Security Engineer (Contract)

ButcherBox • Boston, MA

1d • $65 - $100

About The Position

We’re looking for a hands-on, detail-oriented Security Engineer to support our cybersecurity initiatives and help scale our security operations. This role will work closely with engineering leadership and cross-functional teams to implement, monitor, and improve our security posture across cloud infrastructure, endpoint protection, and internal policies.

Requirements

• Strong understanding of security frameworks and compliance standards.
• Excellent communication and collaboration skills.
• Azure security expert
• Self-starter with minimal supervision: able to prioritize tasks, manage time effectively, and drive initiatives to completion without constant oversight.
• Proven cross-team collaboration: willingness and ability to work across multiple teams (development, operations, risk, compliance, and product) to achieve security goals.
• Prior experience with security testing: familiarity with interpreting Pentest findings, working with remediation owners, and validating remediation effectiveness.
• Prior experience using the Cobalt security platform and website
• Prior experience securing Azure Kubernetes
• Prior experience securing API Endpoints
• Prior experience securing Azure storage accounts and key vaults
• Expert level knowledge of Microsoft Cloud Defender
• Experience in Jira Service Management

Nice To Haves

• Familiarity with AI/ML security practices in cloud environments.
• Prior experience creating and maintaining Azure Policy
• Wordpress experience

Responsibilities

• Remediation of Security Vulnerabilities - Investigate and resolve issues such as missing access controls, outdated libraries, weak session management, and exposed configuration files—based on findings from internal audits and external penetration tests
• Security Alert Management - Monitor and resolve Critical and High alerts from Azure Security Advisor and Microsoft Cloud Defender, ensuring timely threat mitigation.
• Penetration Test Remediation - Drive resolution of findings from Cobalt penetration tests, coordinating with stakeholders to close security gaps.
• Policy Development & Implementation - Collaborate on updating and enforcing security policies, such as VPN usage, password standards, and session timeout configurations.
• Secure Architecture Consultation - Investigate and recommend secure solutions for data access, including support for POCs, test automation, and other ad hoc requests.
• Security Awareness & Advocacy - Promote security best practices across the organization through documentation, training, and internal communications.
• AI Security - Understand and help improve AI-related security within our Azure subscription, including data protection and model integrity.

What This Job Offers

• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 101-250 employees