Security Engineer

The Security Engineer role at Suffolk Construction Company, Inc. is a Boston onsite position focused on diagnosing and resolving enterprise security configuration and platform issues. The engineer will support identity and access management, conduct security testing, and help maintain security posture through monitoring, remediation tracking, and audit readiness.

Location

Boston, MA (onsite)

Salary

USD 115,000 - 155,000 per year

Role Responsibilities

• Diagnose and resolve Level 2 security configuration and platform issues escalated by Level 1 support.
• Support standards for classification, administration, and lifecycle management of Suffolk data, including applying established data handling requirements across systems and business processes.
• Act as a key security resource for Suffolk corporate applications by assessing risks, supporting secure configurations, reviewing access controls, and coordinating remediation with application owners and technical teams.
• Participate in independent security audits, vulnerability scans, and penetration tests of Suffolk infrastructure to support confidentiality, integrity, and availability of Suffolk data.
• Help enforce Suffolk identity and access management policies and procedures for on-premises and cloud services, including access reviews, role-based and privileged access controls, secure authentication practices, and remediation of access-related findings.
• Support identity manageability, access governance, provisioning, security, and privacy, including implementing and managing secure identity solutions through third-party providers.
• Provide operational assistance for vulnerability scanning, gap analysis, and security initiatives by monitoring findings, validating risk and ownership, triaging remediation priorities, tracking corrective actions, and reporting progress for Suffolk systems.
• Identify, investigate, and resolve security issues from development through operations by collaborating with application, infrastructure, service desk, and business teams, documenting findings, and coordinating remediation.
• Maintain Suffolk information security dashboards, review security metrics, and perform risk analysis to help management interpret trends, prioritize remediation, and track progress against security initiatives.
• Support enterprise security systems and manage comprehensive, data-driven review processes that strengthen critical security infrastructure.
• Mentor Help Desk Analysts by developing security administration skillsets and promoting Suffolk information security standards.
• Stay current on evolving IT security challenges by maintaining knowledge of the current threat and attack landscape, security trends, and Suffolk-specific systems.
• Support Suffolk information security posture aligned to evolving business requirements through security operations, control improvements, and risk reduction initiatives.
• Apply security controls and operational practices across enterprise cloud environments, including identity configuration, logging and monitoring, secure access, vulnerability remediation, and cloud workload protection support in Azure, AWS, or similar platforms.

Required Qualifications

• BS degree in computer science, information systems management, or a related technical discipline (or equivalent combination of education, technical training, or work/military experience).
• At least 5 years of relevant work experience in IT and/or information security, including hands-on experience supporting enterprise systems, security tools, or security operations.
• 3+ years of experience with enterprise information security, preferably within complex organizations.
• 3+ years of experience with enterprise cloud-based solutions (Azure, AWS, etc.).
• 3+ years of experience with large, distributed systems.

Preferred Qualifications

• At least one industry certificate is desirable (for example, CISSP, CISA, etc.).
• Project management and audit experience desired.

Technologies and Standards

• Microsoft security tools
• Vulnerability management platforms
• Cloud security platforms
• Security monitoring solutions
• NIST, ISO 27001, DISA STIG
• CIS, PCI
• MA 201 CMR 17.00
• CCPA, HIPAA
• Azure, AWS
• Windows, MacOS, Linux

Benefits

• Competitive salaries
• Auto allowances and gas cards for certain roles
• Access to market leading medical and emotional and mental health benefits
• Dental, and vision insurance plans
• Virtual care options for physical therapy and primary care
• Generous paid time off
• 401k plan with employer match and access to expert financial resources
• Company paid and voluntary life insurance
• Tax deferred savings accounts
• 10 backup daycare days each year
• Short- and long-term disability
• Commuter benefits

Working Conditions

• Employee is regularly required to sit for long periods of time; talk or hear; and perform fine motor skills using a keyboard, telephone, or writing.
• Employee is frequently required to stand, walk, and reach with arms and/or hands.
• Specific vision abilities include close vision, distance vision, depth perception, and the ability to adjust focus.
• Work is performed in an office environment with a quiet to moderate noise level.
• Job site walking is required.