principal threat detection engineer - blue team

senior director, cloud security & ai security

senior engineer, data protection & ai security

manager, security engineering Jobs in Boston

manager, security engineering

principal threat detection engineer - blue team Jobs in Boston

senior director, cloud security & ai security Jobs in Boston

senior engineer, data protection & ai security Jobs in Boston

senior full stack software engineer Jobs in Boston

senior full stack software engineer

senior software engineer security

Sonos

<div><div><div><div><div><div><div><div>At Sonos we want to create the ultimate listening experience for our customers and know that it starts by listening to each other. As part of the Sonos team, you&rsquo;ll collaborate with people of all styles, skill sets, and backgrounds to realize our vision while fostering a community where everyone feels included and empowered to do the best work of their lives.</div></div></div></div></div></div></div>
Location: This position is considered hybrid, allowing for a combination of remote work and in-office collaboration. Qualified applicants must live within commuting distance of our Boston, MA or Seattle, WA office locations and should expect to be in office a minimum of 3 days per week. #LI-Hybrid
Visa Sponsorship: Sonos is unable to sponsor or take over sponsorship of an employment visa for this role at this time. We ask that applicants be authorized to work for any US employer, both now and in the future.
The CoreSW-Security team is responsible for securing Sonos products throughout their life, from the hardware level to the application layer; our charter spans everything from SoC-level secure boot, to kernel and userspace security software, to product manufacturing, to software supply chain and beyond. Our mission is to ensure that the simplicity and delight our customers expect from Sonos products never comes at the cost of their security or privacy. We proactively address security problems, risks, and threats, and our work has a direct impact on every product Sonos ships. As an engineer on the CoreSW-Security team, you'll operate across a uniquely broad scope, owning meaningful workstreams end-to-end on a small, high-trust team.<h1 class="jobSectionHeader">
What You&rsquo;ll Do</h1><ul><li>
Own security-relevant workstreams end-to-end, everything from design, to implementation, to long term maintenance in fielded devices</li><li>
Collaborate across the organization in order to balance security and usability concerns</li><li>
Contribute to security design reviews across Sonos&rsquo; portfolio of devices and software features</li><li>
Triage and resolve vulnerability reports directly from security researchers and from the cybersecurity industry</li></ul><h1 class="jobSectionHeader">
What You&rsquo;ll Need</h1>
Basic Qualifications<ul><li>
Bachelor&rsquo;s in Computer Engineering, Electrical Engineering, Computer Science or related field</li><li>
At least 5 to 8 years of professional experience developing software in C and C++ for embedded systems</li><li>
Demonstrated hands-on experience with embedded systems security on Linux-based systems, including bootloader, kernel-, and userspace security</li><li>
Strong written and verbal communication skills</li><li>
Qualified applicants must be able to work from the office a minimum of 3 days per week</li></ul>
Preferred Qualifications<ul><li>
Experience with security architecture and design, including platform hardening</li><li>
Knowledge of cryptographic algorithms and systems</li><li>
Knowledge of Yocto Project / OpenEmbedded workflows</li><li>
Familiarity with the use of AI tools for code and vulnerability scanning</li><li>
Familiarity with security research, including ethical hacking or penetration testing</li><li>
Familiarity with cybersecurity regulations, such as CRA</li></ul>
Research shows that some candidates may not apply for roles if they don't meet all the criteria. If you don&rsquo;t have 100% of the skills listed, we strongly encourage you to apply if interested.
Your profile will be reviewed and you'll hear from us once we have an update. At Sonos we take the time to hire right and appreciate your patience.
The base pay range for this role based off geographic location is:
$165,000 and $206,000
The specific pay offered will depend on the candidate&rsquo;s geographic location, as well as qualifications and experience. We apply geographic pay differentials based on the cost of labor in the market. Employees in high-cost locations may be compensated at the upper end of the range, while those in medium or low cost markets may be compensated at the lower end of the range. Your recruiter can provide more details about the specific salary range for your location during the hiring process.
Please note that compensation details listed in US job postings reflect the base salary only, and do not include bonus, equity, or benefits.
We also offer a comprehensive benefits program with choice and flexibility in mind to help support the health, wealth, and overall well-being of our employees. Regular full time employees in the US are eligible for benefits on day one, including:<ul><li>
Medical, Dental, and Vision Insurance</li><li>
A 401(k) plan with company matching and immediate vesting</li><li>
An Open Time Off policy (OTO) so you have maximum opportunity to disconnect and recharge, with no tenure-based vacation accruals required</li><li>
80 hours of sick time upon hire, refreshed annually</li><li>
Up to 12 paid holidays per calendar year</li><li>
Sonos offers a generous paid leave program for new parents or to care for a family member with a serious health condition, as well as short- and long-term disability for your own medical condition</li><li>
Company-paid Disability, Life, and AD&amp;D Insurance</li><li>
Voluntary benefits, including Voluntary Life, AD&amp;D, Accident, and Pet Insurance</li><li>
Mental health benefits to support your holistic well-being</li><li>
A generous employee discount program &amp; Sonos Radio HD - on us!</li></ul>
Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company&rsquo;s sole discretion, consistent with the law.
Notice to U.S. Job Applicants: Sonos is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.
Sonos is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please send an e-mail to accommodations@sonos.com and let us know the nature of your request and your contact information.</div>

Senior Software Engineer, Security

Data Engineer (Python & SQL)

CVS Health

<div>We&rsquo;re building a world of health around every individual &mdash; shaping a more connected, convenient and compassionate health experience. At CVS Health&reg;, you&rsquo;ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger &ndash; helping to simplify health care one person, one family and one community at a time.
Position Summary
The Principal Threat Adversary Operations Engineer &ndash; Red Team is a senior, highly technical individual contributor responsible for designing and executing advanced offensive security operations across complex enterprise, cloud, and hybrid environments. This role leads the development of custom attack techniques and novel adversary simulations, exploring fringe and emerging attack vectors beyond standard penetration testing methodologies. Penetration testing is a core function of the role, with a focus on uncovering high‑impact, previously unidentified security weaknesses across networks, applications, identities, and systems.
Operating at a principal engineering level, the role builds and executes sophisticated attack campaigns using a combination of industry‑standard tooling and extensive custom exploit and tooling development. The Principal Engineer applies deep expertise in adversary tradecraft, scripting, and automation to emulate real‑world threat actors at scale, aligning attack scenarios with modern and emerging Tactics, Techniques, and Procedures (TTPs). Offensive activities are informed by current threat intelligence and adversary modeling to ensure realistic, intelligence‑driven simulations that meaningfully stress defensive controls.
The role serves as a critical purple team partner and trusted advisor to detection, response, and incident investigation teams, translating complex offensive findings into measurable improvements in defensive capability, telemetry, and operational readiness. Through clear articulation of technical risk and business impact, the Principal Engineer influences enterprise security strategy, informs long‑term defensive investments, and supports high‑severity investigations and post‑incident analysis. All offensive activities are executed with strong governance awareness, ensuring alignment with regulatory, audit, and compliance expectations while advancing the organization&rsquo;s adversary‑informed security posture.
Role Responsibilities:
Penetration Testing &amp; Adversary Operations<ul><li>
Lead and execute advanced internal and external penetration tests across enterprise, cloud, and emerging technology environments.</li><li>
Design and execute custom adversary emulation campaigns to pressure‑test detection, response, and control effectiveness.</li><li>
Own and evolve the offensive security toolset, including development of custom exploits, scripts, and attack frameworks.</li><li>
Produce executive‑ready assessments that clearly articulate technical risk, business impact, and remediation priorities.</li></ul>
Purple Team &amp; Defensive Enablement<ul><li>
Partner closely with detection, response, and security engineering teams to drive purple team exercises and adversary‑informed improvements at scale.</li><li>
Translate offensive findings into measurable enhancements in monitoring, telemetry, alerting, and response workflows.</li><li>
Lead technical deep dives and knowledge‑sharing sessions to elevate enterprise understanding of adversary behavior and attack paths.</li></ul>
Security Strategy, Automation &amp; Incident Support<ul><li>
Influence enterprise adversary operations and threat management strategy through risk‑based assessments and adversary trend analysis.</li><li>
Architect and implement automation to scale penetration testing and adversary simulation capabilities.</li><li>
Provide expert adversary insight during incident response and threat hunting, informing hypotheses, detections, and post‑incident improvements.</li></ul>
Required Qualifications<ul><li>
10+ years of hands‑on experience in penetration testing, red teaming, adversary emulation, and/or offensive security.</li><li>
7+ years of deep experience with tools such as Kali Linux, Metasploit, Nmap, Burp Suite, and comparable frameworks.</li><li>
5+ years of advanced scripting experience (Python, PowerShell, Bash, or similar languages).</li><li>
5+ years of experience securing and testing cloud platforms (AWS, Azure, GCP) and containerized environments.</li></ul>
Preferred Qualifications<ul><li>
Advanced certifications such as OSCP, OSCE, CISSP, CEH, or GPEN.</li><li>
Demonstrated leadership in purple team programs and adversary simulation initiatives.</li><li>
Strong familiarity with PCI‑DSS, HIPAA, ISO 27001, and enterprise compliance environments.</li><li>
Expert knowledge of MITRE ATT&amp;CK, NIST, and CIS security frameworks.</li><li>
Exceptional communication skills with the ability to influence technical and non‑technical senior stakeholders.</li></ul>
Education<ul><li>
Bachelor&rsquo;s degree or equivalent experience (High School Diploma and 4 years relevant experience)</li></ul>
Pay Range
The typical pay range for this role is:
$144,200.00 - $288,400.00 
This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company&rsquo;s equity award program. 
Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.
Great benefits for great people
We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families. 
This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility. 
Additional details about available benefits are provided during the application process and on Benefits Moments. 
We anticipate the application window for this opening will close on: 05/11/2026
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.</div>

Principal Adversary Operations Engineer - Red Team

<div>We&rsquo;re building a world of health around every individual &mdash; shaping a more connected, convenient and compassionate health experience. At CVS Health&reg;, you&rsquo;ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger &ndash; helping to simplify health care one person, one family and one community at a time.
Position Summary
The Principal Threat Detection Engineer serves as a senior, highly technical individual contributor responsible for the design, implementation, and continuous evolution of advanced threat detection capabilities across the enterprise. This role owns the development and optimization of detection logic leveraging Microsoft Security tooling, CrowdStrike, Splunk Cloud, Cribl, and related SOC platforms to identify sophisticated adversary activity spanning endpoint, network, and cloud environments. A core focus of the role is proactive threat hunting and the identification of behavioral indicators that improve visibility into novel and emerging attack techniques.
In this capacity, the Principal Threat Detection Engineer leads detection engineering strategy and execution, building, tuning, and automating high‑fidelity alerts using SIEM and analytics platforms such as Splunk Cloud, Microsoft Sentinel, and Cribl. The role applies deep knowledge of query languages (including KQL) and custom detection logic to reduce noise, improve precision, and increase analyst efficiency. Detection capabilities are continuously iterated based on adversary tradecraft, environmental changes, and lessons learned from active investigations and simulations.
The role operates at the intersection of offensive and defensive security, collaborating closely with threat hunting, incident response, and purple team partners to translate adversary emulation and penetration testing findings into actionable detection improvements aligned to the MITRE ATT&amp;CK framework. The position integrates threat intelligence and supports active incident investigations by providing insight into attacker behavior and detection blind spots. Through continuous innovation and a strong understanding of regulatory and compliance considerations (e.g., PCI-DSS, HIPAA, NIST, ISO 27001), the Principal Threat Detection Engineer strengthens the organization&rsquo;s overall detection maturity and cyber resilience.
Role Responsibilities:
Detection Engineering &amp; Threat Hunting<ul><li>
Design, deploy, and continuously optimize high‑fidelity detections across SIEM platforms including Microsoft Sentinel, Splunk Cloud, and Cribl.</li><li>
Lead proactive threat hunting using Microsoft Defender, CrowdStrike, and other SOC tools to identify advanced and emerging adversary activity.</li><li>
Develop custom detection logic and automation using KQL, SPL, and scripting, iterating based on threat intelligence and environmental changes.</li></ul>
Adversary Emulation &amp; Purple Teaming<ul><li>
Design and execute adversary emulation and purple team exercises to evaluate and improve detection and response effectiveness.</li><li>
Partner with defensive teams to translate offensive findings into actionable improvements aligned to the MITRE ATT&amp;CK framework.</li><li>
Support penetration testing efforts and produce actionable assessments highlighting detection gaps and remediation opportunities.</li></ul>
Threat Intelligence &amp; Incident Response Support<ul><li>
Integrate internal and external threat intelligence into detection strategies to prioritize risk and adapt alert logic.</li><li>
Support active incident investigations by providing insight into adversary tactics, detection blind spots, and response opportunities.</li></ul>
Detection Strategy &amp; Risk Visibility<ul><li>
Contribute to the development of enterprise‑wide threat detection strategy aligned with risk management objectives.</li><li>
Communicate detection coverage, gaps, and effectiveness to security leadership through clear, actionable reporting.</li></ul>
Required Qualifications<ul><li>
10+ years of experience in threat detection, hunting, penetration testing, and/or offensive security.</li><li>
7+ years of experience in Microsoft Security tools (Defender for Endpoint, Sentinel), CrowdStrike, Splunk Cloud, and Cribl.</li><li>
5+ years of experience with KQL, SPL, Python, PowerShell, or Bash scripting for automation and detection logic.</li></ul>
Preferred Qualifications<ul><li>
Relevant certifications such as OSCP, GCIH, GCIA, CISSP, CEH, or Microsoft Azure Certification.</li><li>
Experience in managing or participating in purple team exercises.</li><li>
Familiarity with compliance standards like PCI-DSS, HIPAA, or ISO 27001.</li><li>
Strong understanding of the MITRE ATT&amp;CK framework and security standards (NIST, CIS).</li><li>
Strong communication skills to convey complex security issues to non-technical stakeholders.</li></ul>
Education<ul><li>
Bachelor&rsquo;s degree or equivalent experience (High School Diploma and 4 years relevant experience)</li></ul>
Pay Range
The typical pay range for this role is:
$144,200.00 - $288,400.00 
This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company&rsquo;s equity award program. 
Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.
Great benefits for great people
We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families. 
This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility. 
Additional details about available benefits are provided during the application process and on Benefits Moments. 
We anticipate the application window for this opening will close on: 05/11/2026
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.</div>

Principal Threat Detection Engineer - Blue Team

Veson Nautical

<div></div><div>Senior Full Stack Software Engineer
About Veson:
Veson Nautical is a well-established and rapidly growing software company working to provide end-to-end logistical, operational, and analytical solutions to propel the efficiency and effectiveness of Maritime Commerce.
The Opportunity:
You will be joining a highly collaborative Agile team charged with the responsibility of coding, testing, and maintaining our end-to-end maritime commerce solutions! A great chance to work with other engineers at various experience levels while having the flexibility to wear many hats!
Our Stack:
We use TypeScript, Node.js, React, Next.js, GraphQL, Docker, MongoDB, AWS, and Inngest for background job processing. AI tooling and agentic workflows are a first-class part of how we build and how we work day-to-day.
Required Skills/Experience:<ul><li>
Minimum 5 years of experience as a software engineer</li><li>
Proficiency in developing complex frontend applications using React</li><li>
Proficiency with Nest.js or comparable structured, opinionated backend frameworks (e.g., Express, Fastify)</li><li>
Proficiency in working with GraphQL APIs
</li><li>Proficiency with NoSQL databases (e.g., MongoDB)</li><li>
Proficiency leveraging AI coding tools as part of your day-to-day engineering workflow, including the ability to construct effective prompts and critically validate AI-generated output</li><li>
Familiarity with Agile development methodologies</li></ul>
Nice to Have Skills/Experience:<ul><li>
Working knowledge of C#, C++ or any other object-oriented programming language</li><li>
Proficiency with SQL databases
</li><li>Familiarity with background job processing tools such as Inngest, Agenda.js, or Temporal</li><li>
Experience working with AI-powered workflows including agentic processing, document classification, and asynchronous AI pipelines</li><li>
Experience with AWS technologies such as SQS, SNS, and S3
</li><li>Experience creating and contributing to architecture design and documentation</li><li>
Experience in building distributed, microservices systems.</li></ul>
We are focused on building a diverse and inclusive workforce. If you&rsquo;re excited about this role, but do not meet 100% of the qualifications listed above, we encourage you to apply. While we try to be thorough with our job descriptions, not everything about you as a candidate can be condensed into a list of bullet points.<div>
More About Veson:</div><div> 
</div><div>We are a team of multi-cultural, multi-disciplined professionals that are dedicated to making our clients successful and charting a new, innovative course for the commercial marine industry. Veson Nautical employs a staff of extremely capable creators and innovators all focused on meeting the goals of our clients. We invest extensively in employee development and experience to maintain focus and enthusiasm. The Veson Nautical team is made up of a dynamic blend of engineers, artists, sailors, teachers, brokers, bankers, traders, consultants, and customer service experts.</div><div></div><div> 
Veson Nautical is a successful, rapidly growing global software company. Our clients are the world&rsquo;s leading commercial maritime owners, operators and commodity trading companies. Veson&rsquo;s solutions enable our clients to identify new opportunities and proactively manage their business to make more profitable decisions. With offices in Singapore, Tokyo, London, Houston and headquarters in Boston, USA, Veson Nautical is a dynamic organization with a committed team of professionals. Dedicated to ensuring the highest levels of client satisfaction, Veson Nautical brings decades of experience, technical knowledge, enthusiasm and commitment to clients around the world. The combination of exceptional market growth and leading market position make this a superb opportunity for the right candidate.</div><div></div> 
#LI-Hybrid</div>

Senior Full Stack Software Engineer

NAMETAG

<div>Team: Sales / Solution Engineering

Mindset: Own the technical win.
<h3 class="jobSectionHeader">
About Nametag</h3>

Nametag is a category leader in identity verification, security, and account protection. We sell into security-conscious enterprises with complex environments, and high technical standards. Our Solutions Engineers are trusted technical partners to both customers and Account Executives&mdash;and are accountable for proving value, not just explaining it.

We value intellectual curiosity, collaboration, and a strong sense of responsibility in protecting enterprise security.
<h3 class="jobSectionHeader">
About the Role</h3>

We're hiring an Enterprise Solutions Engineer to own the technical motion in complex enterprise deal cycles. This role partners directly with Account Executives to drive new business and expansion, assisting with discovery, shaping technical strategy, and running proofs-of-concept that align to the buyer's security, identity, and implementation criteria.

This is not a demo jockey role. You are responsible for the technical win&mdash;from first technical conversation through POC success and into a clean, confident handoff to post-sales. You'll stay engaged through implementation to ensure what was sold is what gets delivered, on time and against the buyer's stated objectives.
<h3 class="jobSectionHeader">
Responsibilities</h3>
<ul><li>Partner closely with Account Executives to drive the technical validation for enterprise new business and expansion opportunities.</li>
<li>Lead deep technical discovery to understand customer identity architecture, security posture, and success criteria.</li>
<li>Own and execute enterprise-grade demos and proof-of-concept, clearly tied to documented success criteria reflecting customer requirements around relevant use cases,, risk factors, and decision criteria.</li>
<li>Articulate Nametag's value in the context of IAM, authentication flows, and account protection&mdash;not just product features.</li>
<li>Serve as the primary technical adviser during the sales cycle, building trust with security, IT, and identity stakeholders.</li>
<li>Define clear technical success criteria and acceptance standards for each deal.</li>
<li>Own the handover to post-sales, ensuring Solutions Engineering, Customer Success, and Technical Customer Engineering teams have full context.</li>
<li>Provide continuity and technical oversight during implementation to ensure onboarding stays aligned with what was sold and agreed.</li>
<li>Surface product gaps, competitive insights, and recurring objections to Product and Leadership.</li>
Support renewals and expansions as necessary by re-engaging on architecture changes, new use cases, integration opportunities, and evolving security requirements. 
<li>
</li>
</ul><h3 class="jobSectionHeader">Tech You'll Work With</h3>
<ul><li>Identity and access management platforms: Okta, Microsoft Entra ID (Azure AD), Auth0, Ping, Duo</li>
<li>Authentication and federation standards: SAML, OIDC, OAuth, SSO, MFA</li>
<li>Enterprise IT and workflow systems: ServiceNow, custom internal platforms</li>
<li>REST APIs, webhooks, and modern SaaS architectures</li>
<li>Cloud environments and enterprise security tooling</li>
<li>Customer demo, POC, and evaluation environments</li>
</ul><h3 class="jobSectionHeader">Qualifications</h3>
<ul><li>5+ years experience in Pre-sales Solutions Engineering, Sales Engineering, or Technical Consulting in B2B SaaS.</li>
<li>Strong background in IAM, cybersecurity, or enterprise infrastructure.</li>
<li>Hands-on experience with SAML SSO, identity federation, and enterprise authentication flows.</li>
<li>Proven track record running successful enterprise POCs and technical evaluations.</li>
<li>Comfortable engaging with senior technical buyers (Security, IAM, IT Architecture).</li>
<li>Strong written and verbal communication skills&mdash;able to explain complex systems clearly and credibly.</li>
<li>Bonus: Experience supporting post-sale implementations or working closely with Customer Success teams.</li>
</ul><h3 class="jobSectionHeader">Who Will Succeed in This Role If</h3>
<ul><li>You take personal ownership of the technical win.</li>
<li>You think demos should prove outcomes, not just show features.</li>
<li>You're comfortable pushing back when a POC is poorly scoped or misaligned.</li>
<li>You care deeply about clean handoffs and long-term customer success.</li>
<li>You enjoy complex environments where trust, clarity, and execution matter.</li>
</ul><h3 class="jobSectionHeader">Why Join</h3>

You'll work on high-impact enterprise deals where technical credibility is decisive. You'll partner closely with Sales, Product, and Customer Success leadership, influence how we sell and onboard at scale, and help define Nametag's technical reputation in the market.</div>

Enterprise Solutions Engineer (pre-sales)

Bain Capital

<div>Bain Capital Overview:
With approximately $215 billion of assets under management, Bain Capital is one of the world&rsquo;s leading private investment firms. We create lasting impact for our investors, teams, businesses, and the communities in which we live. Over four decades we have strategically grown our platform to focus on Private Equity, Growth &amp; Venture, Capital Solutions, Credit, and Real Assets. Today, our team includes 1,985+ employees in 24 offices on four continents.
We partner differently to help people and companies embrace possibility and realize potential. Founded as a private partnership in 1984, we have fostered a culture of innovation, entrepreneurialism, and agility, empowering our people to define and own their career trajectories. Today, our partnership approach enables us to pursue strategic growth, build enduring relationships with a robust external network, and collaborate across our integrated platform to connect the deep and diverse expertise that unlocks breakthrough insights.
Our people are the heart of our advantage. Colleagues at all levels have a seat at the table as they tackle business challenges with a principal investor mindset. By asking incisive questions, respectfully challenging one another, and remaining intellectually agile, we work together to achieve exceptional outcomes.
For more information visit: Bain Capital
Position Overview
Bain Capital&rsquo;s Information Security team is seeking a Senior Engineer, Data Protection &amp; AI Security to own and advance the firm&rsquo;s data security posture and AI security capabilities. This is a hands-on engineering role responsible for deploying, operationalizing, and maturing the platforms and processes that protect the firm&rsquo;s most sensitive data&mdash;across cloud environments, SaaS applications, databases, and AI workflows.
The ideal candidate combines deep technical expertise in data security platforms (DSPM, DLP, data classification) with a forward-looking understanding of how AI adoption introduces new data risks. This person will work closely with Security Engineering, Cloud Operations, the Data Science team, and platform owners to build a cohesive data protection program&mdash;one that addresses both traditional data governance gaps and the emerging challenge of securing enterprise AI tools and workflows.
This is not a monitoring or compliance role. This is an engineering role for someone who builds things, owns outcomes, and can operate independently in a fast-moving environment with a growing security platform portfolio.<div></div>
Key Responsibilities
Data Security Posture Management<ul><li>
Own the end-to-end deployment, configuration, and operationalization of the firm&rsquo;s DSPM platform, including onboarding data sources across public cloud environments, cloud data warehouses, SQL databases, and network file shares</li><li>
Triage and prioritize DSPM findings, coordinate remediation with data owners and infrastructure teams, and build reporting workflows that translate discovery results into actionable risk reduction</li><li>
Rationalize DSPM capabilities across the security tool portfolio to eliminate overlap between cloud-native application protection, DSPM, and endpoint-based data security platforms</li><li>
Partner with Cloud Operations and application teams to navigate technical integration challenges, including IAM permissions, network connectivity, and change management processes</li></ul>
Data Classification &amp; Governance<ul><li>
Design and implement a data classification framework that establishes sensitivity levels, ownership models, and handling requirements for the firm&rsquo;s data</li><li>
Develop and maintain data classification policies that inform downstream controls across DLP, DSPM, access governance, and backup immutability</li><li>
Serve as the security team&rsquo;s subject matter expert on data governance, partnering with Compliance and business stakeholders to align classification efforts with regulatory and operational requirements</li></ul>
AI Security<ul><li>
Evaluate, deploy, and manage AI security monitoring tools to provide visibility into sanctioned and unsanctioned AI usage across the enterprise</li><li>
Develop detection capabilities for sensitive data exposure through GenAI workflows, including monitoring for data leakage via AI prompts, outputs, and integrations with enterprise tools</li><li>
Establish and maintain an AI governance operating model in coordination with the CISO and the Data Science team, including sanctioned tool inventories, acceptable use guardrails, and risk-based approval workflows for new AI applications</li><li>
Stay current on evolving AI security frameworks (OWASP LLM Top 10, NIST AI RMF, MITRE ATLAS) and translate emerging threats into practical defensive measures for the firm</li></ul>
Data Loss Prevention &amp; Insider Threat<ul><li>
Manage and enhance the firm&rsquo;s DLP and insider threat platforms to prevent unauthorized data movement across endpoints, cloud applications, and email</li><li>
Develop and tune DLP policies informed by DSPM discovery and data classification outputs, ensuring controls are risk-proportionate and operationally sustainable</li><li>
Partner with Security Operations to integrate data protection alerts into the firm&rsquo;s SOAR platform for automated triage and response workflows</li></ul>
TECHNOLOGY EXPERIENCE<ul><li>
Hands-on experience deploying and operating Data Security Posture Management (DSPM) platforms</li><li>
Strong working knowledge of cloud security in public cloud environments (AWS preferred), including IAM roles and policies, object storage security, VPC architecture, and infrastructure-as-code templates</li><li>
Experience with enterprise DLP platforms and insider threat tools, including policy development, tuning, and incident workflows</li><li>
Familiarity with data classification methodologies and tools across structured and unstructured data environments</li><li>
Experience with SaaS Security Posture Management (SSPM) platforms</li><li>
Working knowledge of AI/ML security concepts, including GenAI data leakage vectors, prompt injection risks, and shadow AI discovery</li><li>
Experience integrating security tools via APIs and working with SOAR and automation platforms</li><li>
Proficiency with cloud data warehouses, SQL databases, and cloud object storage from a security and access governance perspective</li><li>
Familiarity with enterprise identity providers and identity governance platforms as they relate to data access controls</li></ul><div></div>
Qualifications<ul><li>
Bachelor&rsquo;s degree in computer science, information security, or a related technical field (or equivalent professional experience)</li><li>
7+ years of experience in information security, with at least 3 years focused on data security, data protection, or cloud security engineering</li><li>
Demonstrated ability to own and drive complex, multi-stakeholder technical projects from planning through operationalization</li><li>
Strong understanding of data privacy and protection regulations relevant to financial services (GLBA, SOX, SEC guidelines, GDPR)</li><li>
Excellent written and verbal communication skills, with the ability to translate technical findings into business risk language for senior leadership</li><li>
A self-starter with an ownership mindset who thrives in a lean team environment where independent judgment and initiative are expected</li><li>
Experience in financial services, private equity, or asset management is strongly preferred</li></ul>
Preferred Certifications
CISSP, CCSP, CCSK, AWS Security Specialty, or relevant GIAC certifications. Certifications in AI security (CAISP) or data privacy (CIPP/US) are a plus.
Join our team and play a foundational role in building the firm&rsquo;s data protection and AI security capabilities from the ground up&mdash;shaping how Bain Capital discovers, classifies, and protects its most critical data in an era of rapid AI adoption.
Compensation:
Expected Annual Base Salary $125,000-$155,000
Actual base salary will be determined by a wide range of factors including but not limited to role, function, level, experience, qualifications and geographic location. In addition to a competitive base salary, this position may be eligible for a discretionary annual bonus based upon factors such as individual impact, team and firm performance. Bain Capital offers a competitive benefits package designed to support employees&rsquo; health, financial security, family needs, and overall well-being.
Bain Capital is an equal opportunity employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status</div>

Senior Engineer, Data Protection & AI Security

Explore 245+ Senior software engineer security in Boston this May. Find roles across top companies and apply now to boost your career.