Security Assurance Engineer – RFQ (Hybrid, Boston)

Lancesoft; Boston (MA); Hybrid; USD 96,000 - 131,000; Full time

Job summary

LanceSoft seeks a Security Assurance Engineer in Boston, MA, on a hybrid contract basis. You will support major application modernization, manage security requirements, risk analyses, and testing through deployment.

The role collaborates with project teams, vendors, and security stakeholders to ensure release-readiness. Responsibilities include coordinating SAST/DAST, vulnerability triage, remediation planning, evidence collection, and maintaining security documentation.

Qualifications

• 5+ years in application security or security engineering.
• Experience defining security requirements and reviewing architectures and controls.
• Experience coordinating SAST, DAST, and penetration testing and validating remediation.
• Experience performing security risk analysis and vulnerability triage.
• Experience developing remediation plans and tracking findings through closure.
• Experience implementing or supporting technical security controls.
• Experience guiding teams on control ownership, evidence, and exceptions.
• Familiarity with Jira, Salesforce, Tenable Cloud, Veracode, GitHub, and GitHub Copilot.

Responsibilities

• Define and document project security requirements, control objectives, implementation details, and acceptance criteria.
• Review architecture, data flows, integrations, databases, AWS, Salesforce, AI-enabled services, identity, logging, infrastructure, and document handling.
• Perform security risk analysis covering threat scenarios, exploitability, data sensitivity, and release dependencies; document risks and suggested treatments.
• Implement approved project-scoped security controls and guide teams on ownership, configuration, and evidence collection.
• Coordinate SAST, DAST, and vulnerability testing; analyze findings, validate, and determine severity and priority.
• Track findings and remediation using Jira or other systems; develop plans with owners and deadlines; verify remediation through retesting.
• Prepare security review results and release-readiness records; ensure critical/high findings are remediated or accepted before go-live.

Skills

Security engineering

Application security

Cloud security

SAST

DAST

Penetration testing

Vulnerability triage

Remediation planning

Documentation

Communication

AI security testing

Education

Bachelor's degree in cybersecurity or related field

CISSP or equivalent credential

Tools

Jira

Veracode

Tenable Cloud

GitHub

GitHub Copilot

Salesforce-based applications

Job description

LanceSoft seeks a Security Assurance Engineer in Boston, MA, on a hybrid contract basis. You will support major application modernization, manage security requirements, risk analyses, and testing through deployment.

The role collaborates with project teams, vendors, and security stakeholders to ensure release-readiness. Responsibilities include coordinating SAST/DAST, vulnerability triage, remediation planning, evidence collection, and maintaining security documentation.