IT Security Engineer

Insurify; Cambridge; On-site; GBP 59,000 - 81,000; Full time

Benefits offered by this job

Competitive compensation

Stock options

Health coverage

401K with match

Unlimited PTO

Company holidays

Learning stipend

Paid family leave

Volunteer time

Catered lunches

Job summary

Insurify is hiring an IT Security Engineer to design and enforce security controls across systems, data, and infrastructure. The role collaborates across teams on long-term security projects as Insurify scales, with a hybrid model requiring in-office presence in Cambridge, MA.

You will work on risk assessments, incident response, and ongoing threat monitoring while ensuring compliance with PCI, NIST CSF, and industry standards. A bachelor’s degree and 3+ years of experience are required.

Qualifications

• Bachelor's degree in computer science or related field.
• 3+ years of IT security experience required.
• Knowledge of PCI and NIST CSF frameworks required.
• Experience with SIEM, DLP and vulnerability management.
• Experience with Mac, Windows, AWS and core security tools.
• Understanding of data privacy laws and industry regulations.
• Clear communication of risk to technical and executive audiences.

Responsibilities

• Configure, troubleshoot, and maintain security infrastructure (SIEM, DLP, anti-malware, intrusion response).
• Align controls with regulations and internal policies and security frameworks (NIST CSF, PCI).
• Evaluate AI platforms, third-party LLMs, and data connectors for data protection.
• Conduct risk assessments and threat/vulnerability analyses across systems and networks.
• Develop, implement, and validate security controls and best practices to reduce risk.
• Monitor systems for threats and validate effectiveness of controls.
• Develop incident response plans and conduct post-incident reviews.
• Stay informed on evolving threats, regulations, and industry trends.

Skills

IT security

PCI

NIST CSF

SIEM

DLP

Vulnerability management

AWS Cloud

Mac/Windows

Data privacy

Communication

Education

Bachelor's degree in CS

Job description

Insurify is one of America’s fastest-growing MIT FinTech startups and has been recognized as one of Inc. 5,000’s fastest-growing private companies in America in 2025, 2024, 2023, 2022 and 2021, Forbes Fintech 50 List for 2023, 2022, and 2021, Forbes Next Billion Dollar Startups of 2022 global and Top 100 InsurTech company. We’re changing the way millions of people compare, buy and manage insurance with artificial intelligence, technology, and superior product design.

Our company vision is to be recognized as the preeminent and most trusted digital agent for insurance comparison, purchase, and management. Our team is critical to achieving our vision and fostering the right culture is essential to our team’s success.

Join us if you like

• $1.3 Trillion market opportunity
• MIT alumni founders
• Female-led startup
• $130M total funding
• Strong leadership team with experience from many successful startups around the world

Insurify is hiring an IT Security Engineer to help design and enforce security controls to protect systems, data, and infrastructure while ensuring alignment with regulatory and industry standards. This role will be working cross-functionally across the org on long-term projects as Insurify continues to scale.

This is a hybrid position that requires candidates to be able to come into our Cambridge, MA office.

How you will make an impact

• Configure, troubleshoot, and maintain security infrastructure software and hardware, including SIEM, DLP, anti-malware, and intrusion response systems.
• Align security controls and practices with external regulations, internal policies, and security frameworks (e.g., NIST CSF, PCI).
• Evaluate and monitor employee-adopted AI platforms, third-party LLM integrations, and data connectors to prevent unauthorized access and exposure of sensitive company data.
• Conduct risk assessments and threat/vulnerability analyses across systems and networks.
• Recommend, implement, and validate security controls and best practices to reduce risk.
• Continuously monitor systems for threats and validate the effectiveness of implemented controls.
• Develop incident response plans and manage post-incident reviews.
• Monitor evolving threats, regulations, and industry trends to continually enhance the security program.
• Assist the IT team with responding to general user requests for access, troubleshooting, etc.

This is a hybrid position that requires candidates to be able to come into our Cambridge, MA office.

Who you are

• Bachelor's degree in computer science or a related field.
• At least 3+ years of relevant experience in IT security required.
• Working knowledge of frameworks such as PCI and NIST CSF are required.
• Experience with SIEM, DLP, and vulnerability management.
• Expertise with Mac, Windows, enterprise IT, AWS cloud infrastructure, common threats, and core security tools.
• Understanding of data privacy laws and industry-specific regulations.
• Clear, concise communication of complex technical risk to both technical and executive audiences.

Benefits

• Competitive compensation
• Generous stock options
• Health, Dental Coverages
• 401K plan with match
• Unlimited PTO
• Generous company holiday calendar
• Learning & Development Stipends
• Paid Family Leave
• Social impact volunteer time
• Catered lunches in the office

Insurify is committed to offering a fair, competitive, and transparent compensation program that supports our mission to attract, retain, and motivate top talent. Our compensation philosophy is guided by several factors including a candidate’s relevant experience, education/training, job-related skills, and location.

In addition to the base salary our total compensation package includes health coverage, retirement contributions, and additional wellbeing benefits. Some positions may be eligible for company equity.

Below is the base compensation range candidates working out Cambridge, MA:

$80,000-$110,000

We are proud to be an Equal Employment Opportunity and Affinity Action employer.