Framingham, MA

Cybersecurity Jobs in Framingham, MA

2 jobs found

Include remote jobs

Today

Senior Security Engineer

HealthDrive Framingham, MA

Framingham, MA

Today

$85k - $115k/yr Full time Senior Azure Cloud

Apply Now

Job Description

HealthDrive offers a hybrid, Framingham based security role that centers on protecting patient data across on premises and Azure environments. This hands on Senior Security Engineer position comes with a competitive salary, the opportunity to lead incident response, and a clear path to influence end to end third party risk management with the MSSP partner. You will work closely with IT and business stakeholders to implement robust security controls, strengthen detection capabilities, and drive compliant, safe operations.

What you’ll do

Security infrastructure management: Build, configure, deploy, and maintain security stack including firewalls, MDM, identity platforms, email security, and cloud controls using Fortinet as the preferred platform, plus Microsoft Active Directory, Microsoft 365, and Azure. Experience with comparable firewalls such as Palo Alto is transferable.
Cloud security: Implement and manage cloud security controls in Microsoft Azure, with a focus on identity and access management, network security, and data protection.
Secure network and server design: Collaborate with infrastructure teams to design and harden secure network and server configurations, including firewall, VPN, and access controls.
Endpoint and data protection: Own policy configuration for Proofpoint platforms — Email Security, Email DLP, Endpoint DLP, and DSPM tuning. Triage alerts and refine controls to mitigate phishing, malware, and data exfiltration.
Vulnerability management: Conduct regular assessments using SecureWorks or Qualys and coordinate remediation efforts with IT teams.
Incident response: Lead detection, investigation, containment, and recovery in coordination with internal teams and external partners; apply threat intelligence to shape detection and response priorities.
Security automation: Develop scripts in PowerShell, Python, or Bash to automate routine security tasks and improve efficiency.
Third party risk management: Own HealthDrive’s TPRM program end to end, including inbound and outbound security questionnaires, assessing vendor security posture, maintaining the vendor risk scoring framework, responding to assessments from partners and payers, and managing ongoing third party risk in line with HIPAA and data protection obligations.
Compliance and risk management: Ensure adherence to HIPAA and other regulatory requirements through policy enforcement and risk mitigation strategies.
Documentation and training: Maintain detailed security configuration documentation and provide guidance to business and IT staff on security best practices.
Security awareness training: Manage the security awareness program, including campaigns and phishing simulations, tracking completion and results, and reporting workforce risk to IT leadership.
Collaboration with MSSP: Serve as liaison to HealthDrive’s Managed Security Service Provider to ensure effective threat monitoring and response.

What we’re looking for

Infrastructure focused security engineering background with the ability to set strategy and execute hands on.
Strong grasp of network security fundamentals including TCP/IP, DNS, routing, and firewalls.
Hands on experience with enterprise grade firewalls and network security tools.
Proficiency in Microsoft Active Directory and Azure Active Directory (Microsoft Entra ID).
Solid knowledge of Azure cloud security best practices.
Experience with endpoint protection and data loss prevention technologies, preferably Proofpoint.
Experience leading or running third party risk and vendor security assessments.
Excellent problem solving, communication, and collaboration skills, with the ability to work independently and across cross functional teams.

Technologies

Fortinet, Palo Alto (transferable)
Microsoft Active Directory, Microsoft Entra ID
Microsoft 365, Azure
Proofpoint, DSPM, Email Security, Email DLP, Endpoint DLP
SecureWorks, Qualys
PowerShell, Python, Bash
Microsoft Intune
Okta MFA
Microsoft Sentinel

Work environment

Based at HealthDrive’s Framingham, MA office (off Route 9, near Routes 90 and 495) on a hybrid schedule.

Compensation

Salary range: USD 85,000 – 115,000 per year, experience dependent.

Certifications

Preferred CISSP; or at least one relevant security certification, such as Microsoft Certified: Azure Security Engineer Associate (AZ-500), CompTIA Security+, CISM, CCSP, or HCISPP

Core competencies

Communication
Cooperation and Team working
Adaptability
Expertise and Professionalism
Problem Solving / Analysis

View full job page →

Today

Senior Security Engineer

HealthDrive Framingham, MA

Framingham, MA

Today

$85k - $115k/yr Full time Senior Azure Cloud

Apply Now

Job Description

HealthDrive is seeking a hands-on Senior Security Engineer to safeguard patient data across on-premises and Azure environments, build and operate security controls, lead incident detection and response, and manage third-party risk in partnership with a Managed Security Service Provider.

Responsibilities

Architect and operate HealthDrive's security infrastructure across on premises and cloud, covering firewalls (Fortinet preferred), MDM, identity platforms, email security, and cloud controls; hands-on experience with comparable firewalls such as Palo Alto is transferable.
Implement and manage Azure cloud security controls, with a focus on identity and access management, network security, and data protection.
Collaborate with infrastructure teams to design and harden secure network and server configurations, including firewall, VPN, and access controls.
Own and maintain policy configurations for Proofpoint platforms (Email Security, Email DLP, Endpoint DLP) and DSPM tuning, triage alerts, and controls to prevent phishing, malware, and data exfiltration.
Conduct regular vulnerability assessments using tools such as SecureWorks or Qualys and coordinate remediation with IT teams.
Lead incident detection, investigation, containment, and recovery in coordination with internal teams and external partners; operationalize threat intelligence to guide detection and response priorities.
Develop scripts in PowerShell, Python, or Bash to automate routine security tasks and enhance operational efficiency.
Own and drive HealthDrive's Third-Party Risk Management program end to end, including inbound and outbound security questionnaires, vendor risk scoring, responding to partner and payer assessments, and managing ongoing third-party risk in line with HIPAA and data protection obligations.
Ensure HIPAA and other regulatory compliance through policy enforcement and risk-mitigation strategies.
Maintain detailed documentation of security configurations and procedures; provide guidance on security best practices to business and IT staff.
Oversee the security awareness training program, building campaigns and phishing simulations, tracking completion and results, and reporting workforce risk to IT leadership.
Collaborate with HealthDrive's Managed Security Service Provider to ensure effective threat monitoring and response.

Requirements

Infrastructure-focused security engineering background with the ability to set strategy and execute hands-on.
Strong understanding of network security fundamentals including TCP/IP, DNS, routing, and firewalls.
Hands-on experience with enterprise-grade firewalls and network security tools.
Proficiency with Microsoft Active Directory and Azure Active Directory (Microsoft Entra ID).
Solid knowledge of Azure cloud security best practices.
Experience with endpoint protection and data loss prevention technologies, preferably Proofpoint.
Experience leading or conducting third-party risk management and vendor security assessments.
Excellent problem-solving, communication, and collaboration skills; able to work independently and across cross-functional teams.
Education: Bachelor's degree in Cybersecurity, Computer Science, or a related field.
Experience requirement: minimum 10 years in security engineering or a closely related role.

Technologies

Fortinet
Palo Alto
Microsoft Active Directory
Microsoft 365
Azure
Microsoft Entra ID
Proofpoint
Email Security
Email DLP
Endpoint DLP
DSPM
SecureWorks
Qualys
PowerShell
Python
Bash
Microsoft Intune
Microsoft Sentinel
Okta

Compensation

Salary range: $85,000 - $115,000 per year, experience dependent. Location: Framingham, MA, hybrid work arrangement.

View full job page →

Cybersecurity Jobs in Framingham, MA

Senior Security Engineer

Senior Security Engineer

Get Cybersecurity Jobs in Framingham, MA alerts