Hybrid Security Assurance Engineer (Contractor)

Contemporaries, Inc.; Boston (MA); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Contemporaries, Inc. seeks an experienced Security Assurance Engineer (Contractor) in Boston to deliver fixed-term security capacity for two capital modernization projects. You'll define requirements, perform risk analyses, and coordinate testing, remediation, and release readiness across AWS, Salesforce, and AI-enabled services.

The role spans design through deployment, triage findings, and guiding agency personnel on controls, with a 7+ month engagement and hybrid work arrangements.

Qualifications

• Five or more years of professional experience in application security, cloud security, product security, security engineering, or a closely related field.
• Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field.
• Demonstrated experience defining security requirements and reviewing application architectures, data flows, integrations, and technical controls.
• Experience coordinating SAST, DAST, and penetration testing and validating remediation or retest evidence.
• Demonstrated experience performing risk analysis and vulnerability triage, developing remediation plans, implementing or supporting technical remediation, and tracking findings to closure.
• Experience implementing security controls and guiding agency or business personnel on control ownership, operation, evidence, exceptions, and ongoing management.
• Working familiarity with Jira, Salesforce-based applications, Tenable Cloud, Veracode static and dynamic testing, GitHub, and GitHub Copilot or comparable approved tools.
• Experience using AI-assisted capabilities responsibly for vulnerability testing, source-code or configuration review, finding analysis, or remediation planning.
• Working knowledge of identity, data protection, logging, deployment, cloud, and infrastructure controls for complex applications.
• Experience documenting security findings, residual risk, control decisions, and production-readiness recommendations.
• Experience coordinating security work across project teams, vendors, shared-service organizations, and managed security service providers.
• Ability to manage concurrent work against milestones, release schedules, acceptance criteria, and project reporting requirements.
• Excellent written and verbal communication skills, including the ability to explain technical risks to technical and non-technical stakeholders.
• Ability to work independently, maintain accurate evidence, and escalation risks or blockers promptly.

Responsibilities

• Define and document project security requirements, control objectives, implementation details, and acceptance criteria for planned releases and production changes.
• Review application architecture, data flows, integrations, and control designs across applications, databases, AWS, Salesforce-based apps, AI-enabled services, identity, logging, infrastructure, and document handling.
• Perform project-specific risk analyses that evaluate threat scenarios, exploitability, exposure, data sensitivity, business and regulatory impact, existing controls, and release dependencies.
• Implement approved project-scoped security controls and technical safeguards when assigned; guide agency personnel on control ownership and evidence collection.

Skills

Application security

Cloud security

Security engineering

Security requirements

Risk analysis

Vulnerability triage

Remediation planning

Security controls

SAST/DAST

Penetration testing

AI-assisted security

Identity/data protection

Documentation

Project coordination

Communication

Education

Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or related field

Tools

Jira

Salesforce

Tenable Cloud

Veracode (SAST/DAST)

GitHub

GitHub Copilot

Job description

Contemporaries, Inc. seeks an experienced Security Assurance Engineer (Contractor) in Boston to deliver fixed-term security capacity for two capital modernization projects. You'll define requirements, perform risk analyses, and coordinate testing, remediation, and release readiness across AWS, Salesforce, and AI-enabled services.

The role spans design through deployment, triage findings, and guiding agency personnel on controls, with a 7+ month engagement and hybrid work arrangements.