Security Engineer: Networking & Cloud for Autonomous Vessels

North Eastern Services; Boston (MA); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

401(k)

Dental insurance

Disability insurance

Flexible spending account

Health insurance

Life insurance

Paid time off

Parental leave

Vision insurance

Job summary

Sea Machines in Boston develops autonomous marine vessels and infrastructure, seeking a Product Security Engineer to own vulnerability management, secure development practices, and network security across distributed systems. You will secure VPN/mesh networks, IAM/VPC configurations, and cloud-native tooling.

The role requires 3+ years in product security, strong networking, and hands-on AWS/SAST/SCA experience, plus CI/CD integration across Jenkins pipelines and Datadog observability.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field; Master’s degree preferred
• 3+ years working in Product Security and CI/CD or software development
• Strong, demonstrable networking security experience — VPNs, routing, and firewalls
• Strong hands-on experience with AWS (IAM, VPC, cloud-native security services)
• Hands-on experience with SAST/SCA tools (SonarQube or equivalent) and integrating them into CI/CD (Jenkins or equivalent)
• Experience with observability/monitoring platforms (Datadog or equivalent) for security use cases
• Deep understanding of software-security principles and cloud-infrastructure security
• Strong knowledge of security protocols, cryptography, secure coding practices, and OAuth/auth protocols
• Experience with security tools such as IDS/IPS, firewalls, and vulnerability scanners
• Proficiency in programming languages such as Python, Java, C++, or similar
• Proficiency in common operating systems (Linux, Windows) and deep familiarity with networking protocols
• Understanding of compliance and security frameworks (e.g., CMMC, CIS Benchmarks)
• Excellent problem-solving skills and attention to detail
• Strong communication skills and ability to work collaboratively across teams
• Experience collaborating with other functional teams to define requirements and goals

Responsibilities

• Conduct vulnerability assessments and penetration testing on applications, systems, and network infrastructure
• Design, harden, and maintain network security architecture, including segmentation, VPN/mesh networks and firewalls across vessel-side and cloud-side systems
• Secure and harden our AWS cloud infrastructure, including IAM policies, VPC/network configuration, and cloud-native security tooling
• Integrate and manage SAST and SCA tooling (e.g., SonarQube) into the development pipeline to catch vulnerabilities and dependency risks pre-deployment
• Build and maintain security monitoring using observability platforms such as Datadog, including alerting on anomalous network and application behavior
• Integrate security gates into CI/CD pipelines (Jenkins), working with development teams to embed security best practices into the SDLC
• Monitor and respond to security incidents and breaches, with particular attention to network-layer threats
• Develop and maintain security tools and frameworks
• Create and maintain comprehensive documentation related to security practices and protocols
• Provide security and software development support to the DevOps team

Skills

Networking security

CI/CD

AWS

SAST/SCA tooling

Observability/Datadog

Cloud security

Cryptography/Secure coding

OAuth/auth protocols

Programming (Python/Java/C++)

Linux/Windows

Compliance frameworks

Communication & collaboration

Requirements gathering

Education

Bachelor’s degree in Computer Science or Cybersecurity

Master’s degree preferred

Tools

Jenkins

SonarQube

Datadog

Tailscale

IAM/VPC tooling

Job description

Sea Machines in Boston develops autonomous marine vessels and infrastructure, seeking a Product Security Engineer to own vulnerability management, secure development practices, and network security across distributed systems. You will secure VPN/mesh networks, IAM/VPC configurations, and cloud-native tooling.

The role requires 3+ years in product security, strong networking, and hands-on AWS/SAST/SCA experience, plus CI/CD integration across Jenkins pipelines and Datadog observability.