About this opportunity
ALKU lists this Information Security Engineer opportunity in andover, Massachusetts. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Job Title: Senior Information Security Engineer
Location: Hybrid - Andover, MA | Full-Time
Pay: $150,000 - $180,000
About ALKU
ALKU is a specialized staffing firm headquartered in Andover, MA. As we scale, we’re seeking a Senior Information Security Engineer to lead our cybersecurity function, a hands-on, strategic role that sits at the intersection of technical depth and business alignment. This is a high impact role for someone who can both set direction and execute.
Position Details
Experience Level: 10+ years of progressive information security experience, with 2-3+ years in a senior or lead role
Location: Hybrid - Andover, MA
Role Summary
You will own ALKU’s day-to-day cybersecurity operations and long-term security strategy, serving as the primary internal liaison to our Managed Security Service Provider (MSSP) and our Managed Service Provider (MSP). You bring deep security engineering experience, a strong networking foundation, recent hands-on experience driving cybersecurity strategy and operations within a Microsoft-centric environment (Microsoft 365, Entra ID, Defender), and the ability to communicate risk clearly to leadership.
Key Responsibilities
Security Strategy & Governance
Drive and maintain ALKU’s cybersecurity roadmap and controls, aligning initiatives with business risk and priorities
Establish and communicate security policies, standards, and procedures across the organization
Report on security posture and program maturity to senior leadership
Help drive risk assessments, remediation planning, and evaluate security investments and vendors
Serve as ALKU’s primary point of contact with MSSP and MSP managing alert tuning, detection coverage, response playbooks, and regular business reviews
Ensure SLAs and security commitments from both partners are met
AWS & Cloud Infrastructure Security
Partner with the Engineering team on the security of ALKU's AWS environment, providing hands-on security expertise and guidance
Build and maintain a security roadmap for ALKU's custom-built applications, in partnership with Engineering leadership
Implement and maintain AWS security best practices across the environment
Assess and advise on cloud security posture across AWS, Azure, SaaS platforms, and custom applications at ALKU
Track and prioritize remediation of application-layer findings alongside infrastructure risk Incident Monitoring, Triage & Response
Oversee detection, triage, escalation, and response to security incidents
Partner with MSP to maintain ALKU’s incident response plan, tabletop exercise program, and post- incident review process
Provide on-call escalation support during high-severity incidents; occasional after-hours availability required
Analyze security data, alerts, and logs to identify risks and trends; maintain up-to-date awareness of the evolving threat landscape
Work with MSP and MSSP to tune Automatic Response Plays, SIEM and EDR tooling to reduce noise and improve detection
Network, Endpoint & Infrastructure Security
General understanding of networking expertise to assess and improve ALKU’s security architecture (firewalls, VPN, network segmentation, DNS security, and Zero Trust initiatives)
Review and advise on network changes, cloud connectivity, remote access design, and firewall rule sets in partnership with the MSP
Work with MSP to oversee Microsoft 365 and Entra ID (Azure AD) security configuration, Conditional Access, and MFA enforcement
Assess and advise on cloud security posture across Azure, SaaS platforms, and custom applications at ALKU
Compliance, Awareness & Reporting
Lead the security awareness training program including phishing simulations and role-based education
Maintain accurate security incident records, documentation, and audit-ready evidence libraries
Prepare regular security reports for internal stakeholders
Required Skills & Qualifications
10+ years of progressive information security experience, with 2-3+ years in a senior or lead role
Hands-on AWS security experience: encryption and secure environment oversight
Networking knowledge: IP, routing/switching, firewall architecture, VPN, VLANs, DNS, IDS/IPS - a background in network engineering or network security is a strong differentiator
Hands-on experience with SIEM platforms, EDR tools, and threat detection/response workflows; familiarity with MDR/MSSP platforms preferred
Experience managing or overseeing MSSPs and/or MSPs in an enterprise or mid-market environment
Recent (within the last 2-3 years), hands-on experience driving cybersecurity strategy and operations within a Microsoft-centric environment, including strong command of the Microsoft 365 security stack (Defender suite, Entra ID, Conditional Access)
Ability to develop security strategy and communicate risk clearly to non-technical leadership
Preferred
CISSP, CISM, CCNP Security, CompTIA CASP+, or equivalent certification
Experience with SASE, SD-WAN, or Zero Trust network architecture
Familiarity with Microsoft Sentinel, Defender compliance tooling
Cloud security experience (Azure, AWS)
Familiarity with CMMC 2.0, CMMC 1.0, and/or NIST Controls
Experience managing security for AI environments and tools (e.g., AI/LLM platform governance, model access controls, AI usage policy enforcement)
Nice-to-have: experience with, or research on, Anthropic's Claude Mythos models (or similar) as it relates to AI security
Experience working in an enterprise-size organization (1,000+ employees, multiple business units/locations)
Education
Bachelor’s degree in Computer Science, Information Security, Information Technology, or related field preferred; equivalent experience considered
Work Environment
Hybrid role based in Andover, MA with flexibility for remote work. Fast-paced, collaborative culture with opportunity for professional growth. Occasional after-hours availability required for critical incidents or on-call coverage
Equal Opportunity Employer
ALKU is an Equal Opportunity Employer committed to fostering an inclusive workplace where all individuals are treated with respect and provided equal employment opportunities. Employment decisions are based on business needs, job-related qualifications, merit, and performance, without regard to any characteristic protected by applicable federal, state, or local law.
ALKU is committed to providing reasonable accommodations to qualified individuals with disabilities and applicants throughout the hiring process, consistent with applicable law.
Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time.**
#J-18808-Ljbffr
Worksite address
andover, MA, 05544, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.