Security Assurance Engineer / AWS / QA / IAM

We are looking for a Security Assurance Engineer to join a large-scale public-sector technology modernization initiative in Boston, MA. This is a contract opportunity with a hybrid schedule, requiring 3 days onsite per week for the first 90 days and 2 days onsite thereafter. The role will focus on application security, cloud security, vulnerability management, security testing, and release readiness across AWS, Salesforce, GitHub, Jira, Tenable, Veracode, and AI-enabled applications. This is a great opportunity for a security engineer who wants to be involved throughout the full project lifecycle rather than coming in after the fact to review vulnerabilities. You'll work directly with application, cloud, development, architecture, testing, and project teams to build security into two major modernization initiatives from design through deployment. The environment includes public-facing applications, cloud integrations, Salesforce, AI/LLM solutions, RAG pipelines, and sensitive data, giving you exposure to a wide range of modern security challenges. The ideal person will be hands-on, comfortable working independently, and able to communicate technical risk clearly to both technical and non-technical stakeholders. Contract Duration: 6-12 Months, with the project currently running through June 2027 and potential for extension Required Skills & Experience 5+ years of experience in application security, cloud security, product security, security engineering, or a related field Experience defining security requirements and reviewing application architectures, data flows, integrations, and technical controls Experience with SAST, DAST, penetration testing, vulnerability scanning, vulnerability triage, and remediation Strong experience with risk analysis, remediation planning, and tracking security findings through closure Hands-on experience with Jira and GitHub Experience with cloud and application security, preferably AWS Experience working with SaaS applications, APIs, identity, data protection, logging, and deployment controls Ability to coordinate security initiatives across engineering, development, architecture, vendors, testing teams, and project leadership Strong communication and documentation skills Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, or equivalent experience Desired Skills & Experience Experience with Workday, Salesforce, or other large enterprise SaaS platforms Experience with Tenable Cloud and/or Veracode Experience with GitHub Copilot or other approved AI-assisted security tools Experience securing AI/LLM applications, RAG pipelines, or voice/AI models Knowledge of prompt injection, data leakage, retrieval poisoning, jailbreaks, and AI guardrails Experience with AWS security and cloud-native applications Knowledge of NIST security frameworks Experience in public-sector, financial services, consumer protection, or another regulated environment CISSP, CCSP, CSSLP, or comparable security certification Experience with legacy application modernization, cloud migrations, and complex integrations What You Will Be Doing Tech Breakdown 25% Application & Cloud Security 20% Vulnerability Management & Security Testing 15% AI/LLM Security & Adversarial Testing 15% Risk Analysis & Security Controls 15% Remediation & Release Readiness 10% Security Documentation & Reporting Daily Responsibilities 35% Hands-On Security Engineering - vulnerability triage, security testing, architecture reviews, control implementation, remediation validation, and AI security testing 25% Risk & Release Readiness - assessing findings, developing remediation plans, validating closure, and supporting go-live decisions 25% Team Collaboration - partnering with developers, architects, project teams, vendors, testing teams, and security stakeholders 15% Documentation & Reporting - maintaining security evidence, risk decisions, remediation status, and project reporting