Senior Cyber Security Engineer

Source One is a consulting services company and we’re currently looking for the following individual to work as a consultant to our direct client, a company focused on developing technologies in artificial intelligence (AI), vehicular automation, materials science, and robotics.

** We are unable to work with third-party companies for this role.

Title: Senior Cybersecurity Engineer (Contract)

Location: Cambridge, MA (onsite)

Pay Rate: $100-$125/hour (W-2) plus benefits

About the Opportunity: Seeking an experienced Senior Cybersecurity Engineer to assess and strengthen its overall security posture while building a modern, scalable information security program that supports world-class research and innovation.

This is a highly impactful player-coach role that combines strategic leadership with hands-on technical execution. You'll help shape the security strategy while actively implementing solutions across cloud infrastructure, applications, identity, monitoring, and incident response. Working closely with researchers and engineering teams, you'll design practical security controls that protect critical systems without slowing innovation.

What You'll Do:

• Evaluate the company's current security posture across AWS, endpoints, SaaS applications, and software development environments.
• Design and implement a comprehensive information security program covering governance, incident response, operational security, monitoring, and data protection.
• Manage and optimize security technologies including SIEM, EDR, vulnerability management, application security, and external attack surface monitoring.
• Develop and maintain security policies, standards, and operational procedures.
• Lead incident response activities, including investigations, containment, remediation, post-incident reviews, and tabletop exercises.
• Improve AWS security through IAM hardening, configuration management, monitoring, and cloud security best practices.
• Perform security assessments of new software, SaaS platforms, and third-party vendors.
• Partner with engineering and research teams to implement effective, risk-based security controls.
• Develop security metrics, dashboards, executive reporting, and coordinate with HQ security standards.
• Drive security awareness initiatives, including phishing simulations, onboarding, and ongoing employee education.

Required Qualifications:

• 7 years of hands-on cybersecurity engineering experience.
• Proven experience building or significantly maturing an enterprise security program.
• Strong expertise across multiple security domains, including AWS Cloud Security, Identity & Access Management (IAM), Endpoint Security, Network Security and Application Security.
• Hands-on experience with SIEM, EDR, vulnerability management, and cloud security platforms.
• Experience developing and leading incident response programs.
• Strong scripting and automation skills using Python and/or Bash.
• Working knowledge of security frameworks such as NIST CSF and CIS Controls.
• Strong communication skills with the ability to explain technical risks to both engineering and business stakeholders.
• Foundational experience in systems administration and/or networking.

Preferred Qualifications:

• Experience securing research environments, engineering organizations, or innovation-focused companies.
• Experience with GitHub Advanced Security, Checkmarx, or similar application security tools.
• Experience with SaaS Security Posture Management (SSPM) and Google Workspace security.
• Familiarity with CrowdStrike Falcon, Palo Alto Networks, Exabeam SIEM, or KnowBe4.
• Experience supporting compliance reporting for enterprise or parent organizations.
• Previous experience serving as the primary security engineer or part of a small, highly autonomous security team.