Security Engineer

Forward Financing•Boston, MA

22d•$110,000 - $120,000•Remote

About The Position

Forward Financing is a financial technology company based in Boston, Massachusetts with team members throughout the United States, Dominican Republic, and Canada. The company is on a mission to unlock the capital that fuels small businesses across America. Recognized as a Best Place to Work by Built In Boston and certified as a Great Place To Work®, Forward is investing in its employees, technology, and customer experience – with long-term success in mind every step of the way. As an Information Security Engineer, you'll play a vital role in architecting, implementing, and maintaining robust security systems to safeguard our organization's digital infrastructure. You'll design proactive security solutions, resolve complex vulnerabilities, and drive continuous improvement in our security posture.

Requirements

3+ years of experience in a Security Engineer, Site Reliability Engineer, Software Engineer, DevOps Engineer or similar type role
Experience with infrastructure-as-code tools (Terraform, CloudFormation, or similar).
Familiarity with languages like Python, Go, TypeScript/Node.js, or similar.
Experience integrating and managing EDR/XDR platforms.
Comfort working in a small, fast-moving security team where you own problems end-to-end.

Nice To Haves

Experience with browser-based security, SASE, or ZTNA solutions.
Experience with cloud security posture management (CSPM) tools.

Responsibilities

Build and maintain security automation workflows, integrating detection, triage, and response across tools (CrowdStrike, SOAR, Slack, etc.) to reduce analyst response times.
Develop and maintain infrastructure-as-code (Terraform/Terragrunt) for security tooling and configurations.
Participate in incident response and on-call rotation for security events.
Instrument and measure security operations — track metrics like MTTA/MTTR and build dashboards to demonstrate program effectiveness and ROI.
Evaluate and integrate AI-augmented security tools and workflows to enhance detection and response capabilities.