Contract Security Assurance Engineer - App Modernization

Overture Partners; Boston (MA); On-site; USD 165,000 - 234,000; Full time

Job summary

Overture Partners invites a Security Assurance Engineer for an immediate fixed-term engagement through June 2027, focused on two application modernization programs. You will integrate security requirements, risk assessments, testing, remediation, and release readiness across the SDLC.

The role requires 5+ years in related security disciplines, strong cloud/application security knowledge, and proven ability to deliver measurable security outcomes within project milestones.

Qualifications

• Five or more years in application security, cloud security, or related roles.
• Bachelor's degree in cybersecurity, CS, information systems, or engineering; CISSP or similar cert preferred.
• Ability to define security requirements and assess architectures and data flows.
• Experience coordinating SAST, DAST, pen testing, and vulnerability scans with remediation validation.
• Proven risk analysis, remediation planning, and tracking findings through closure.
• Familiarity with Jira, Salesforce-based apps, Tenable Cloud, Veracode, GitHub and GitHub Copilot.

Responsibilities

• Define project-specific security requirements and acceptance criteria for changes and releases.
• Assess architectures, data flows, cloud services, identity controls, and logging to identify threats.
• Plan and manage application security testing schedules and follow-up activities.
• Triage vulnerabilities, remove duplicates, investigate root causes, and document prioritization.
• Define remediation actions, deadlines, and validation; coordinate with teams to execute.
• Evaluate AI security aspects of RAG pipelines and LLM/voice-enabled services for risks.

Skills

Application security

Cloud security

Security engineering

SAST

DAST

Vulnerability scanning

Remediation planning

Risk analysis

Jira

Veracode

GitHub

GitHub Copilot

Identity management

Data protection

Education

Bachelor's degree

CISSP or similar

Tools

Tenable Cloud

Veracode

GitHub

Jira

Salesforce-based apps

Job description

Overture Partners invites a Security Assurance Engineer for an immediate fixed-term engagement through June 2027, focused on two application modernization programs. You will integrate security requirements, risk assessments, testing, remediation, and release readiness across the SDLC.

The role requires 5+ years in related security disciplines, strong cloud/application security knowledge, and proven ability to deliver measurable security outcomes within project milestones.