Security Engineer

Suffolk Construction; Boston (MA); On-site; USD 120,000 - 160,000; Full time

Job summary

Suffolk Construction is seeking a Security Engineer to diagnose Level 2 security issues, enforce IAM policies, and coordinate remediation with application and infrastructure teams. You will participate in audits and vulnerability tests, support cloud security across Azure/AWS, and mentor Help Desk staff to strengthen Suffolk's security posture.

Applicants should have 3+ years in enterprise information security, cloud experience, and familiarity with security frameworks.

Qualifications

• BS degree in computer science, information systems management, or related technical discipline; equivalent experience accepted.
• Industry certificates (CISSP, CISA, etc.) desirable.
• 3+ years of enterprise information security experience; 3+ years of cloud-based solutions (Azure, AWS).
• Experience with large, distributed systems and security operations.

Responsibilities

• Diagnose and protect Level 2 security issues across configurations and platforms escalated by Level 1.
• Support standards for data classification, administration, and lifecycle across systems and processes.
• Serve as security resource for corporate applications, assess risks and coordinate remediation.
• Participate in security audits, vulnerability scans, and penetration tests.
• Enforce identity and access management policies for on‑premises and cloud services; support access reviews and privileged access controls.
• Support identity manageability, access governance, provisioning, security, and privacy; implement secure identity through third‑party providers.
• Operational support with vulnerability scanning, risk monitoring, triage remediation tasks and report progress.
• Investigate and resolve security issues across development to operations with cross-team collaboration.
• Maintain information security dashboards; analyze risks and track remediation progress.
• Support enterprise security systems and data-driven review processes to improve security infrastructure.
• Mentor Help Desk analysts and promote Suffolk information security standards.
• Stay informed on evolving security threats and industry trends affecting Suffolk information systems.
• Contribute to security operations and risk reduction initiatives; implement cloud security controls across Azure/AWS and similar platforms.

Skills

Interpersonal skills

Secure solutions collaboration

Documentation skills

Enterprise security design

Penetration testing

Security tools familiarity

Security frameworks

Regulatory compliance knowledge

Endpoint/server security

DevOps collaboration

Education

BS degree in computer science or related

Tools

Microsoft security tools

Vulnerability management platforms

Cloud security platforms

Security monitoring solutions

Job description

• Diagnose and solve Level 2 issues related to security configurations and platforms as escalated by Level 1 support
• Support standards for the classification, administration, and lifecycle management of Suffolk data, including helping apply established data handling requirements across systems and business processes.
• Serve as a key security resource for Suffolk corporate applications by helping assess risks, support secure configurations, review access controls, and coordinate remediation with application owners and technical teams.
• Participate in independent security audits, vulnerability scans, and penetration tests on Suffolk infrastructure to ensure confidentiality, integrity, and availability of Suffolk data.
• Help enforce Suffolk identity and access management policies and procedures for on-premises and cloud-based services by supporting access reviews, role‑based access controls, privileged access controls, secure authentication practices, and remediation of access‑related findings.
• Support identity manageability, access governance, provisioning, security, and privacy. Implement and manage solutions for secure identity through third‑party providers.
• Provide operational assistance with vulnerability scanning, gap analysis, and security initiatives. Monitor findings, validate risk and ownership, triage remediation priorities, track corrective actions, and report progress for Suffolk systems.
• Help identify, investigate, and resolve security issues from development through operations by collaborating with application, infrastructure, service desk, and business teams to understand root causes, document findings, and coordinate practical remediation.
• Maintain Suffolk information security dashboards, review security metrics, and perform risk analysis to help management understand trends, prioritize remediation, and track progress against security initiatives.
• Support Suffolk’s enterprise security systems and manage comprehensive, data‑driven review processes to enhance critical security infrastructure
• Mentor Help Desk Analysts, developing skillsets through exposure to security administration while promoting Suffolk information security standards.
• Remain informed about evolving security challenges in IT and how they affect Suffolk. Maintain an understanding of the current threat and attack landscape, latest security trends, and Suffolk information systems.
• Support Suffolk’s information security posture in accordance with Suffolk’s evolving business requirements by contributing to security operations, control improvements, and risk reduction initiatives.
• Apply security controls and operational practices across enterprise cloud environments, including identity configuration, logging and monitoring, secure access, vulnerability remediation, and support for cloud workload protection in Azure, AWS, or similar platforms.

Roles And Responsibilities

• Diagnose and solve Level 2 issues related to security configurations and platforms as escalated by Level 1 support
• Support standards for the classification, administration, and lifecycle management of Suffolk data, including helping apply established data handling requirements across systems and business processes.
• Serve as a key security resource for Suffolk corporate applications by helping assess risks, support secure configurations, review access controls, and coordinate remediation with application owners and technical teams.
• Participate in independent security audits, vulnerability scans, and penetration tests on Suffolk infrastructure to ensure confidentiality, integrity, and availability of Suffolk data.
• Help enforce Suffolk identity and access management policies and procedures for on‑premises and cloud‑based services by supporting access reviews, role‑based access controls, privileged access controls, secure authentication practices, and remediation of access‑related findings.
• Support identity manageability, access governance, provisioning, security, and privacy. Implement and manage solutions for secure identity through third‑party providers.
• Provide operational assistance with vulnerability scanning, gap analysis, and security initiatives. Monitor findings, validate risk and ownership, triage remediation priorities, track corrective actions, and report progress for Suffolk systems.
• Help identify, investigate, and resolve security issues from development through operations by collaborating with application, infrastructure, service desk, and business teams to understand root causes, document findings, and coordinate practical remediation.
• Maintain Suffolk information security dashboards, review security metrics, and perform risk analysis to help management understand trends, prioritize remediation, and track progress against security initiatives.
• Support Suffolk’s enterprise security systems and manage comprehensive, data‑driven review processes to enhance critical security infrastructure
• Mentor Help Desk Analysts, developing skillsets through exposure to security administration while promoting Suffolk information security standards.
• Remain informed about evolving security challenges in IT and how they affect Suffolk. Maintain an understanding of the current threat and attack landscape, latest security trends, and Suffolk information systems.
• Support Suffolk’s information security posture in accordance with Suffolk’s evolving business requirements by contributing to security operations, control improvements, and risk reduction initiatives.
• Apply security controls and operational practices across enterprise cloud environments, including identity configuration, logging and monitoring, secure access, vulnerability remediation, and support for cloud workload protection in Azure, AWS, or similar platforms.

Skills And Knowledge

• Strong interpersonal skills, including collaboration, communication, negotiation, and mediation
• Strong peer influence skills with the ability to enable secure solutions while maintaining effective working relationships with business partners.
• Excellent written documentation ability, including the flexibility to deliver varied content to varied audiences
• Demonstrated experience designing, installing, and configuring enterprise security solutions while meeting enterprise architecture, security, and privacy needs.
• Technical foundation in systems security and network security. Experience with pen testing, security scanning, threat modeling, and incident management are desirable.
• Familiarity and experience with industry standard enterprise security solutions such as Microsoft security tools, vulnerability management platforms, cloud security platforms, and security monitoring solutions.
• Familiarity and experience with information security frameworks (NIST, ISO 27001, etc.) and understanding of security configuration guides (DISA STIG, CIS, etc.)
• Familiarity and experience with current regulatory and contractual security requirements and the ability to support organizational compliance efforts, including PCI, MA 201 CMR 17.00, CCPA, HIPAA, and similar requirements.
• Strong working knowledge of endpoint and server operating systems (e.g. Windows, MacOS, Linux) and relevant security risks, controls, and vulnerabilities.
• Strong collaboration skills with development, engineering, and DevOps teams, enabling the successful integration of security requirements, controls, and automation into software delivery pipelines.

Qualifications

• BS degree in computer science, information systems management, or a related technical discipline or the equivalent combination of education, technical training, or work/military experience.
• At least one industry certificate is desirable (CISSP, CISA, etc.)
• 3+ years of experience with enterprise information security, preferably within complex organizations.
• 3+ years of experience with enterprise cloud‑based solutions (Azure, AWS, etc.)
• 3+ years of experience with large, distributed systems.
• At least 5 years of relevant work experience in IT and/or information security required, including hands‑on experience supporting enterprise systems, security tools, or security operations.
• Project management and audit experience desired.

Working Conditions

While performing the duties of this job, the employee is regularly required to sit for long periods of time; talk or hear; perform fine motor, hand and finger skills in the use of a keyboard, telephone, or writing. The employee is frequently required to stands; walk; and reach with arms and/or hands. Specific vision abilities include close vision, distance vision, depth perception and the ability to adjust focus. The employee will spend their time in an office environment with a quiet to moderate noise level. Job site walking.

EEO Statement

Suffolk provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, pregnancy or maternity, national origin, citizenship, genetic information, disability, protected veteran, gender identity, age or any other status protected by law. This policy applies to recruiting, hiring, transfers, promotions, terminations, compensation, benefits, and all other terms and conditions of employment. Suffolk will not tolerate any unlawful discrimination toward, or harassment of, applicants or employees by anyone at Suffolk, or anyone working on behalf of Suffolk.

Compensation Information

Where required by law, pay ranges can be found in Suffolk's job postings. Base Salary for this position is just one component of Suffolk’s total rewards package for employees. Actual salaries may be based on several factors including, but not limited to, a candidate's skill set, experience, education and other qualifications. Suffolk offers a comprehensive benefits package as part of its overall total rewards strategy. Salary ranges are reviewed regularly to reflect market trends.

About Suffolk

Suffolk is a national enterprise that builds, innovates, and invests. We provide value across the entire project lifecycle through our core construction management services and complementary business lines in real estate investment, design, self‑perform construction, and technology start‑up investment (Suffolk Technologies). By integrating data, artificial intelligence, and advanced technology through our Seamless Platform, we connect design, construction, and operations to deliver smarter, more predictable results and redefine how America builds.

Suffolk – America’s Contractor – is a national company with more than $9 billion in annual revenue, 3,000 employees, and 17 offices, including Boston (headquarters), New York City, Miami, West Palm Beach, Tampa, Estero, Dallas, Los Angeles, San Francisco, San Diego, Las Vegas, Herndon, U.S. Virgin Islands, and other key markets. Suffolk manages some of the most complex and transformative projects in the country, serving clients across healthcare, life sciences, education, gaming, aviation, transportation, government, mission critical, and commercial sectors. Suffolk is privately held and is led by founder, chairman and CEO John Fish. Suffolk is ranked #8 on ENR’s list of “Top CM‑at‑Risk Contractors.” For more information, visit www.suffolk.com and follow Suffolk on Facebook , Twitter , LinkedIn , YouTube , and Instagram .

At Suffolk, we believe that our total rewards program should offer you and your family the support you need when it matters most. That’s why we have created a program that provides employees with access to a wide variety of options that can be personalized to support you and your loved ones physically, emotionally, and financially.

Benefits include, competitive salaries, auto allowances and gas cards for certain roles, access to market leading medical and emotional and mental health benefits, dental, and vision insurance plans, virtual care options for physical therapy and primary care, generous paid time off, 401k plan with employer match and access to expert financial resources, company paid and voluntary life insurance, tax deferred savings accounts, 10 backup daycare days each year, short‑and long‑term disability, commuter benefits and more.? For more information, click? here .