Security Sr. Engineer

MFS Investment Management • Boston, MA

6d • $88,000 - $126,000 • Hybrid

About The Position

The Sr. Security Engineer is a technical security resource responsible for implementing and maintaining measures that protect personnel, property, and information assets. The role draws on demonstrated capabilities across multiple information security disciplines and requires a solid understanding of security technologies, platforms, modern technology, and related IT disciplines.

The engineer troubleshoots security technologies and controls, develops control designs, supports monitoring, and stays current on security practices, technologies, threats, vulnerabilities, and exposures. The role contributes to security activities, programs, projects, scopes of work, and processes, with some oversight and guidance.

This position supports enterprise security programs and solutions across areas such as identity and access management, cloud, applications, networks, vulnerability management, threat detection, incident response, and key and certificate management. It also supports security governance, risk, compliance, policy, control management, automation, investigations, and the responsible use of AI and machine learning in security operations. The position is hybrid, with an in-office presence required Tuesday through Thursday, and may require off-hours work to avoid business interruption.

Requirements

• Bachelor’s degree or equivalent experience in a related security or technical field.
• 2–5+ years of technology experience, including at least 3 years of information-security-specific work experience.
• ISC2 Certified in Cybersecurity (CC) certification.
• CompTIA Security+ certification.
• Demonstrated knowledge and application of enterprise security concepts, frameworks, practices, procedures, programs, solutions, and technologies, including incident response, threat management, vulnerability management, compliance, cloud and application security, and identity and access management.
• Demonstrated skill or experience with Active Directory, domain controllers, Azure, AWS, SaaS, PaaS, IaaS, Windows and Unix/Linux operating systems, Oracle and SQL Server, database architecture, encryption, endpoint devices, and basic networking.
• Understanding of risk assessment concepts, including risk review, challenge, acceptance, mitigation strategies, risk appetite, enterprise risk management, and the NIST Cybersecurity Framework.
• Understanding of technology-related concepts and practices such as incident, problem, and change management and ITIL.
• Understanding of project management and ability to manage multiple tasks and activities, prioritize, manage time, and deliver quality outcomes.
• Understanding of business practices, processes, and procedures for a business process or application.
• Demonstrated ability to apply identity and access management concepts, including authentication, authorization, privileged access, Application Identity Management, access governance, role-based access controls, service and application accounts, and identity lifecycle management.
• Demonstrated skill or experience in database security, database access and activity monitoring, sensitive-data protection, security logging, alert analysis, reporting, and investigation techniques.
• Experience supporting governance, risk, compliance, policy management, the Archer control registry, control assessments, issue management, audit evidence, and regulatory or client assurance activities.
• Experience designing, implementing, or supporting security process automation, scripting, orchestration, integrations, data analysis, dashboarding, and workflow optimization.
• Understanding of AI and machine learning technologies, responsible-use requirements, AI governance, data protection, and security risks and opportunities associated with AI-enabled systems.
• Experience analyzing and interpreting security telemetry, identity and access activity, database activity, user behavior, control data, and operational metrics to identify trends, anomalies, risks, and opportunities for improvement.
• Demonstrated active listening, critical thinking, problem-solving, attention to detail, collaboration, communication, time management, initiative, conflict resolution, coaching mindset, and tactical mindset.
• Must be in the office at least Tuesday, Wednesday, and Thursday.
• May be required to work off-hours, including nights and weekends, to prevent interruption to business operations.

Nice To Haves

• CISSP preferred; CISM and CRISC are optional.
• At least 5 years of technology experience, separate from the 3+ years of information-security-specific experience.
• Previous experience as a security engineer or as an engineer in another technology discipline with security responsibilities.
• ISSEP or SSCP designation.
• Strong analytical, problem-solving, writing, and organizational skills, with flexibility and resilience in a fast-paced environment.
• Ability to build relationships and communicate effectively with team members and management, including delivering presentations.
• Strong interpersonal, communication, and negotiation skills.
• Solid financial skills and strategic and tactical planning abilities.
• Proven ability to manage projects efficiently, meet deadlines, and shift priorities when necessary.

Responsibilities

• Serve as a subject matter resource in one or more cybersecurity or information security disciplines while maintaining knowledge of security programs, practices, controls, technologies, threats, vulnerabilities, risks, and exposures.
• Influence the implementation, integration, and maintenance of enterprise-class security programs and solutions, adapting to new technologies introduced to the security portfolio.
• Support the assessment, establishment, and monitoring of countermeasures that protect against, detect, or deter unauthorized or suspicious activity.
• Work with senior security practitioners and technology and business groups to assess, identify, design, and implement security controls, processes, procedures, and solutions within risk tolerance.
• Support the assessment, design, and implementation of approved methods and technologies to automate security tasks and improve efficiency and quality.
• Support and administer identity, authentication, access governance, privileged access, and Application Identity Management processes throughout the identity lifecycle.
• Monitor and analyze database access and activity, privileged-user activity, and sensitive-data access patterns for unauthorized, suspicious, or policy-violating behavior.
• Maintain security governance, risk, compliance, policy, and control management processes, including the Archer control registry, control validation, evidence collection, issue tracking, and audit support.
• Develop and implement security automation, scripting, orchestration, reporting, and workflow improvements.
• Evaluate and apply AI and machine learning in accordance with approved policy and governance to enhance security operations, while assessing and helping defend against AI-related risks.
• Deliver peer-reviewed security risk assessments and due diligence, identify technical and business risks, and recommend mitigation strategies within risk tolerances.
• Assist with security investigations according to documented procedures and management directives, maintaining confidentiality.
• Advance moderately complex projects under some supervision and meet assigned performance and project objectives, timelines, and budgets.
• Communicate technical cybersecurity concepts clearly to supervisors and stakeholders, including through non-technical explanations.
• Collaborate with stakeholders to assess and resolve security-related problems within the organization's risk appetite.
• Continuously develop security and business knowledge and recommend or implement improvements to reliability, scalability, performance, and security.

Benefits

• Competitive incentive bonus based on individual and company performance.
• MFS contributes an amount equal to 15% of base salary to the employee's retirement account, separate from the company-sponsored 401(k).
• Education assistance: $100 monthly contribution toward student loans, up to a $10,000 lifetime maximum.
• Tuition reimbursement up to $8,000 annually.
• Access to discounted tutors and college coaches.
• Generous time off and fully paid leaves, including 20 weeks of maternity leave and 12 weeks of parental and caregiver leave.
• Choice of medical and dental plans and an employer contribution to a Health Savings Account.
• Tax-deferred commuter benefits and flexible spending accounts for medical and dependent care.
• Wellness programs, including wellness webinars, an employee assistance program focused on mental health, and a subsidized Wellhub fitness benefit.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level