Senior Security Engineer

Covenant HR; Boston (MA); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Full benefits provided

Relocation assistance

Job summary

Covenant HR is partnering with a well-established investment management firm in Boston, seeking a Senior Cloud Security Engineer. Hybrid role: 2–3 days in the office, with flexibility for the right candidate.

You will lead cloud security strategy in a DevSecOps environment, focusing on automation, guardrails, and AWS security services. You will collaborate with network, systems, cloud engineering, and AWS teams, contribute to Kubernetes security (EKS/ECS), and support security across the SDLC,

Qualifications

• Strong background in security with cloud security focus.
• Hands-on in building guardrails, tooling and automation.
• Extensive AWS security expertise (IAM, KMS, GuardDuty, Security Hub, SCPs, Macie, Inspector, VPC).
• Experience with Infrastructure as Code (Terraform) and scripting.
• Security is among top two strengths across security, cloud, and IaC.

Responsibilities

• Develop and implement cloud security strategy in DevSecOps.
• Design and operate cloud security controls, guardrails, tooling, and automation.
• Build AWS integrations and security automation to strengthen posture.
• Collaborate with network, systems, cloud engineering, and AWS.
• Participate in deep technical cloud architecture and security discussions.
• Work across container and Kubernetes security (EKS/ECS).
• Support security across pipelines and the SDLC.
• Contribute to EDR, runtime detection and prevention, and vulnerability management.
• Address cloud networking security requirements and controls.
• Participate in a CSIRT rotation.
• Hands-on security engineer focused on capabilities, not DevOps shipping.

Skills

Cloud security

Security automation

IaC / scripting

AWS security

DevSecOps

Tools

Terraform

AWS

GuardDuty

Security Hub

Macie

KMS

IAM

EKS

ECS

Job description

Company - Our client is a well-established investment management firm with a sophisticated technology environment and a strong focus on security, cloud infrastructure, and engineering excellence.

Job Title - Senior Cloud Security Engineer

Location - Boston, Massachusetts – Hybrid, ideally 2–3 days per week in the office, with flexibility for the right candidate

Must Have Skills:

• Strong security background, ideally with deep cloud security experience
• Hands-on experience building security guardrails, tooling, controls, and automation
• Strong cloud expertise, preferably AWS, including AWS-native security services and controls such as IAM, KMS, GuardDuty, Security Hub, SCPs, Macie, Inspector, and VPC endpoint policies
• Infrastructure as code, scripting, or software engineering experience; Terraform or scripting experience is acceptable, with coding experience a plus
• Security must be one of the candidate’s two strongest areas across security, cloud, and IaC/scripting/coding

Responsibilities and Job Details:

• Develop and implement cloud security strategy within a DevSecOps environment
• Design, implement, operate, and continuously improve cloud security controls, guardrails, tooling, and automation
• Build AWS integrations and security automation to strengthen the organization’s cloud security posture
• Partner closely with network, systems, cloud engineering, project teams, and AWS
• Participate in deep technical discussions involving cloud architecture and security
• Work across container and Kubernetes security, including EKS and ECS environments
• Support security across pipelines and the software development lifecycle
• Contribute to EDR, runtime detection and prevention, and vulnerability management initiatives
• Address cloud networking security requirements and controls
• Participate in a CSIRT rotation
• Serve as a hands-on security engineer focused on building and improving security capabilities rather than a DevOps or application-shipping-focused role
• Full benefits are provided
• Relocation support may be available through sign-on or moving assistance