principal threat detection engineer - blue team

senior director, cloud security & ai security

senior engineer, data protection & ai security

manager, security engineering Jobs in Boston

manager, security engineering

cloud engineer

principal threat detection engineer - blue team Jobs in Boston

senior director, cloud security & ai security Jobs in Boston

senior engineer, data protection & ai security Jobs in Boston

senior security engineer

Bain Capital

<div><p><b>Bain Capital Overview:
</b></p><p></p><p>With approximately $215 billion of assets under management, Bain Capital is one of the world&rsquo;s leading private investment firms. We create lasting impact for our investors, teams, businesses, and the communities in which we live. Over four decades we have strategically grown our platform to focus on Private Equity, Growth &amp; Venture, Capital Solutions, Credit, and Real Assets. Today, our team includes 1,985+ employees in 24 offices on four continents.</p><p></p><p><b>
We partner differently to help people and companies embrace possibility and realize potential. </b>Founded as a private partnership in 1984, we have fostered a culture of innovation, entrepreneurialism, and agility, empowering our people to define and own their career trajectories. Today, our partnership approach enables us to pursue strategic growth, build enduring relationships with a robust external network, and collaborate across our integrated platform to connect the deep and diverse expertise that unlocks breakthrough insights.</p><p></p><p><b>
Our people are the heart of our advantage.</b> Colleagues at all levels have a seat at the table as they tackle business challenges with a principal investor mindset. By asking incisive questions, respectfully challenging one another, and remaining intellectually agile, we work together to achieve exceptional outcomes.</p><p></p><p><b>
For more information visit: </b><b>Bain Capital</b></p><p></p><p><b>
Position Overview
</b></p><p></p><p>Bain Capital&rsquo;s Information Security team is seeking a Senior Engineer, Data Protection &amp; AI Security to own and advance the firm&rsquo;s data security posture and AI security capabilities. This is a hands-on engineering role responsible for deploying, operationalizing, and maturing the platforms and processes that protect the firm&rsquo;s most sensitive data&mdash;across cloud environments, SaaS applications, databases, and AI workflows.</p><p></p><p>
The ideal candidate combines deep technical expertise in data security platforms (DSPM, DLP, data classification) with a forward-looking understanding of how AI adoption introduces new data risks. This person will work closely with Security Engineering, Cloud Operations, the Data Science team, and platform owners to build a cohesive data protection program&mdash;one that addresses both traditional data governance gaps and the emerging challenge of securing enterprise AI tools and workflows.</p><p></p><p>
This is not a monitoring or compliance role. This is an engineering role for someone who builds things, owns outcomes, and can operate independently in a fast-moving environment with a growing security platform portfolio.</p><div></div><p><b>
Key Responsibilities</b></p><p><b>
Data Security Posture Management</b></p><ul><li>
Own the end-to-end deployment, configuration, and operationalization of the firm&rsquo;s DSPM platform, including onboarding data sources across public cloud environments, cloud data warehouses, SQL databases, and network file shares</li><li>
Triage and prioritize DSPM findings, coordinate remediation with data owners and infrastructure teams, and build reporting workflows that translate discovery results into actionable risk reduction</li><li>
Rationalize DSPM capabilities across the security tool portfolio to eliminate overlap between cloud-native application protection, DSPM, and endpoint-based data security platforms</li><li>
Partner with Cloud Operations and application teams to navigate technical integration challenges, including IAM permissions, network connectivity, and change management processes</li></ul><p></p><p><b>
Data Classification &amp; Governance</b></p><ul><li>
Design and implement a data classification framework that establishes sensitivity levels, ownership models, and handling requirements for the firm&rsquo;s data</li><li>
Develop and maintain data classification policies that inform downstream controls across DLP, DSPM, access governance, and backup immutability</li><li>
Serve as the security team&rsquo;s subject matter expert on data governance, partnering with Compliance and business stakeholders to align classification efforts with regulatory and operational requirements</li></ul><p></p><p><b>
AI Security</b></p><ul><li>
Evaluate, deploy, and manage AI security monitoring tools to provide visibility into sanctioned and unsanctioned AI usage across the enterprise</li><li>
Develop detection capabilities for sensitive data exposure through GenAI workflows, including monitoring for data leakage via AI prompts, outputs, and integrations with enterprise tools</li><li>
Establish and maintain an AI governance operating model in coordination with the CISO and the Data Science team, including sanctioned tool inventories, acceptable use guardrails, and risk-based approval workflows for new AI applications</li><li>
Stay current on evolving AI security frameworks (OWASP LLM Top 10, NIST AI RMF, MITRE ATLAS) and translate emerging threats into practical defensive measures for the firm</li></ul><p></p><p><b>
Data Loss Prevention &amp; Insider Threat</b></p><ul><li>
Manage and enhance the firm&rsquo;s DLP and insider threat platforms to prevent unauthorized data movement across endpoints, cloud applications, and email</li><li>
Develop and tune DLP policies informed by DSPM discovery and data classification outputs, ensuring controls are risk-proportionate and operationally sustainable</li><li>
Partner with Security Operations to integrate data protection alerts into the firm&rsquo;s SOAR platform for automated triage and response workflows</li></ul><p></p><p><b>
TECHNOLOGY EXPERIENCE</b></p><ul><li>
Hands-on experience deploying and operating Data Security Posture Management (DSPM) platforms</li><li>
Strong working knowledge of cloud security in public cloud environments (AWS preferred), including IAM roles and policies, object storage security, VPC architecture, and infrastructure-as-code templates</li><li>
Experience with enterprise DLP platforms and insider threat tools, including policy development, tuning, and incident workflows</li><li>
Familiarity with data classification methodologies and tools across structured and unstructured data environments</li><li>
Experience with SaaS Security Posture Management (SSPM) platforms</li><li>
Working knowledge of AI/ML security concepts, including GenAI data leakage vectors, prompt injection risks, and shadow AI discovery</li><li>
Experience integrating security tools via APIs and working with SOAR and automation platforms</li><li>
Proficiency with cloud data warehouses, SQL databases, and cloud object storage from a security and access governance perspective</li><li>
Familiarity with enterprise identity providers and identity governance platforms as they relate to data access controls</li></ul><div></div><p><b>
Qualifications</b></p><ul><li>
Bachelor&rsquo;s degree in computer science, information security, or a related technical field (or equivalent professional experience)</li><li>
7+ years of experience in information security, with at least 3 years focused on data security, data protection, or cloud security engineering</li><li>
Demonstrated ability to own and drive complex, multi-stakeholder technical projects from planning through operationalization</li><li>
Strong understanding of data privacy and protection regulations relevant to financial services (GLBA, SOX, SEC guidelines, GDPR)</li><li>
Excellent written and verbal communication skills, with the ability to translate technical findings into business risk language for senior leadership</li><li>
A self-starter with an ownership mindset who thrives in a lean team environment where independent judgment and initiative are expected</li><li>
Experience in financial services, private equity, or asset management is strongly preferred</li></ul><p></p><p><b>
Preferred Certifications</b></p><p><b>
CISSP, CCSP, CCSK, AWS Security Specialty, or relevant GIAC certifications. Certifications in AI security (CAISP) or data privacy (CIPP/US) are a plus.</b></p><p></p><p><b><i>
Join our team and play a foundational role in building the firm&rsquo;s data protection and AI security capabilities from the ground up&mdash;shaping how Bain Capital discovers, classifies, and protects its most critical data in an era of rapid AI adoption.</i></b></p><p></p><p><b><i>
Compensation:
</i></b></p><p><i>Expected Annual Base Salary </i><i>$125,000-$155,000</i></p><p></p><p><i>
Actual base salary will be determined by a wide range of factors including but not limited to role, function, level, experience, qualifications and geographic location. In addition to a competitive base salary, this position may be eligible for a discretionary annual bonus based upon factors such as individual impact, team and firm performance. Bain Capital offers a competitive benefits package designed to support employees&rsquo; health, financial security, family needs, and overall well-being.</i></p><p></p><p><i>
Bain Capital is an equal opportunity employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status</i></p></div>

Senior Engineer, Data Protection & AI Security

Sonos

<div><div><div><div><div><div><div><div><p>At Sonos we want to create the ultimate listening experience for our customers and know that it starts by listening to each other. As part of the Sonos team, you&rsquo;ll collaborate with people of all styles, skill sets, and backgrounds to realize our vision while fostering a community where everyone feels included and empowered to do the best work of their lives.</p></div></div></div></div></div></div></div><p></p><p><b>
Location: </b>This position is considered hybrid, allowing for a combination of remote work and in-office collaboration. Qualified applicants must live within commuting distance of our Boston, MA or Seattle, WA office locations and should expect to be in office a minimum of 3 days per week. #LI-Hybrid</p><p></p><p><b>
Visa Sponsorship: </b>Sonos is unable to sponsor or take over sponsorship of an employment visa for this role at this time. We ask that applicants be authorized to work for any US employer, both now and in the future.</p><p></p><p>
The CoreSW-Security team is responsible for securing Sonos products throughout their life, from the hardware level to the application layer; our charter spans everything from SoC-level secure boot, to kernel and userspace security software, to product manufacturing, to software supply chain and beyond. Our mission is to ensure that the simplicity and delight our customers expect from Sonos products never comes at the cost of their security or privacy. We proactively address security problems, risks, and threats, and our work has a direct impact on every product Sonos ships. As an engineer on the CoreSW-Security team, you'll operate across a uniquely broad scope, owning meaningful workstreams end-to-end on a small, high-trust team.</p><p></p><h1 class="jobSectionHeader"><b>
What You&rsquo;ll Do</b></h1><ul><li><p>
Own security-relevant workstreams end-to-end, everything from design, to implementation, to long term maintenance in fielded devices</p></li><li><p>
Collaborate across the organization in order to balance security and usability concerns</p></li><li><p>
Contribute to security design reviews across Sonos&rsquo; portfolio of devices and software features</p></li><li><p>
Triage and resolve vulnerability reports directly from security researchers and from the cybersecurity industry</p></li></ul><h1 class="jobSectionHeader"><b>
What You&rsquo;ll Need</b></h1><p><i>
Basic Qualifications</i></p><ul><li><p>
Bachelor&rsquo;s in Computer Engineering, Electrical Engineering, Computer Science or related field</p></li><li><p>
At least 5 to 8 years of professional experience developing software in C and C++ for embedded systems</p></li><li><p>
Demonstrated hands-on experience with embedded systems security on Linux-based systems, including bootloader, kernel-, and userspace security</p></li><li><p>
Strong written and verbal communication skills</p></li><li><p>
Qualified applicants must be able to work from the office a minimum of 3 days per week</p></li></ul><p></p><p><i>
Preferred Qualifications</i></p><ul><li><p>
Experience with security architecture and design, including platform hardening</p></li><li><p>
Knowledge of cryptographic algorithms and systems</p></li><li><p>
Knowledge of Yocto Project / OpenEmbedded workflows</p></li><li><p>
Familiarity with the use of AI tools for code and vulnerability scanning</p></li><li><p>
Familiarity with security research, including ethical hacking or penetration testing</p></li><li><p>
Familiarity with cybersecurity regulations, such as CRA</p></li></ul><p></p><p>
Research shows that some candidates may not apply for roles if they don't meet all the criteria. If you don&rsquo;t have 100% of the skills listed, we strongly encourage you to apply if interested.</p><p></p><p>
Your profile will be reviewed and you'll hear from us once we have an update. At Sonos we take the time to hire right and appreciate your patience.</p><p></p><p>
The base pay range for this role based off geographic location is:</p><p></p>
$165,000 and $206,000<p></p><p>
The specific pay offered will depend on the candidate&rsquo;s geographic location, as well as qualifications and experience. We apply geographic pay differentials based on the cost of labor in the market. Employees in high-cost locations may be compensated at the upper end of the range, while those in medium or low cost markets may be compensated at the lower end of the range. Your recruiter can provide more details about the specific salary range for your location during the hiring process.</p><p></p><p>
Please note that compensation details listed in US job postings reflect the base salary only, and do not include bonus, equity, or benefits.</p><p></p><p>
We also offer a comprehensive benefits program with choice and flexibility in mind to help support the health, wealth, and overall well-being of our employees. Regular full time employees in the US are eligible for benefits on day one, including:</p><ul><li><p>
Medical, Dental, and Vision Insurance</p></li><li><p>
A 401(k) plan with company matching and immediate vesting</p></li><li><p>
An Open Time Off policy (OTO) so you have maximum opportunity to disconnect and recharge, with no tenure-based vacation accruals required</p></li><li><p>
80 hours of sick time upon hire, refreshed annually</p></li><li><p>
Up to 12 paid holidays per calendar year</p></li><li><p>
Sonos offers a generous paid leave program for new parents or to care for a family member with a serious health condition, as well as short- and long-term disability for your own medical condition</p></li><li><p>
Company-paid Disability, Life, and AD&amp;D Insurance</p></li><li><p>
Voluntary benefits, including Voluntary Life, AD&amp;D, Accident, and Pet Insurance</p></li><li><p>
Mental health benefits to support your holistic well-being</p></li><li><p>
A generous employee discount program &amp; Sonos Radio HD - on us!</p></li></ul><p></p><p>
Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company&rsquo;s sole discretion, consistent with the law.</p><p></p><p>
Notice to U.S. Job Applicants: Sonos is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.</p><p></p><p>
Sonos is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please send an e-mail to accommodations@sonos.com and let us know the nature of your request and your contact information.</p></div>

Senior Software Engineer, Security

ActBlue

<div><p><b>WHO WE ARE</b></p>
<p>
ActBlue is a nonprofit organization dedicated to creating cutting-edge technology that fuels Democratic victories and enables progressive causes to thrive.</p>
<p>
Our vision is simple: building change through the power of people. Since our founding, we've been building innovative solutions to revolutionize grassroots fundraising &ndash; if you've donated to a Democratic campaign or a progressive organization online, you've probably used our platform! We believe in putting power in the hands of small-dollar donors by helping thousands of groups &mdash; from local candidates to national movements &mdash; mobilize their communities and create a lasting impact. Every member of our team is deeply committed to advancing our shared mission and core values. Together, we are shaping the future of democracy.</p>
<p><b>
THE OPPORTUNITY</b></p>
<p>
The Security &amp; Integrity department at ActBlue works to protect from threat actors that might target ActBlue, our donors, or the campaigns and organizations that fundraise on our platform. Our security program is anchored in empathy for our stakeholders, which is a primary value for our team.</p>
<p>
We are looking for an Engineering Manager, Security to help lead our Security team. This is a role that demands a diverse skillset, you will directly manage a team of security engineers while maintaining deep hands-on involvement in security related work. You will partner with the Sr. Director of Security and Integrity to own the security team's strategic roadmap, drive cross-functional partnerships with Engineering, Legal, IT, and your peers in Payments and Fraud helping the team to manage both day to day work and improvement of Act Blue's security program.</p>
<p>
The ideal candidate brings both strong managerial depth helping teams to plan and execute tactically as well as deep technical depth in security engineering and a genuine passion for developing people. You'll help set the technical direction for the team, ensure we're building the right capabilities to defend ActBlue, and create an environment where security engineers thrive and grow in their careers and skills.</p>
<p><b>
WHAT YOU WILL DO</b></p>
<ul>
<li>Team Leadership &amp; Development: Mentoring, and growing security engineers. This includes running 1:1s, career development planning, performance reviews, and building a culture of continuous learning around evolving threats and technologies.</li>
<li>Security Execution: Partnering with engineers on your team and the Sr. Director of Security and Integrity you'll define and prioritize the team's quarterly and annual security initiatives, aligning them with business objectives and frameworks like NIST CSF, CIS Controls, or SOC 2. Translating risk assessments into actionable engineering work.</li>
<li><ul><li>Routinely you'll run daily standups with the team and help the team plan, coordinate, and shepherd tactical work to be done.</li>
</ul></li><li>Cross-Functional Collaboration: Partnering with Platform, SRE, Legal, IT, Compliance, and Product teams to embed security into the SDLC, incident response processes, and vendor management workflows.</li>
<li>Incident Response &amp; Preparedness: You'll help the team to maintain the Security incident response program: runbooks, running tabletop exercises, on call schedules, and ensuring timely response to alerts and events.</li>
<li>Product and Cloud Security: Drive product security practices and cloud security posture across our AWS infrastructure, ensuring secure architecture, configuration, and continuous monitoring of our production environments.</li>
<li>Vulnerability &amp; Risk Management: Overseeing application security testing (SAST, DAST, SCA), penetration testing programs (including bug bounty), and ensuring vulnerabilities are triaged, prioritized, and remediated within SLA.</li>
<li><ul><li>Defining and tracking KPIs (mean time to detect/respond, vulnerability remediation rates, coverage metrics) and reporting security posture to executive stakeholders.</li>
</ul></li><li>Corporate Security: Partnering with IT, you and the team will help ensure strong protections in corporate security including spam, EDR, and device security is mature and well executed.</li>
<li>Vendor &amp; Third-Party Risk<b>:</b> Helping the team evaluating security vendors, and overseeing third-party risk assessments.</li>
<li>Budget &amp; Resource Planning: In coordination with the other department managers; manage the security budget, justifying tooling spend, headcount requests.</li>
</ul>
<p><b>WHAT YOU BRING</b></p>
<ul>
<li>5&ndash;7 years managing a team of security engineers or similarly technical ICs. Demonstrated experience with hiring pipelines, structured interview loops, performance calibration, performance, and career laddering.</li>
<li><ul><li>Comfortable running daily standups and weekly 1:1s as core rituals, not afterthoughts.</li>
<li>Familiar with translating frameworks like NIST CSF or CIS Controls into quarterly OKRs and sprint-level work.</li>
<li>Hands-on experience building or maturing a security program at a mid-size or growth-stage organization.</li>
</ul></li><li>Experience overseeing AppSec tooling (SAST, DAST, SCA, Container Scanning, Secrets) and programs like penetration testing or bug bounty.</li>
<li><ul><li>You know how to set remediation SLAs and hold engineering teams accountable to them without creating adversarial relationships.</li>
</ul></li><li>A background working with or managing engineers who build and tune detections in a SIEM, manage alert pipelines, and reduce noise</li>
<li><ul><li>You understand the operational side of security monitoring &mdash; not just deploying tools but making them effective.</li>
</ul></li><li>Experience running an AI forward team of engineers. You'll know how to find quick solutions to problems and you'll help the team to similarly seek out speed and quality of execution via AI related tooling.</li>
<li>A track record of working across engineering, SRE, platform, IT, and legal orgs.</li>
<li><ul><li>You can navigate competing priorities and translate security requirements into language that product and platform teams will act on.</li>
</ul></li><li>You have deep familiarity with cloud security (AWS), Application Security (particularly web native apps and authentication), endpoint security (EDR), email security (anti-spam/phishing), and device management.</li>
<li>Experience evaluating security vendors, running third-party risk assessments.</li>
<li>You have defined and reported on security KPIs like MTTD, MTTR, vulnerability aging, and coverage metrics.</li>
<li>Demonstrated domain expertise in one or more core security domains and secondary specializations, (e.g. infrastructure security, application security, corporate IT security, security operations)</li>
</ul>
<p><b>WHAT YOU'LL BE WORKING WITH</b></p>
<ul>
<li>Dev stack: Ruby on Rails, React, PostgreSQL, Node.js, Redis</li>
<li>Infra stack: Amazon Web Services, K8s</li>
<li>Business Systems: Gsuite, Okta, Github, Atlassian, Netsuite, Hubspot</li>
</ul>
<p><b>WORK &amp; BENEFITS SNAPSHOT</b></p>
<p>
This posting is for a full-time, remote, salaried position. Travel may be required on a limited basis to attend all-staff and departmental retreats (1-2 times per year). Additional travel may be required for select positions.</p>
<p><b>
Registered States*: </b>Arizona, California, Colorado, Connecticut, Florida, Georgia, Hawaii, Illinois, Maryland, Massachusetts, Michigan, Minnesota, Missouri, New Hampshire, New Jersey, New York, North Carolina, North Dakota, Ohio, Oregon, Pennsylvania, Rhode Island, South Carolina, Texas, Utah, Vermont, Virginia, Washington, Wisconsin, and Washington D.C.</p>
<ul><li>While ActBlue is currently registered to support remote work in the states listed above, we possess the ability to register in additional states as needed. If you are located in a state not listed, we may still be able to proceed with your application, but please note that the offer process may take longer to accommodate registration requirements.</li></ul>
<p><b>
Work Schedule:</b></p>
<p>
This role requires availability during established, regular business hours (Mon-Fri) and is expected to be a part of an on-call rotation which will result in working nontraditional hours as needed.</p>
<p><b>
Work Environment:</b></p>
<p>
Employees can expect to work with distributed teams across all U.S. time zones. Our roles require extended technology usage, and proficiency with virtual communication tools such as Zoom and Slack. Regular attendance in virtual meetings is inherent to every position.</p>
<p><b>
Salary Range Details:</b></p>
<p>
Salary Range: $173,676 - $192,209 - $210,741</p>
<p>
ActBlue is committed to consistent compensation practices across our organization. Final salary offers will take into account factors such as candidate experience, interview performance and current team salary parity.</p>
<p><b>
Benefits:</b></p>
<ul>
<li>Flexible work schedules and an unlimited time-off policy</li>
<li>Fully paid and trans-inclusive health, dental, and vision insurance for employees and their families; plus fully-paid health reimbursement arrangement to use for out of pocket expenses and fully-paid short- and long-term disability</li>
<li>Fully paid basic and AD&amp;D life insurance and a voluntary supplemental life insurance option</li>
<li>Dependent and health care flexible spending account options</li>
<li>Employee Assistance Program (EAP) benefits for employees</li>
<li>Automatic 2% Employer-paid 401K contribution, plus up to an additional 6% match on employee contributions</li>
<li>A minimum of three months paid medical, family and parental leave (for all new parents, adoptions included)</li>
<li>Commuter or home-office benefits, including a $1,000 home-office setup allowance for all new full-time remote employees</li>
<li>Additional perks including quarterly snack deliveries and digital subscriptions to the Boston Globe &amp; New York Times</li>
</ul>
<p><b>ActBlue is unable to sponsor work visas at this time.</b></p>
<p><b>
UNION INFORMATION</b></p>
<p>
Supervisory role not part of the Bargaining Unit position: Certain employees who report to this position may be covered by a collective bargaining agreement.</p>
<p><b>
BACKGROUND CHECKS</b></p>
<p>
As part of our hiring process, ActBlue will conduct a background check at the time of offer. This will be completed in compliance with applicable laws and will not be initiated without your consent.</p>
<p><b>
INCLUSION STATEMENT FROM ACTBLUE</b></p>
<p>
ActBlue is committed to equal employment opportunities and fostering a diverse, inclusive workplace. We celebrate unique perspectives, honor the dignity of all individuals, and recognize that diverse backgrounds and identities strengthen our mission.</p>
<p>
If you're passionate about our work and see yourself in this role, we encourage you to apply&mdash;even if you don't meet every requirement.</p>
<p>
We also provide reasonable accommodations for individuals with disabilities throughout the hiring process and employment. To request an accommodation, email recruitment@actblue.com.</p><div><ul><li>ActBlue will <i>never</i> ask candidates to buy equipment, nor will we email from anything other than an actblue.com or actbluetech.com email address.</li></ul></div></div>

Manager, Security Engineering

Contentful

<div><h2 class="jobSectionHeader"><b>About the opportunity</b></h2>
<p><b>
Candidates must be located in the eastern time zone</b></p>
<p>
Contentful strives to build a secure and safe service and commits considerable effort and resources to security. Our Security team supports organization-wide information security management programs and collaborates closely with internal teams. We believe that Security must be anchored by DevOps principles with strong repeatable processes.</p>
<p>
We are looking for a committed and driven manager who is passionate about solving complex security problems in innovative and scalable ways. <b>As a Manager of Security Engineering, you will own security engineering across Contentful's corporate systems,</b> including the tooling and platforms that support the internal security team. While this role does not own security for the customer facing product, you will partner closely with product security teams within the security organization on shared responsibilities.</p>
<p>
You will balance people leadership with hands-on technical execution, including designing, building, and operating security controls and tooling at scale, with a particular focus on areas such as identity and access management, data security, and SaaS platforms. You will provide strategic guidance and lead initiatives while remaining directly involved in implementation. You may work independently at times, but will more often collaborate closely with security, IT, and cross-functional partners to align strategies, execute shared initiatives, and ensure comprehensive risk mitigation while minimizing impact on end users across the organization.</p>
<h2 class="jobSectionHeader"><b>
What to expect?</b></h2>
<ul><li>Develop a team, providing coaching, mentorship, goal setting, and performance feedback.</li>
<li>Define roles and make hiring decisions to grow the team in line with department needs.</li>
<li>Remain hands on, balancing technical leadership with direct implementation work.</li>
<li>Own execution and prioritization across projects and operations, using agile delivery practices.</li>
<li>Scale and mature effectiveness and efficiency by improving processes and tooling.</li>
<li>Champion continuous improvement across all aspects of the security program.</li>
<li>Continuously improve effectiveness and efficiency by evolving processes and tooling.</li>
<li>Communicate risks and technical concepts with clarity to leadership and stakeholders.</li>
<li>Collaborate with security leadership to execute business aligned, risk reduction roadmaps.</li>
<li>Shape work scope, sequencing, and success criteria inline with department and company needs.</li>
<li>Drive security processes, standards, and best practices across information technology assets.</li>
<li>Partner with stakeholders to evolve security awareness and specialized training across all functions.</li>
<li>Mature capabilities across endpoint, SaaS, and cloud configuration.</li>
<li>Own strategy evolution of corporate capabilities, including configuration, IAM, and data security.</li>
<li>Enhance tooling, automation, and integrations to improve visibility and reduce manual effort.</li>
<li>Support and guide security incident response efforts as a technical leader.</li>
<li>Support cross functional vulnerability management while advancing the program capabilities.</li>
<li>Define and maintain metrics to measure impact, optimize execution, and guide investment.</li>
<li>Partner with cross-functional teams for security enhancement and drive risk reduction.</li>
<li>Accelerate adoption of AI, balancing practicality enablement, and risk management.</li>
<li>Stay current on threats, vulnerabilities, and tactics, translating insights into actionable strategies.</li>
</ul><h2 class="jobSectionHeader"><b>What you need to be successful?</b></h2>
<ul><li>8+ years of progressive engineering and security experience.</li>
<li>3+ years managing people and security engineering teams.</li>
<li>Comfort operating in ambiguity, balancing strategic thinking, security, and practicality.</li>
<li>Expertise with AWS, GCP, and Azure.</li>
<li>Strong hands-on experience designing, implementing, and operating security controls at scale.</li>
<li>Demonstrated experience securing endpoint, SaaS, and cloud environments.</li>
<li>Experience working within identity and access management and data security programs.</li>
<li>Software development experience in modern programming language (Python, Go, etc)</li>
<li>Hands-on experience using Terraform and infrastructure-as-code.</li>
<li>Experience applying modern practices to improve efficiency and scalability or security programs.</li>
<li>Passion for solving complex security problems in innovative and scalable ways.</li>
<li>Experience using metrics to measure impact, optimize execution, and guide investment decisions.</li>
<li>Strong communication skills with the ability to explain technical topics to non technical audiences.</li>
<li>Ability to support occasional off-hours incident response efforts.</li>
<li>Familiarity with attacker techniques in cloud-native and traditional environments.</li>
<li>Hands-on experience owning security technologies (e.g., EDR, AntiVirus, etc.)</li>
<li>Proven ability to lead cross-functional initiatives and influence outcomes without direct authority.</li>
<li>Experience owning end to end security programs, proactively driving incremental improvement.</li>
<li>Strong systems thinking, with the ability to design security solutions that scale through efficiency.</li>
</ul><h2 class="jobSectionHeader"><b>What's in it for you?</b></h2>
<ul><li>Join an ambitious tech company reshaping the way people build digital experiences</li>
<li>Full-time employees receive Stock Options for the opportunity to share in the success of our company</li>
<li>Comprehensive healthcare package covering 100% of monthly health premiums for employees and 85% of costs for your dependents.</li>
<li>Fertility and family building benefits, including a lifetime reimbursable wallet to support your growing family.</li>
<li>We value<b> Work-Life balance </b>and<b> You Time</b>!<b> </b>A generous amount of paid time off, including vacation days, sick days, compassion days for loss, education days, and volunteer days</li>
<li><b>Company paid parental leave</b> to care for and focus on your growing family</li>
<li>Use your personal annual education budget to improve your skills and grow in your career</li>
<li>Enjoy a full range of virtual and in-person events, including workshops, guest speakers, and fun team activities, supporting learning and networking exchange beyond the usual work duties</li>
<li>An annual wellbeing stipend to care for your physical, financial, or emotional health</li>
<li>A monthly communication stipend and phone hardware upgrade reimbursement.</li>
<li>New hire office equipment stipend for hybrid or distributed employees. Get the gear you need to work at your best.</li>
</ul>
<p><i>This role will need to be conducted in a state in which we are currently registered to do business. In addition, this position is </i><b><i>not</i></b><i> eligible for visa sponsorship. Applicants must be authorized to work without the need for visa sponsorship by the start date of employment.</i></p>
<p>
This position is eligible for equity awards in accordance with the terms of Contentful's equity plans.</p>
<p>
Massachusetts Salary Statement: The salary range displayed is specifically for those potential hires who will work or reside in the state of Massachusetts if selected for the role. Any offered salary is determined based on internal equity, internal salary ranges, market data/ranges, applicant's skills and prior relevant experience, certain degrees and certifications (e.g. JD/technology), for example.</p>
<p>
Massachusetts Salary Range: $187,000 - $253,00</p>
<p>
#LI-Remote</p><div><h2 class="jobSectionHeader"><b>
Who are we?</b></h2>
<p>
Contentful is a leading <b>digital experience platform</b> that helps modern businesses meet the growing demand for engaging, personalized content at scale. By blending composability with native <b>AI</b> capabilities, Contentful enables dynamic personalization, automated content delivery, and real-time experimentation, powering next-generation digital experiences across brands, regions, and channels for more than 4,200 organizations worldwide. More than <b>700 people</b> from more than <b>70 nations</b> contribute their energy and creativity to Contentful, working from hubs in Berlin, Denver, San Francisco, London, New York, and distributed worldwide.</p>
<h2 class="jobSectionHeader"><b>
Everyone is welcome here!</b></h2>
<p><b>
&quot;Everyone is welcome here&quot;</b> is a celebrated component of our culture. At Contentful, we strive to create an inclusive environment that empowers our employees. We believe that our products and services benefit from our diverse backgrounds and experiences, and we are proud to be an equal opportunity employer. All qualified applications will receive consideration for employment without regard to race, color, national origin, religion, sexual orientation, gender, gender identity, age, physical [dis]ability, or length of time spent unemployed. We invite you to apply and join us!</p>
<p>
If you need reasonable accommodations at any point during the application or interview process, please let your recruiting coordinator know.</p>
<p><i>
Please be aware of scammers who may fraudulently allege to be from Contentful. These types of fraud can be carried out through copycat websites, fake email addresses claiming to be from our company, or social media. We do not ask for your personal information, such as bank account numbers, identification numbers, etc, through social media or chat-based apps, nor do we request or send money for the purchase of business equipment. If you suspect fraud, please report it to your local authorities, as well as reach out to us at </i><i>security-esk@contentful.com</i><i> </i><i>with any information you may have.</i></p>
<p>
By clicking &quot;Apply for this job,&quot; I acknowledge that I have read the &quot;Contentful's Candidate Privacy Notice&quot; and hereby consent to the collection, processing, use, and storage of my personal information as described therein.</p></div></div>

Berkshire Hathaway Specialty Insurance

<div><div><b>Who are we?</b></div><div></div><div><br>
A strategic and trusted insurance partner, Berkshire Hathaway Specialty Insurance (BHSI), provides a broad range of commercial property, casualty and specialty insurance coverages and outstanding service to customers and brokers around the world. Part of Berkshire Hathaway&rsquo;s insurance operations, we bring our solutions to market with our stellar brand name, top-rated balance sheet, and the expertise of our global team of professionals, who exude excellent capabilities and strong character.</div><div></div><div><br>
We are a values-based organization where respect, integrity, excellence, collaboration, and passion define who we are and how we do business. We value diversity of backgrounds, experience, and perspectives and strive to foster an inclusive environment that enables all our team members to bring their best selves to work. We are one team committed to building a culture where every teammate has the opportunity to contribute and be recognized. Want to be part of the team building the finest property, casualty and specialty lines insurance company in the world?</div><div></div><div><br>
Learn more about our unique culture and history.</div><div></div><div><b><br>
Job Opportunity:</b></div><div></div><div><br>
Berkshire Hathaway Specialty Insurance (BHSI) is seeking a forward‑thinking Cloud Security leader with a strong grounding in AI Security to join our Boston-based team. This role offers a unique opportunity to define and advance our cloud security strategy across modern, mission‑critical platforms, operating at the intersection of technology, risk, and business impact.</div><div></div><div><br>
As a core member of our cybersecurity leadership team reporting directly to the CISO, you will drive the evolution of our cloud and AI security ecosystems&mdash;establishing governance, controls, and compliance across our cloud infrastructure while helping secure our growing Artificial Intelligence footprint. If you are passionate about shaping the future of cloud security and influencing how secure systems and services are built and governed, we&rsquo;d welcome the conversation.</div><p></p><div><b><br>
Duties &amp; Responsibilities:</b></div><div></div><ul><li><b><br>
Cloud Security /AI Security Strategy &amp; Governance:</b><ul><li>
Develop and maintain the organization&rsquo;s cloud security and AI security strategy, standards, and policies across IaaS, PaaS, and SaaS environments.</li><li>
Define and enforce cloud architecture security principles aligned with Zero Trust.</li><li>
Identify and enforce AI security controls and configurations aligned with our cloud architecture</li><li>
Lead cloud and AI risk assessments, gap analysis, and initiative planning.</li><li>
Guide migration and modernization efforts to ensure secure-by-design implementations.</li></ul></li></ul><div></div><ul><li><b><br>
Operational Security &amp; Threat Management:</b><ul><li>
Oversee the configuration, monitoring, and continuous improvement of:<ul><li>
CSPM (Cloud Security Posture Management)</li><li>
CWPP/CNAPP (Cloud Workload Protection / Cloud-Native Security)</li><li>
SIEM/SOAR integrations for cloud telemetry</li><li>
Identity threat detection (ITDR)</li></ul></li><li>
Direct incident response for cloud-related security events in collaboration with SOC/IR teams.</li><li>
Ensure continuous monitoring for misconfigurations, vulnerabilities, and anomalies.</li></ul></li></ul><div></div><ul><li><b><br>
Identity, Access, and Data Protection</b><ul><li>
Support cloud &amp; AI IAM frameworks (least privilege, conditional access, workload identities).</li><li>
Drive cloud-related adoption of encryption, secrets management, and key management (BYOK/CMK).</li><li>
Ensure efficacy of data classification and DLP controls across cloud environments.</li></ul></li></ul><div></div><ul><li><b><br>
DevSecOps &amp; Engineering Partnership</b><ul><li>
Embed security controls and testing into CI/CD pipelines in collaboration with AppSec.</li><li>
Oversee IaC scanning and container security while supporting SAST/DAST and supply chain security.</li><li>
Collaborate with engineering to remediate findings and architect secure workloads.</li></ul></li></ul><div></div><ul><li><b><br>
Compliance &amp; Risk Management</b><ul><li>
Ensure cloud environments meet regulatory and compliance requirements.</li><li>
Own cloud security and AI security audits and evidence collection.</li><li>
Mature asset inventories, risk registers, and control documentation.</li></ul></li></ul><div></div><ul><li><b><br>
Leadership &amp; Stakeholder Management</b><ul><li>
Build and mentor a team of cloud security &amp; AI security engineers/analysts.</li><li>
Provide regular reporting to security leadership and executives.</li><li>
Partner across technology, infrastructure, DevOps, and architecture.</li></ul></li></ul><div></div><div><b><br>
 Qualifications, Skills and Experience:</b></div><div><ul><li>
5&ndash;10+ years of experience in cybersecurity, with a focus on cloud security.</li><li>
Hands-on experience with AWS, Azure, or GCP security services.</li><li>
Strong knowledge of:<ul><li>
Cloud IAM and identity governance</li><li>
Network security (VPCs/VNets, firewalls, segmentation)</li><li>
Cloud-native monitoring, threat detection, and logging</li><li>
Infrastructure-as-Code (Terraform, CloudFormation, Bicep)</li></ul></li><li>
Experience with CSPM, CWPP/CNAPP, SIEM, SOAR, and vulnerability management tools.</li><li>
Knowledge of compliance frameworks and cloud shared responsibility models.</li></ul></div><div></div><div><b><br>
BHSI Offers:</b></div><div><ul><li>
A competitive package and exciting growth opportunities for career-oriented teammates</li><li>
A dynamic, action oriented, and thoughtful environment centered on always doing the right thing for our customers, teammates and our other stakeholders</li><li>
A purposely non-bureaucratic organization that embraces simplicity over complexity and emphasizes individual excellence in a team framework</li></ul></div><ul><li>
Benefits that support your life and well-being, which include:</li></ul><div><ul><li>
Comprehensive Health, Dental and Vision benefits</li><li>
Disability Insurance (both short-term and long-term)</li><li>
Life Insurance (for you and your family)</li><li>
Accidental Death &amp; Dismemberment Insurance (for you and your family)</li><li>
Flexible Spending Accounts</li><li>
Health Reimbursement Account</li><li>
Employee Assistance Program</li><li>
Retirement Savings 401(k) Plan with Company Match</li><li>
Generous holiday and Paid Time Off</li><li>
Tuition Reimbursement</li><li>
Paid Parental Leave</li></ul></div><div></div><div><br>
The base salary range for this position in Boston is $150,000.00 to $220,000.00, along with annual bonus eligibility. Total compensation for a candidate is determined by their relevant skills, location, and experience. We value our teammates &ndash; both their capabilities and character &ndash; as demonstrated by our amazing culture.</div><div></div><div><br>
NOTE: Compensation will be commensurate with experience. This job description is not intended to be all-inclusive. Team Member may perform other related duties as negotiated to meet the ongoing needs of the organization</div></div>

Senior Director, Cloud Security & AI Security

Data Engineer (Python & SQL)

CVS Health

<div><p>We&rsquo;re building a world of health around every individual &mdash; shaping a more connected, convenient and compassionate health experience. At CVS Health&reg;, you&rsquo;ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger &ndash; helping to simplify health care one person, one family and one community at a time.</p><p></p><p><b>
Position Summary</b></p><p></p><p>
The Principal Threat Adversary Operations Engineer &ndash; Red Team is a senior, highly technical individual contributor responsible for designing and executing advanced offensive security operations across complex enterprise, cloud, and hybrid environments. This role leads the development of custom attack techniques and novel adversary simulations, exploring fringe and emerging attack vectors beyond standard penetration testing methodologies. Penetration testing is a core function of the role, with a focus on uncovering high‑impact, previously unidentified security weaknesses across networks, applications, identities, and systems.</p><p></p><p>
Operating at a principal engineering level, the role builds and executes sophisticated attack campaigns using a combination of industry‑standard tooling and extensive custom exploit and tooling development. The Principal Engineer applies deep expertise in adversary tradecraft, scripting, and automation to emulate real‑world threat actors at scale, aligning attack scenarios with modern and emerging Tactics, Techniques, and Procedures (TTPs). Offensive activities are informed by current threat intelligence and adversary modeling to ensure realistic, intelligence‑driven simulations that meaningfully stress defensive controls.</p><p></p><p>
The role serves as a critical purple team partner and trusted advisor to detection, response, and incident investigation teams, translating complex offensive findings into measurable improvements in defensive capability, telemetry, and operational readiness. Through clear articulation of technical risk and business impact, the Principal Engineer influences enterprise security strategy, informs long‑term defensive investments, and supports high‑severity investigations and post‑incident analysis. All offensive activities are executed with strong governance awareness, ensuring alignment with regulatory, audit, and compliance expectations while advancing the organization&rsquo;s adversary‑informed security posture.</p><p></p><p>
Role Responsibilities:</p><p></p><p>
Penetration Testing &amp; Adversary Operations</p><ul><li>
Lead and execute advanced internal and external penetration tests across enterprise, cloud, and emerging technology environments.</li><li>
Design and execute custom adversary emulation campaigns to pressure‑test detection, response, and control effectiveness.</li><li>
Own and evolve the offensive security toolset, including development of custom exploits, scripts, and attack frameworks.</li><li>
Produce executive‑ready assessments that clearly articulate technical risk, business impact, and remediation priorities.</li></ul><p>
Purple Team &amp; Defensive Enablement</p><ul><li>
Partner closely with detection, response, and security engineering teams to drive purple team exercises and adversary‑informed improvements at scale.</li><li>
Translate offensive findings into measurable enhancements in monitoring, telemetry, alerting, and response workflows.</li><li>
Lead technical deep dives and knowledge‑sharing sessions to elevate enterprise understanding of adversary behavior and attack paths.</li></ul><p>
Security Strategy, Automation &amp; Incident Support</p><ul><li>
Influence enterprise adversary operations and threat management strategy through risk‑based assessments and adversary trend analysis.</li><li>
Architect and implement automation to scale penetration testing and adversary simulation capabilities.</li><li>
Provide expert adversary insight during incident response and threat hunting, informing hypotheses, detections, and post‑incident improvements.</li></ul><p></p><p><b>
Required Qualifications</b></p><ul><li>
10+ years of hands‑on experience in penetration testing, red teaming, adversary emulation, and/or offensive security.</li><li>
7+ years of deep experience with tools such as Kali Linux, Metasploit, Nmap, Burp Suite, and comparable frameworks.</li><li>
5+ years of advanced scripting experience (Python, PowerShell, Bash, or similar languages).</li><li>
5+ years of experience securing and testing cloud platforms (AWS, Azure, GCP) and containerized environments.</li></ul><p></p><p><b>
Preferred Qualifications</b></p><ul><li>
Advanced certifications such as OSCP, OSCE, CISSP, CEH, or GPEN.</li><li>
Demonstrated leadership in purple team programs and adversary simulation initiatives.</li><li>
Strong familiarity with PCI‑DSS, HIPAA, ISO 27001, and enterprise compliance environments.</li><li>
Expert knowledge of MITRE ATT&amp;CK, NIST, and CIS security frameworks.</li><li>
Exceptional communication skills with the ability to influence technical and non‑technical senior stakeholders.</li></ul><p></p><p><b>
Education</b></p><ul><li>
Bachelor&rsquo;s degree or equivalent experience (High School Diploma and 4 years relevant experience)</li></ul><p></p><p><b>
Pay Range</b></p><p>
The typical pay range for this role is:</p><p></p>
$144,200.00 - $288,400.00<p><br>
This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company&rsquo;s equity award program.</p><p><br>
Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.</p><p></p><p><b>
Great benefits for great people</b></p><p></p><p>
We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families.</p><br>
This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility.<p><br>
Additional details about available benefits are provided during the application process and on Benefits Moments.</p><br>
We anticipate the application window for this opening will close on: 05/11/2026<p></p><p>
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.</p></div>

Principal Adversary Operations Engineer - Red Team

Explore 173+ Senior security engineer in Boston this May. Find roles across top companies and apply now to boost your career.

173 senior security engineer jobs In Boston

Senior Engineer, Data Protection & AI Security

Senior Software Engineer, Security

Manager, Security Engineering

Manager, Security Engineering

Senior Director, Cloud Security & AI Security

Data Engineer (Python & SQL)

Principal Adversary Operations Engineer - Red Team