Hybrid Application Security Engineer – Secure DevOps & Cloud

Socket.dev; Boston (MA); Hybrid; USD 135,000 - 175,000; Full time

Job summary

KKR in Boston is seeking an experienced Product Security Professional. As a Security Analyst, you will design, implement, and maintain security measures across our environment, focusing on internally developed and externally facing applications.

You will troubleshoot vulnerabilities, manage security testing, and lead cross‑functional teams in secure coding practices, cloud security, and DevSecOps. You will work with IT and business units to ensure regulatory compliance and a proactive security

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Proven experience as an Application Security Engineer or similar role.
• Strong understanding of SDLC and secure coding practices.
• Proficiency in security assessments and penetration testing.
• Experience with security tools (firewalls, VPNs, IDS/IPS, NAC).
• Knowledge of regulatory requirements and cloud/DevSecOps best practices.
• Familiarity with OWASP Top Ten and security frameworks.

Responsibilities

• Conduct application security assessments and penetration tests.
• Collaborate with development teams to integrate secure coding practices.
• Design and implement security solutions to protect applications.
• Provide guidance on application security best practices.
• Maintain awareness of security trends and countermeasures.
• Participate in incident response for application security incidents.
• Deliver security training to development teams; promote secure coding.
• Develop and maintain security standards, policies, and procedures.
• Document findings and remediation activities.
• Integrate security tools into CI/CD pipelines.

Skills

Security assessments

Penetration testing

Cloud security

DevSecOps

Secure coding

SDLC

OWASP Top Ten

Regulatory knowledge

Team collaboration

Communication

Education

Bachelor's degree in Computer Science, Information Technology, or a related field

Tools

Firewalls

VPNs

IDS/IPS

NAC

Job description

KKR in Boston is seeking an experienced Product Security Professional. As a Security Analyst, you will design, implement, and maintain security measures across our environment, focusing on internally developed and externally facing applications.

You will troubleshoot vulnerabilities, manage security testing, and lead cross‑functional teams in secure coding practices, cloud security, and DevSecOps. You will work with IT and business units to ensure regulatory compliance and a proactive security