Security Assurance Engineer

Talent Groups; Boston (MA); On-site; USD 120,000 - 150,000; Full time

Job summary

Talent Groups is seeking an experienced Security Assurance Engineer to support application modernization, cloud security, vulnerability management, and production release readiness. The role emphasizes hands-on security testing, risk analysis, and remediation tracking across enterprise applications.

Responsibilities include coordinating SAST, DAST, penetration testing, and vulnerability scanning, prioritizing findings, and working with AWS, Salesforce, identity, and logging reviews to ensure

Qualifications

• Proven experience in application security testing and risk analysis.
• Ability to implement security controls and track remediation.
• Experience with cloud security reviews and production release readiness.

Responsibilities

• Define security requirements and assess risks for applications.
• Coordinate SAST, DAST, penetration testing, and vulnerability scanning.
• Analyze and prioritize findings with Tenable Cloud, Veracode, GitHub, and Jira.
• Develop remediation plans and validate fixes through retesting.
• Assess AI/LLM security risks including prompt injection and data leakage.
• Support security reviews for AWS, Salesforce, identity, and logging.
• Coordinate with teams to ensure production readiness.

Skills

Application security testing

Risk analysis

Remediation tracking

Cloud security

SAST

DAST

Penetration testing

Tools

Tenable Cloud

Veracode

GitHub

Jira

Job description

Onsite Requirement: Minimum 3 days onsite per week for the first 90 days; 2 days onsite thereafter.

Job Summary

We are seeking an experienced Security Assurance Engineer to support application modernization, cloud security, vulnerability management, and production release readiness. The ideal candidate will have strong hands-on experience in application security testing, risk analysis, security control implementation, and remediation tracking across complex enterprise applications.

Key Responsibilities

• Define security requirements, review application architecture, assess risks, and validate security controls.
• Coordinate SAST, DAST, penetration testing, and vulnerability scanning.
• Analyze and prioritize security findings using tools such as Tenable Cloud, Veracode, GitHub, and Jira.
• Develop remediation plans, validate fixes through retesting, and maintain security evidence and risk documentation.
• Assess AI/LLM security risks, including prompt injection, data leakage, RAG pipeline vulnerabilities, and jailbreak attacks.
• Support AWS, Salesforce, identity, integration, logging, and public-facing application security reviews.
• Coordinate with developers, project teams, vendors, and shared security service providers to ensure production readiness.