About Careertakes

👉 Important disclosure: Careertakes is a third-party recruiting platform supporting this hiring process. If selected, you will be employed directly by our client, Business Consulting and Services.

Applicants for this role may also receive access to additional matched opportunities through the Careertakes platform.

---

What You’ll Do

You will join the confidential client’s security engineering team on a 12-month contract (hybrid) to help design, build, and validate secure software for critical systems. This role focuses on integrating security into the software development lifecycle, conducting threat and vulnerability assessments, and supporting incident response and remediation activities.

• Design and implement security controls, tooling, and automation
• Perform threat modeling, code reviews, and vulnerability assessments
• Run static code analysis, software composition analysis, SCAP scans, and support penetration testing
• Collaborate with product and engineering teams to ensure secure SDLC practices
• Respond to security incidents and support investigations
• Mentor and guide junior engineers; take technical leadership on projects
• Contribute to employee cybersecurity training and risk-reduction guidance

---

Key Responsibilities

• Translate security standards (e.g., IEC 62443, NIST SSDF, NIST 800-53, ISO 27001, ISO 21434, CMMC, RMF) into engineering requirements
• Implement and validate security automation to detect and remediate vulnerabilities early
• Build and maintain security pipelines and testing integrations for CI/CD
• Lead technical threat modeling sessions and produce actionable mitigation plans
• Partner with cross-functional teams to balance security, performance, and product goals

---

Required Qualifications

• 5+ years of professional experience in cybersecurity or software engineering with security responsibilities
• Demonstrated experience correlating standards to CRA and other regulatory/security frameworks
• Hands-on experience with threat modeling, security automation, vulnerability analysis, and incident response
• Experience with static code analysis and software composition analysis tools; familiarity with SCAP scans and penetration testing practices
• Proficiency in C/C++ or C# (or similar compiled/interpreted languages)
• Experience with source control concepts and secure development workflows
• Proven ability to lead technical engineering efforts and mentor teammates
• BS/BA/MS in Computer Science, Computer Systems Engineering, or equivalent experience (Electrical/Computer Engineering acceptable with significant software experience)

---

Nice to Have

• Prior exposure to hardware control, embedded programming, or operating systems
• Prior familiarity with the Cybersecurity Resiliency Act (CRA) implementations
• Experience working in regulated or safety-critical product environments

---

Contract & Compensation

• Position type: 12-month contract (hybrid in North Reading, MA) with possibility to convert to permanent
• Pay range: $70/hour - $88/hour + benefits
• Employment: You will be engaged by our confidential client; local work and travel expectations will follow client policies and applicable law

---

Why Join

This role offers the chance to make a measurable impact on product security, lead engineering initiatives, and grow into broader security leadership. You’ll work with multidisciplinary teams to shape secure products and practices used in real-world, safety-critical contexts.

---

Equal Opportunity & Hiring Transparency

Careertakes and our client are Equal Opportunity Employers committed to building a diverse and inclusive workforce. We prohibit discrimination or harassment of any kind. To support a fair and efficient hiring process, AI tools may be used to assist with application review or resume screening. These tools do not replace human decision-making. Final hiring decisions are made by people.

If you have questions about how your data is used, please contact us directly.