Sr. Information Security Engineer

Overture Partners, LLC; Boston (MA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical plans

401(k) starting on day one

Life and disability insurance

Sick time as required by law

Job summary

Overture Partners, LLC is seeking an experienced Information Security Engineer to enhance security across an enterprise technology landscape. You will assess cloud, network, identity, and application security, identify gaps, and deliver practical, business-focused recommendations.

The role requires strong communication with technical teams and senior stakeholders, rapid assessment of unfamiliar technologies, and the ability to influence security decisions with sound judgment.

Qualifications

• Must have extensive security assessment experience across enterprise tech domains.
• Strong understanding of Zero Trust, least-privilege, defense-in-depth concepts.
• Excellent written and verbal communication for executive audiences.
• Ability to rapidly evaluate unfamiliar tech, identify risks, and propose mitigations.

Responsibilities

• Conduct comprehensive security assessments across cloud, network, and applications.
• Evaluate architectures to identify vulnerabilities and risk.
• Develop practical security recommendations aligned with business needs.
• Translate findings into concise reports and leadership-level briefings.
• Collaborate with infrastructure, cloud, and application teams to improve controls.

Skills

Security assessment

Zero Trust

Threat modeling

Communication skills

Analytical thinking

Independent work

Job description

Job Overview

We are seeking an experienced Information Security Engineer to support enterprise-wide security initiatives and strengthen technology risk management. This is an opportunity for a technically versatile professional who can quickly assess complex environments, identify security gaps, and deliver actionable recommendations. Candidates must demonstrate 57 years of relevant experience, strong analytical capabilities, and the ability to communicate effectively with both technical teams and senior business stakeholders to secure an interview.

Must Haves

• 57 years of professional experience in systems engineering, information security engineering, security architecture, or cybersecurity consulting.
• Extensive security assessment experience across multiple enterprise technology domains, including cloud platforms, network infrastructure, identity and access management (IAM), applications, and core infrastructure.
• Excellent verbal and written communication skills, with the ability to translate complex cybersecurity concepts into clear, business-focused recommendations for executive leadership and non-technical stakeholders.
• Demonstrated ability to rapidly evaluate unfamiliar technologies, understand architectural dependencies, identify potential vulnerabilities, and recommend effective risk mitigation strategies.
• Strong understanding of foundational cybersecurity principles, including Zero Trust architecture, least-privilege access, defense-in-depth, threat modeling, and enterprise data protection.
• Proven analytical and problem-solving capabilities, with the ability to prioritize security risks and develop practical solutions within complex technical environments.

What the Client Needs You to Do

The successful candidate will help evaluate and improve security across a diverse enterprise technology landscape. You will work closely with engineering teams, security specialists, technology leaders, and business stakeholders to identify weaknesses, assess potential exposure, and recommend proportionate security controls. The role requires someone who can operate independently, adapt quickly to changing technical environments, and influence security decisions through clear communication and sound technical judgment.

Key Responsibilities

• Conduct comprehensive security assessments across cloud environments, networks, enterprise applications, identity platforms, and infrastructure technologies.
• Evaluate existing technology architectures to identify security weaknesses, control gaps, vulnerabilities, and potential business risks.
• Develop practical recommendations that strengthen security posture while supporting operational and business requirements.
• Apply established security principles and architectural frameworks to assess technology solutions and guide implementation decisions.
• Identify potential threats and attack paths through structured threat modeling, risk analysis, and security design reviews.
• Translate technical findings into concise reports, presentations, and recommendations suitable for senior leadership and business stakeholders.
• Collaborate with infrastructure, cloud, application, and security engineering teams to address identified risks and improve security controls.
• Assess unfamiliar platforms and technologies efficiently, developing a clear understanding of their architecture, dependencies, and security implications.
• Support cross-functional security initiatives and contribute technical guidance to improve enterprise-wide security maturity.

Additional Information

Preferred Experience:

• Exposure to large, complex enterprise healthcare technology environments or similarly regulated industries.
• Familiarity with hybrid technology landscapes involving interconnected cloud, on-premises, and enterprise infrastructure.
• Experience providing technical mentorship to junior and mid-level security professionals.
• Previous involvement in leading cross-functional engineering initiatives or coordinating enterprise security improvement programs.

Preferred Certifications:

• Certified Information Systems Security Professional (CISSP).
• Certified Information Security Manager (CISM).
• Certified Cloud Security Professional (CCSP).
• Other relevant professional cybersecurity or information security certifications.

Ideal Candidate Profile:

The ideal candidate is a technically strong, adaptable security professional who combines broad enterprise technology knowledge with excellent communication and stakeholder management skills. They should be comfortable navigating complex environments, working with limited direction, and delivering meaningful security outcomes through practical, risk-based recommendations.

Certification and additional industry experience are advantageous but are not mandatory unless specified during the selection process.

W2 employees of Overture Partners who work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), 401(k) starting on day one, a variety of voluntary benefits including life and disability insurance, and sick time if required by law in the worked-in state/locality.

#25680