Security Assurance Engineer / AWS / QA / IAM

Kelly Services; Boston (MA); Hybrid; USD 113,000 - 127,000; Full time

Job summary

Motion Recruitment Partners is seeking a Security Assurance Engineer for a hybrid, contract role in Boston, MA. The position covers application and cloud security, vulnerability management, and release readiness across AWS, Salesforce, GitHub, Jira, and Veracode, with a focus on secure design through deployment.

You will collaborate with engineering, architecture, and project teams to embed security into two major modernization initiatives, while communicating risk to technical and non-technical

Qualifications

• 5+ years in application security, cloud security, product security, or related field.
• Experience defining security requirements and reviewing architectures, data flows, integrations, and controls.
• Experience with SAST, DAST, pen testing, vulnerability scanning, triage, remediation.
• Strong risk analysis, remediation planning, and tracking findings through closure.
• Hands-on with Jira and GitHub.
• Experience with AWS cloud security and SaaS applications, APIs, identity, logging, deployment controls.
• Ability to coordinate security initiatives across engineering, vendors, and leadership.
• Bachelor's degree in Cybersecurity, CS, IS, or related field.

Responsibilities

• 35% Hands‑on security engineering — triage, testing, architecture reviews, control implementation, remediation validation, AI security testing.
• 25% Risk & release readiness — assess findings, develop remediation plans, validate closure, support go‑live decisions.
• 25% Team collaboration — partner with developers, architects, project teams, vendors, testing teams, security stakeholders.
• 15% Documentation & reporting — maintain security evidence, risk decisions, remediation status, project reporting.

Skills

App security

Cloud security

Vulnerability mgmt

Security testing

Release readiness

Risk analysis

Stakeholder comms

Education

Bachelor's degree in Cybersecurity or related field

Tools

Jira

GitHub

Tenable

Veracode

Job description

$82 - $92

We are looking for a Security Assurance Engineer to join a large-scale public-sector technology modernization initiative in Boston, MA. This is a contract opportunity with a hybrid schedule, requiring 3 days onsite per week for the first 90 days and 2 days onsite thereafter. The role will focus on application security, cloud security, vulnerability management, security testing, and release readiness across AWS, Salesforce, GitHub, Jira, Tenable, Veracode, and AI-enabled applications.

This is a great opportunity for a security engineer who wants to be involved throughout the full project lifecycle rather than coming in after the fact to review vulnerabilities. You’ll work directly with application, cloud, development, architecture, testing, and project teams to build security into two major modernization initiatives from design through deployment. The environment includes public-facing applications, cloud integrations, Salesforce, AI/LLM solutions, RAG pipelines, and sensitive data, giving you exposure to a wide range of modern security challenges. The ideal person will be hands-on, comfortable working independently, and able to communicate technical risk clearly to both technical and non-technical stakeholders.

Contract Duration: 6–12 Months, with the project currently running through June 2027 and potential for extension

Required Skills & Experience

• 5+ years of experience in application security, cloud security, product security, security engineering, or a related field


• Experience defining security requirements and reviewing application architectures, data flows, integrations, and technical controls


• Experience with SAST, DAST, penetration testing, vulnerability scanning, vulnerability triage, and remediation


• Strong experience with risk analysis, remediation planning, and tracking security findings through closure


• Hands‑on experience with Jira and GitHub


• Experience with cloud and application security, preferably AWS


• Experience working with SaaS applications, APIs, identity, data protection, logging, and deployment controls


• Ability to coordinate security initiatives across engineering, development, architecture, vendors, testing teams, and project leadership


• Strong communication and documentation skills


• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, or equivalent experience

Desired Skills & Experience

• Experience with Workday, Salesforce, or other large enterprise SaaS platforms


• Experience with Tenable Cloud and/or Veracode


• Experience with GitHub Copilot or other approved AI-assisted security tools


• Experience securing AI/LLM applications, RAG pipelines, or voice/AI models


• Knowledge of prompt injection, data leakage, retrieval poisoning, jailbreaks, and AI guardrails


• Experience with AWS security and cloud‑native applications


• Knowledge of NIST security frameworks


• Experience in public‑sector, financial services, consumer protection, or another regulated environment


• CISSP, CCSP, CSSLP, or comparable security certification


• Experience with legacy application modernization, cloud migrations, and complex integrations

What You Will Be Doing

Tech Breakdown

• 25% Application & Cloud Security


• 20% Vulnerability Management & Security Testing


• 15% AI/LLM Security & Adversarial Testing


• 15% Risk Analysis & Security Controls


• 15% Remediation & Release Readiness


• 10% Security Documentation & Reporting

Daily Responsibilities

• 35% Hands‑on Security Engineering — vulnerability triage, security testing, architecture reviews, control implementation, remediation validation, and AI security testing


• 25% Risk & Release Readiness — assessing findings, developing remediation plans, validating closure, and supporting go‑live decisions


• 25% Team Collaboration — partnering with developers, architects, project teams, vendors, testing teams, and security stakeholders


• 15% Documentation & Reporting — maintaining security evidence, risk decisions, remediation status, and project reporting

Motion Recruitment Partners (MRP) is an Equal Opportunity Employer. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre‑employment screening. Accommodation will be provided in all parts of the hiring process as required under MRP’s Employment Accommodation policy. Applicants need to make their needs known in advance.