational context that drives access within the tenant. 
Leveraging advanced application security capabilities, the lead oversees enterprise-wide Workday security initiatives, including role design, address governance, compliance, audit readiness, and long-term security roadmap planning. The role also partners with HR, Finance, Payroll, IT, Compliance, and executive leadership to ensure Workday security solutions are secure, scalable, compliant, and aligned with approved roles, business priorities, and regulatory requirements. 
The ideal candidate must possess at least two Workday implementations in their background within healthcare. 
 
 
 
 
Technical Skills: 
 
 
Designs and configures Workday security structures including security groups, domain policies, business process security, and role-based access controls. 
Provides Workday security support through accurate configuration, compliant access administration, integrated controls, and secure governance. 
Oversee complex security design activities involving provisioning, deprovisioning, role assignments, and attestation dependencies. 
Leads security audits, segregation of duties assessments, data protection controls, and access governance activities within Workday 
Develop advanced security frameworks, approval standards, and monitoring controls. 
Defines enterprise standards for access reviews, security documentation, and evidence retention. 
Manages technical aspects of Workday security changes, including regression testing, validation, and production readiness. 
Ensures technical readiness for Workday release cycles and coordinates security-related tasks with IT and business teams. 
 
 
 
 
Communication and Influencing skills: 
 
 
Adhere to detailed work plans and timelines for Workday security initiatives. 
Identifies resources needed to complete assigned tasks and provides timely status reports. 
Drives consensus among HR, Finance, Payroll, Compliance, and IT stakeholders on Workday security decisions. 
Facilitate leadership briefings to present security strategy, control maturity, risk posture, and remediation plans. 
Authors governance standards, role design documentation, and Workday security operating procedures.

Workday Security Lead

Contentful

<div><h2 class="jobSectionHeader">About the opportunity</h2>

Candidates must be located in the eastern time zone

Contentful strives to build a secure and safe service and commits considerable effort and resources to security. Our Security team supports organization-wide information security management programs and collaborates closely with internal teams. We believe that Security must be anchored by DevOps principles with strong repeatable processes.

We are looking for a committed and driven manager who is passionate about solving complex security problems in innovative and scalable ways. As a Manager of Security Engineering, you will own security engineering across Contentful's corporate systems, including the tooling and platforms that support the internal security team. While this role does not own security for the customer facing product, you will partner closely with product security teams within the security organization on shared responsibilities.

You will balance people leadership with hands-on technical execution, including designing, building, and operating security controls and tooling at scale, with a particular focus on areas such as identity and access management, data security, and SaaS platforms. You will provide strategic guidance and lead initiatives while remaining directly involved in implementation. You may work independently at times, but will more often collaborate closely with security, IT, and cross-functional partners to align strategies, execute shared initiatives, and ensure comprehensive risk mitigation while minimizing impact on end users across the organization.
<h2 class="jobSectionHeader">
What to expect?</h2>
<ul><li>Develop a team, providing coaching, mentorship, goal setting, and performance feedback.</li>
<li>Define roles and make hiring decisions to grow the team in line with department needs.</li>
<li>Remain hands on, balancing technical leadership with direct implementation work.</li>
<li>Own execution and prioritization across projects and operations, using agile delivery practices.</li>
<li>Scale and mature effectiveness and efficiency by improving processes and tooling.</li>
<li>Champion continuous improvement across all aspects of the security program.</li>
<li>Continuously improve effectiveness and efficiency by evolving processes and tooling.</li>
<li>Communicate risks and technical concepts with clarity to leadership and stakeholders.</li>
<li>Collaborate with security leadership to execute business aligned, risk reduction roadmaps.</li>
<li>Shape work scope, sequencing, and success criteria inline with department and company needs.</li>
<li>Drive security processes, standards, and best practices across information technology assets.</li>
<li>Partner with stakeholders to evolve security awareness and specialized training across all functions.</li>
<li>Mature capabilities across endpoint, SaaS, and cloud configuration.</li>
<li>Own strategy evolution of corporate capabilities, including configuration, IAM, and data security.</li>
<li>Enhance tooling, automation, and integrations to improve visibility and reduce manual effort.</li>
<li>Support and guide security incident response efforts as a technical leader.</li>
<li>Support cross functional vulnerability management while advancing the program capabilities.</li>
<li>Define and maintain metrics to measure impact, optimize execution, and guide investment.</li>
<li>Partner with cross-functional teams for security enhancement and drive risk reduction.</li>
<li>Accelerate adoption of AI, balancing practicality enablement, and risk management.</li>
<li>Stay current on threats, vulnerabilities, and tactics, translating insights into actionable strategies.</li>
</ul><h2 class="jobSectionHeader">What you need to be successful?</h2>
<ul><li>8+ years of progressive engineering and security experience.</li>
<li>3+ years managing people and security engineering teams.</li>
<li>Comfort operating in ambiguity, balancing strategic thinking, security, and practicality.</li>
<li>Expertise with AWS, GCP, and Azure.</li>
<li>Strong hands-on experience designing, implementing, and operating security controls at scale.</li>
<li>Demonstrated experience securing endpoint, SaaS, and cloud environments.</li>
<li>Experience working within identity and access management and data security programs.</li>
<li>Software development experience in modern programming language (Python, Go, etc)</li>
<li>Hands-on experience using Terraform and infrastructure-as-code.</li>
<li>Experience applying modern practices to improve efficiency and scalability or security programs.</li>
<li>Passion for solving complex security problems in innovative and scalable ways.</li>
<li>Experience using metrics to measure impact, optimize execution, and guide investment decisions.</li>
<li>Strong communication skills with the ability to explain technical topics to non technical audiences.</li>
<li>Ability to support occasional off-hours incident response efforts.</li>
<li>Familiarity with attacker techniques in cloud-native and traditional environments.</li>
<li>Hands-on experience owning security technologies (e.g., EDR, AntiVirus, etc.)</li>
<li>Proven ability to lead cross-functional initiatives and influence outcomes without direct authority.</li>
<li>Experience owning end to end security programs, proactively driving incremental improvement.</li>
<li>Strong systems thinking, with the ability to design security solutions that scale through efficiency.</li>
</ul><h2 class="jobSectionHeader">What's in it for you?</h2>
<ul><li>Join an ambitious tech company reshaping the way people build digital experiences</li>
<li>Full-time employees receive Stock Options for the opportunity to share in the success of our company</li>
<li>Comprehensive healthcare package covering 100% of monthly health premiums for employees and 85% of costs for your dependents.</li>
<li>Fertility and family building benefits, including a lifetime reimbursable wallet to support your growing family.</li>
<li>We value Work-Life balance and You Time! A generous amount of paid time off, including vacation days, sick days, compassion days for loss, education days, and volunteer days</li>
<li>Company paid parental leave to care for and focus on your growing family</li>
<li>Use your personal annual education budget to improve your skills and grow in your career</li>
<li>Enjoy a full range of virtual and in-person events, including workshops, guest speakers, and fun team activities, supporting learning and networking exchange beyond the usual work duties</li>
<li>An annual wellbeing stipend to care for your physical, financial, or emotional health</li>
<li>A monthly communication stipend and phone hardware upgrade reimbursement.</li>
<li>New hire office equipment stipend for hybrid or distributed employees. Get the gear you need to work at your best.</li>
</ul>
This role will need to be conducted in a state in which we are currently registered to do business. In addition, this position is not eligible for visa sponsorship. Applicants must be authorized to work without the need for visa sponsorship by the start date of employment.

This position is eligible for equity awards in accordance with the terms of Contentful's equity plans.

Massachusetts Salary Statement: The salary range displayed is specifically for those potential hires who will work or reside in the state of Massachusetts if selected for the role. Any offered salary is determined based on internal equity, internal salary ranges, market data/ranges, applicant's skills and prior relevant experience, certain degrees and certifications (e.g. JD/technology), for example.

Massachusetts Salary Range: $187,000 - $253,00

#LI-Remote<div><h2 class="jobSectionHeader">
Who are we?</h2>

Contentful is a leading digital experience platform that helps modern businesses meet the growing demand for engaging, personalized content at scale. By blending composability with native AI capabilities, Contentful enables dynamic personalization, automated content delivery, and real-time experimentation, powering next-generation digital experiences across brands, regions, and channels for more than 4,200 organizations worldwide. More than 700 people from more than 70 nations contribute their energy and creativity to Contentful, working from hubs in Berlin, Denver, San Francisco, London, New York, and distributed worldwide.
<h2 class="jobSectionHeader">
Everyone is welcome here!</h2>

&quot;Everyone is welcome here&quot; is a celebrated component of our culture. At Contentful, we strive to create an inclusive environment that empowers our employees. We believe that our products and services benefit from our diverse backgrounds and experiences, and we are proud to be an equal opportunity employer. All qualified applications will receive consideration for employment without regard to race, color, national origin, religion, sexual orientation, gender, gender identity, age, physical [dis]ability, or length of time spent unemployed. We invite you to apply and join us!

If you need reasonable accommodations at any point during the application or interview process, please let your recruiting coordinator know.

Please be aware of scammers who may fraudulently allege to be from Contentful. These types of fraud can be carried out through copycat websites, fake email addresses claiming to be from our company, or social media. We do not ask for your personal information, such as bank account numbers, identification numbers, etc, through social media or chat-based apps, nor do we request or send money for the purchase of business equipment. If you suspect fraud, please report it to your local authorities, as well as reach out to us at security-esk@contentful.com with any information you may have.

By clicking &quot;Apply for this job,&quot; I acknowledge that I have read the &quot;Contentful's Candidate Privacy Notice&quot; and hereby consent to the collection, processing, use, and storage of my personal information as described therein.</div></div>

Manager, Security Engineering

ActBlue

<div>WHO WE ARE

ActBlue is a nonprofit organization dedicated to creating cutting-edge technology that fuels Democratic victories and enables progressive causes to thrive.

Our vision is simple: building change through the power of people. Since our founding, we've been building innovative solutions to revolutionize grassroots fundraising &ndash; if you've donated to a Democratic campaign or a progressive organization online, you've probably used our platform! We believe in putting power in the hands of small-dollar donors by helping thousands of groups &mdash; from local candidates to national movements &mdash; mobilize their communities and create a lasting impact. Every member of our team is deeply committed to advancing our shared mission and core values. Together, we are shaping the future of democracy.

THE OPPORTUNITY

The Security &amp; Integrity department at ActBlue works to protect from threat actors that might target ActBlue, our donors, or the campaigns and organizations that fundraise on our platform. Our security program is anchored in empathy for our stakeholders, which is a primary value for our team.

We are looking for an Engineering Manager, Security to help lead our Security team. This is a role that demands a diverse skillset, you will directly manage a team of security engineers while maintaining deep hands-on involvement in security related work. You will partner with the Sr. Director of Security and Integrity to own the security team's strategic roadmap, drive cross-functional partnerships with Engineering, Legal, IT, and your peers in Payments and Fraud helping the team to manage both day to day work and improvement of Act Blue's security program.

The ideal candidate brings both strong managerial depth helping teams to plan and execute tactically as well as deep technical depth in security engineering and a genuine passion for developing people. You'll help set the technical direction for the team, ensure we're building the right capabilities to defend ActBlue, and create an environment where security engineers thrive and grow in their careers and skills.

WHAT YOU WILL DO
<ul>
<li>Team Leadership &amp; Development: Mentoring, and growing security engineers. This includes running 1:1s, career development planning, performance reviews, and building a culture of continuous learning around evolving threats and technologies.</li>
<li>Security Execution: Partnering with engineers on your team and the Sr. Director of Security and Integrity you'll define and prioritize the team's quarterly and annual security initiatives, aligning them with business objectives and frameworks like NIST CSF, CIS Controls, or SOC 2. Translating risk assessments into actionable engineering work.</li>
<li><ul><li>Routinely you'll run daily standups with the team and help the team plan, coordinate, and shepherd tactical work to be done.</li>
</ul></li><li>Cross-Functional Collaboration: Partnering with Platform, SRE, Legal, IT, Compliance, and Product teams to embed security into the SDLC, incident response processes, and vendor management workflows.</li>
<li>Incident Response &amp; Preparedness: You'll help the team to maintain the Security incident response program: runbooks, running tabletop exercises, on call schedules, and ensuring timely response to alerts and events.</li>
<li>Product and Cloud Security: Drive product security practices and cloud security posture across our AWS infrastructure, ensuring secure architecture, configuration, and continuous monitoring of our production environments.</li>
<li>Vulnerability &amp; Risk Management: Overseeing application security testing (SAST, DAST, SCA), penetration testing programs (including bug bounty), and ensuring vulnerabilities are triaged, prioritized, and remediated within SLA.</li>
<li><ul><li>Defining and tracking KPIs (mean time to detect/respond, vulnerability remediation rates, coverage metrics) and reporting security posture to executive stakeholders.</li>
</ul></li><li>Corporate Security: Partnering with IT, you and the team will help ensure strong protections in corporate security including spam, EDR, and device security is mature and well executed.</li>
<li>Vendor &amp; Third-Party Risk: Helping the team evaluating security vendors, and overseeing third-party risk assessments.</li>
<li>Budget &amp; Resource Planning: In coordination with the other department managers; manage the security budget, justifying tooling spend, headcount requests.</li>
</ul>
WHAT YOU BRING
<ul>
<li>5&ndash;7 years managing a team of security engineers or similarly technical ICs. Demonstrated experience with hiring pipelines, structured interview loops, performance calibration, performance, and career laddering.</li>
<li><ul><li>Comfortable running daily standups and weekly 1:1s as core rituals, not afterthoughts.</li>
<li>Familiar with translating frameworks like NIST CSF or CIS Controls into quarterly OKRs and sprint-level work.</li>
<li>Hands-on experience building or maturing a security program at a mid-size or growth-stage organization.</li>
</ul></li><li>Experience overseeing AppSec tooling (SAST, DAST, SCA, Container Scanning, Secrets) and programs like penetration testing or bug bounty.</li>
<li><ul><li>You know how to set remediation SLAs and hold engineering teams accountable to them without creating adversarial relationships.</li>
</ul></li><li>A background working with or managing engineers who build and tune detections in a SIEM, manage alert pipelines, and reduce noise</li>
<li><ul><li>You understand the operational side of security monitoring &mdash; not just deploying tools but making them effective.</li>
</ul></li><li>Experience running an AI forward team of engineers. You'll know how to find quick solutions to problems and you'll help the team to similarly seek out speed and quality of execution via AI related tooling.</li>
<li>A track record of working across engineering, SRE, platform, IT, and legal orgs.</li>
<li><ul><li>You can navigate competing priorities and translate security requirements into language that product and platform teams will act on.</li>
</ul></li><li>You have deep familiarity with cloud security (AWS), Application Security (particularly web native apps and authentication), endpoint security (EDR), email security (anti-spam/phishing), and device management.</li>
<li>Experience evaluating security vendors, running third-party risk assessments.</li>
<li>You have defined and reported on security KPIs like MTTD, MTTR, vulnerability aging, and coverage metrics.</li>
<li>Demonstrated domain expertise in one or more core security domains and secondary specializations, (e.g. infrastructure security, application security, corporate IT security, security operations)</li>
</ul>
WHAT YOU'LL BE WORKING WITH
<ul>
<li>Dev stack: Ruby on Rails, React, PostgreSQL, Node.js, Redis</li>
<li>Infra stack: Amazon Web Services, K8s</li>
<li>Business Systems: Gsuite, Okta, Github, Atlassian, Netsuite, Hubspot</li>
</ul>
WORK &amp; BENEFITS SNAPSHOT

This posting is for a full-time, remote, salaried position. Travel may be required on a limited basis to attend all-staff and departmental retreats (1-2 times per year). Additional travel may be required for select positions.

Registered States*: Arizona, California, Colorado, Connecticut, Florida, Georgia, Hawaii, Illinois, Maryland, Massachusetts, Michigan, Minnesota, Missouri, New Hampshire, New Jersey, New York, North Carolina, North Dakota, Ohio, Oregon, Pennsylvania, Rhode Island, South Carolina, Texas, Utah, Vermont, Virginia, Washington, Wisconsin, and Washington D.C.
<ul><li>While ActBlue is currently registered to support remote work in the states listed above, we possess the ability to register in additional states as needed. If you are located in a state not listed, we may still be able to proceed with your application, but please note that the offer process may take longer to accommodate registration requirements.</li></ul>

Work Schedule:

This role requires availability during established, regular business hours (Mon-Fri) and is expected to be a part of an on-call rotation which will result in working nontraditional hours as needed.

Work Environment:

Employees can expect to work with distributed teams across all U.S. time zones. Our roles require extended technology usage, and proficiency with virtual communication tools such as Zoom and Slack. Regular attendance in virtual meetings is inherent to every position.

Salary Range Details:

Salary Range: $173,676 - $192,209 - $210,741

ActBlue is committed to consistent compensation practices across our organization. Final salary offers will take into account factors such as candidate experience, interview performance and current team salary parity.

Benefits:
<ul>
<li>Flexible work schedules and an unlimited time-off policy</li>
<li>Fully paid and trans-inclusive health, dental, and vision insurance for employees and their families; plus fully-paid health reimbursement arrangement to use for out of pocket expenses and fully-paid short- and long-term disability</li>
<li>Fully paid basic and AD&amp;D life insurance and a voluntary supplemental life insurance option</li>
<li>Dependent and health care flexible spending account options</li>
<li>Employee Assistance Program (EAP) benefits for employees</li>
<li>Automatic 2% Employer-paid 401K contribution, plus up to an additional 6% match on employee contributions</li>
<li>A minimum of three months paid medical, family and parental leave (for all new parents, adoptions included)</li>
<li>Commuter or home-office benefits, including a $1,000 home-office setup allowance for all new full-time remote employees</li>
<li>Additional perks including quarterly snack deliveries and digital subscriptions to the Boston Globe &amp; New York Times</li>
</ul>
ActBlue is unable to sponsor work visas at this time.

UNION INFORMATION

Supervisory role not part of the Bargaining Unit position: Certain employees who report to this position may be covered by a collective bargaining agreement.

BACKGROUND CHECKS

As part of our hiring process, ActBlue will conduct a background check at the time of offer. This will be completed in compliance with applicable laws and will not be initiated without your consent.

INCLUSION STATEMENT FROM ACTBLUE

ActBlue is committed to equal employment opportunities and fostering a diverse, inclusive workplace. We celebrate unique perspectives, honor the dignity of all individuals, and recognize that diverse backgrounds and identities strengthen our mission.

If you're passionate about our work and see yourself in this role, we encourage you to apply&mdash;even if you don't meet every requirement.

We also provide reasonable accommodations for individuals with disabilities throughout the hiring process and employment. To request an accommodation, email recruitment@actblue.com.<div><ul><li>ActBlue will never ask candidates to buy equipment, nor will we email from anything other than an actblue.com or actbluetech.com email address.</li></ul></div></div>

CVS Health

<div>We&rsquo;re building a world of health around every individual &mdash; shaping a more connected, convenient and compassionate health experience. At CVS Health&reg;, you&rsquo;ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger &ndash; helping to simplify health care one person, one family and one community at a time.
Position Summary
The Principal Threat Adversary Operations Engineer &ndash; Red Team is a senior, highly technical individual contributor responsible for designing and executing advanced offensive security operations across complex enterprise, cloud, and hybrid environments. This role leads the development of custom attack techniques and novel adversary simulations, exploring fringe and emerging attack vectors beyond standard penetration testing methodologies. Penetration testing is a core function of the role, with a focus on uncovering high‑impact, previously unidentified security weaknesses across networks, applications, identities, and systems.
Operating at a principal engineering level, the role builds and executes sophisticated attack campaigns using a combination of industry‑standard tooling and extensive custom exploit and tooling development. The Principal Engineer applies deep expertise in adversary tradecraft, scripting, and automation to emulate real‑world threat actors at scale, aligning attack scenarios with modern and emerging Tactics, Techniques, and Procedures (TTPs). Offensive activities are informed by current threat intelligence and adversary modeling to ensure realistic, intelligence‑driven simulations that meaningfully stress defensive controls.
The role serves as a critical purple team partner and trusted advisor to detection, response, and incident investigation teams, translating complex offensive findings into measurable improvements in defensive capability, telemetry, and operational readiness. Through clear articulation of technical risk and business impact, the Principal Engineer influences enterprise security strategy, informs long‑term defensive investments, and supports high‑severity investigations and post‑incident analysis. All offensive activities are executed with strong governance awareness, ensuring alignment with regulatory, audit, and compliance expectations while advancing the organization&rsquo;s adversary‑informed security posture.
Role Responsibilities:
Penetration Testing &amp; Adversary Operations<ul><li>
Lead and execute advanced internal and external penetration tests across enterprise, cloud, and emerging technology environments.</li><li>
Design and execute custom adversary emulation campaigns to pressure‑test detection, response, and control effectiveness.</li><li>
Own and evolve the offensive security toolset, including development of custom exploits, scripts, and attack frameworks.</li><li>
Produce executive‑ready assessments that clearly articulate technical risk, business impact, and remediation priorities.</li></ul>
Purple Team &amp; Defensive Enablement<ul><li>
Partner closely with detection, response, and security engineering teams to drive purple team exercises and adversary‑informed improvements at scale.</li><li>
Translate offensive findings into measurable enhancements in monitoring, telemetry, alerting, and response workflows.</li><li>
Lead technical deep dives and knowledge‑sharing sessions to elevate enterprise understanding of adversary behavior and attack paths.</li></ul>
Security Strategy, Automation &amp; Incident Support<ul><li>
Influence enterprise adversary operations and threat management strategy through risk‑based assessments and adversary trend analysis.</li><li>
Architect and implement automation to scale penetration testing and adversary simulation capabilities.</li><li>
Provide expert adversary insight during incident response and threat hunting, informing hypotheses, detections, and post‑incident improvements.</li></ul>
Required Qualifications<ul><li>
10+ years of hands‑on experience in penetration testing, red teaming, adversary emulation, and/or offensive security.</li><li>
7+ years of deep experience with tools such as Kali Linux, Metasploit, Nmap, Burp Suite, and comparable frameworks.</li><li>
5+ years of advanced scripting experience (Python, PowerShell, Bash, or similar languages).</li><li>
5+ years of experience securing and testing cloud platforms (AWS, Azure, GCP) and containerized environments.</li></ul>
Preferred Qualifications<ul><li>
Advanced certifications such as OSCP, OSCE, CISSP, CEH, or GPEN.</li><li>
Demonstrated leadership in purple team programs and adversary simulation initiatives.</li><li>
Strong familiarity with PCI‑DSS, HIPAA, ISO 27001, and enterprise compliance environments.</li><li>
Expert knowledge of MITRE ATT&amp;CK, NIST, and CIS security frameworks.</li><li>
Exceptional communication skills with the ability to influence technical and non‑technical senior stakeholders.</li></ul>
Education<ul><li>
Bachelor&rsquo;s degree or equivalent experience (High School Diploma and 4 years relevant experience)</li></ul>
Pay Range
The typical pay range for this role is:
$144,200.00 - $288,400.00 
This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company&rsquo;s equity award program. 
Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.
Great benefits for great people
We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families. 
This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility. 
Additional details about available benefits are provided during the application process and on Benefits Moments. 
We anticipate the application window for this opening will close on: 05/11/2026
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.</div>

Principal Adversary Operations Engineer - Red Team

SNYK

<div>Snyk is the leader in secure AI software development, helping millions of developers develop fast and stay secure as AI transforms how software is built. Our AI-native Developer Security Platform integrates seamlessly into development and security workflows, making it easy to find, fix, and prevent vulnerabilities &mdash; from code and dependencies to containers and cloud.
Our mission is to empower every developer to innovate securely in the AI era &mdash; boosting productivity while reducing business risk. We&rsquo;re not your average security company - we build Snyk on One Team, Care Deeply, Customer Centric, and Forward Thinking.
It&rsquo;s how we stay driven, supportive, and always one step ahead as AI reshapes our world.
<h3 class="jobSectionHeader">Why this role?
</h3>Our Solutions Engineering organization is seeking a Director of Solutions Engineering to lead a highly skilled SE Organization focused on Strategic customers in our AMER region. As Snyk enters the age of agentic security with EVO and Snyk Studio , you will play a pivotal role in helping global brands navigate the &quot;AI-first&quot; operating model.
As a Director, you will direct and control the strategic activities of the AMER region, leading through multiple managers to drive business outcomes. You are a strategic advisor who provides unique thought-leadership based on market trends and a track record of success, ensuring our customers realize their full potential through prescriptive, AI-native security solutions.
<h3 class="jobSectionHeader">What You&rsquo;ll Do:
</h3><ul><li>Lead Strategic Execution: Partner with cross-functional leaders to drive Regional and Account strategy, acting as a business and technical thought leader for the AMER Enterprise business.
</li><li>Architect AI-Native Success: Guide customers in adopting EVO , our agentic orchestration system, and Snyk Studio to automate discovery, risk intelligence, and policy enforcement within their AI supply chain.
</li><li>Drive Global Collaboration: Drive all global relationships with peer groups in Marketing, Channel, and Product to ensure consistent strategy for both short-term revenue and long-term innovation.
</li><li>Build &amp; Mentor at Scale: Recruit, hire, and coach a world-class solutions engineering team, maintaining accountability for the &quot;health&quot; and professional growth of employees across your entire reporting line.
</li><li>Executive Advocacy: Serve as a &quot;CTO&quot; or Executive Sponsor to C-level champions at Fortune 2000 customers, leading Executive Briefing Centers (EBCs) and establishing credibility at the CxO level.
</li><li>Optimize Performance: Build and implement strategic processes to measure the performance and impact of the SE team, ensuring the organization is optimized to meet rapidly evolving business needs.
</li><li>Champion the Customer: Represent the &quot;voice of the customer&quot; to influence Snyk&rsquo;s product roadmap, specifically regarding Application Security Posture Management (ASPM) and AI security.
</li></ul><h3 class="jobSectionHeader">What You Bring:
</h3><ul><li>Extensive Leadership: 12+ years of industry experience in a pre-sales capacity with 7+ years of management experience, including a successful track record of leading &quot;leaders of leaders.&quot;
</li><li>Domain Expertise: Deep knowledge of the developer, DevOps, Application Security, and ASPM ecosystems, with a specific focus on securing AI-native development lifecycles.
</li><li>Executive Presence: Outstanding executive presence and the ability to foster deep, long-term relationships with strategic customers and internal executive staff.
</li><li>Strategic Planning: Proven ability to manage overall planning, staffing, and coverage-mapping for a large region or segment.
</li><li>Technical Curiosity: A strong understanding of various coding languages and a bias for action when learning how new technologies work &quot;under the hood.&quot;
</li><li>Empathic Leadership: The ability to lead with high EQ and empathy, creating a positive environment that motivates teams in a fast-paced, ever-changing landscape.
</li></ul><h3 class="jobSectionHeader">It&rsquo;d Be Awesome If You Also&hellip;
</h3><ul><li>Have hands-on experience with AI/LLMs, MCP (Model Context Protocol), or modern security orchestration tools.
</li><li>Are a recognized industry speaker who frequently represents Snyk at demand-generating or brand-building events.
</li><li>Have experience leading professional services or partner organizations at an enterprise scale.
</li><li>Can build presentations that keep a meeting room awake and love a good meme&mdash;we take our mission seriously, but not ourselves!
</li></ul>#LI-WR1
We care deeply about the warm, inclusive environment we&rsquo;ve created and we value diversity &ndash; we welcome applications from those typically underrepresented in tech. If you like the sound of this role but are not totally sure whether you&rsquo;re the right person, do apply anyway!
About Snyk
Snyk is committed to creating an inclusive and engaging environment where our employees can thrive as we rally behind our common mission to make the digital world a safer place. From Snyk employee resource groups, to global benefits that help our employees prioritize their health, wellness, financial security, and a work/life blend, we aim to support our employees along their entire journeys here at Snyk.
Benefits &amp; Programs
<ul><li>Prioritize health, wellness, financial security, and life balance with programs tailored to your location and role.
</li><li>Flexible working hours, work-from home allowances, in-office perks, and time off for learning and self development
</li><li>Generous vacation and wellness time off, country-specific holidays, and 100% paid parental leave for all caregivers
</li><li>Health benefits, employee assistance plans, and annual wellness allowance
</li><li>Country-specific life insurance, disability benefits, and retirement/pension programs, plus mobile phone and education allowances</li></ul></div>

Director, Solutions Engineering

Berkshire Hathaway Specialty Insurance

<div><div>Who are we?</div><div></div><div> 
A strategic and trusted insurance partner, Berkshire Hathaway Specialty Insurance (BHSI), provides a broad range of commercial property, casualty and specialty insurance coverages and outstanding service to customers and brokers around the world. Part of Berkshire Hathaway&rsquo;s insurance operations, we bring our solutions to market with our stellar brand name, top-rated balance sheet, and the expertise of our global team of professionals, who exude excellent capabilities and strong character.</div><div></div><div> 
We are a values-based organization where respect, integrity, excellence, collaboration, and passion define who we are and how we do business. We value diversity of backgrounds, experience, and perspectives and strive to foster an inclusive environment that enables all our team members to bring their best selves to work. We are one team committed to building a culture where every teammate has the opportunity to contribute and be recognized. Want to be part of the team building the finest property, casualty and specialty lines insurance company in the world?</div><div></div><div> 
Learn more about our unique culture and history.</div><div></div><div> 
Job Opportunity:</div><div></div><div> 
Berkshire Hathaway Specialty Insurance (BHSI) is seeking a forward‑thinking Cloud Security leader with a strong grounding in AI Security to join our Boston-based team. This role offers a unique opportunity to define and advance our cloud security strategy across modern, mission‑critical platforms, operating at the intersection of technology, risk, and business impact.</div><div></div><div> 
As a core member of our cybersecurity leadership team reporting directly to the CISO, you will drive the evolution of our cloud and AI security ecosystems&mdash;establishing governance, controls, and compliance across our cloud infrastructure while helping secure our growing Artificial Intelligence footprint. If you are passionate about shaping the future of cloud security and influencing how secure systems and services are built and governed, we&rsquo;d welcome the conversation.</div><div> 
Duties &amp; Responsibilities:</div><div></div><ul><li> 
Cloud Security /AI Security Strategy &amp; Governance:<ul><li>
Develop and maintain the organization&rsquo;s cloud security and AI security strategy, standards, and policies across IaaS, PaaS, and SaaS environments.</li><li>
Define and enforce cloud architecture security principles aligned with Zero Trust.</li><li>
Identify and enforce AI security controls and configurations aligned with our cloud architecture</li><li>
Lead cloud and AI risk assessments, gap analysis, and initiative planning.</li><li>
Guide migration and modernization efforts to ensure secure-by-design implementations.</li></ul></li></ul><div></div><ul><li> 
Operational Security &amp; Threat Management:<ul><li>
Oversee the configuration, monitoring, and continuous improvement of:<ul><li>
CSPM (Cloud Security Posture Management)</li><li>
CWPP/CNAPP (Cloud Workload Protection / Cloud-Native Security)</li><li>
SIEM/SOAR integrations for cloud telemetry</li><li>
Identity threat detection (ITDR)</li></ul></li><li>
Direct incident response for cloud-related security events in collaboration with SOC/IR teams.</li><li>
Ensure continuous monitoring for misconfigurations, vulnerabilities, and anomalies.</li></ul></li></ul><div></div><ul><li> 
Identity, Access, and Data Protection<ul><li>
Support cloud &amp; AI IAM frameworks (least privilege, conditional access, workload identities).</li><li>
Drive cloud-related adoption of encryption, secrets management, and key management (BYOK/CMK).</li><li>
Ensure efficacy of data classification and DLP controls across cloud environments.</li></ul></li></ul><div></div><ul><li> 
DevSecOps &amp; Engineering Partnership<ul><li>
Embed security controls and testing into CI/CD pipelines in collaboration with AppSec.</li><li>
Oversee IaC scanning and container security while supporting SAST/DAST and supply chain security.</li><li>
Collaborate with engineering to remediate findings and architect secure workloads.</li></ul></li></ul><div></div><ul><li> 
Compliance &amp; Risk Management<ul><li>
Ensure cloud environments meet regulatory and compliance requirements.</li><li>
Own cloud security and AI security audits and evidence collection.</li><li>
Mature asset inventories, risk registers, and control documentation.</li></ul></li></ul><div></div><ul><li> 
Leadership &amp; Stakeholder Management<ul><li>
Build and mentor a team of cloud security &amp; AI security engineers/analysts.</li><li>
Provide regular reporting to security leadership and executives.</li><li>
Partner across technology, infrastructure, DevOps, and architecture.</li></ul></li></ul><div></div><div> 
 Qualifications, Skills and Experience:</div><div><ul><li>
5&ndash;10+ years of experience in cybersecurity, with a focus on cloud security.</li><li>
Hands-on experience with AWS, Azure, or GCP security services.</li><li>
Strong knowledge of:<ul><li>
Cloud IAM and identity governance</li><li>
Network security (VPCs/VNets, firewalls, segmentation)</li><li>
Cloud-native monitoring, threat detection, and logging</li><li>
Infrastructure-as-Code (Terraform, CloudFormation, Bicep)</li></ul></li><li>
Experience with CSPM, CWPP/CNAPP, SIEM, SOAR, and vulnerability management tools.</li><li>
Knowledge of compliance frameworks and cloud shared responsibility models.</li></ul></div><div></div><div> 
BHSI Offers:</div><div><ul><li>
A competitive package and exciting growth opportunities for career-oriented teammates</li><li>
A dynamic, action oriented, and thoughtful environment centered on always doing the right thing for our customers, teammates and our other stakeholders</li><li>
A purposely non-bureaucratic organization that embraces simplicity over complexity and emphasizes individual excellence in a team framework</li></ul></div><ul><li>
Benefits that support your life and well-being, which include:</li></ul><div><ul><li>
Comprehensive Health, Dental and Vision benefits</li><li>
Disability Insurance (both short-term and long-term)</li><li>
Life Insurance (for you and your family)</li><li>
Accidental Death &amp; Dismemberment Insurance (for you and your family)</li><li>
Flexible Spending Accounts</li><li>
Health Reimbursement Account</li><li>
Employee Assistance Program</li><li>
Retirement Savings 401(k) Plan with Company Match</li><li>
Generous holiday and Paid Time Off</li><li>
Tuition Reimbursement</li><li>
Paid Parental Leave</li></ul></div><div></div><div> 
The base salary range for this position in Boston is $150,000.00 to $220,000.00, along with annual bonus eligibility. Total compensation for a candidate is determined by their relevant skills, location, and experience. We value our teammates &ndash; both their capabilities and character &ndash; as demonstrated by our amazing culture.</div><div></div><div> 
NOTE: Compensation will be commensurate with experience. This job description is not intended to be all-inclusive. Team Member may perform other related duties as negotiated to meet the ongoing needs of the organization</div></div>

Senior Director, Cloud Security & AI Security

Explore 526+ Security team lead in Boston this May. Find roles across top companies and apply now to boost your career.

526 security team lead jobs In Boston

FIFA SRT Supervisor — Security Response Team

Workday Security Lead

Manager, Security Engineering

Manager, Security Engineering

Principal Adversary Operations Engineer - Red Team

Director, Solutions Engineering

Senior Director, Cloud Security & AI Security