Security Engineer SrApply Now
Location: Lowell, Massachusetts 01851
Employment Type: Contract
Job Description
Title: Senior Security Engineer – M&A Cybersecurity
Location: Remote
Work Arrangement: Fully Remote
Employment Type: Contract
Duration: 12 months, with potential extension
Schedule: Monday–Friday, 8:00 AM–5:00 PM ET
Hours: 40 hours/week
About the Role
We are seeking a Senior Security Engineer with strong hands-on cybersecurity engineering experience and a background supporting M&A due diligence and post-acquisition security integration.
This role will assess acquisition targets, validate security controls, identify technical risks, and develop actionable integration and remediation plans. The ideal candidate will bring broad expertise across endpoint, identity, network, cloud, infrastructure, threat detection, and enterprise security platforms.
Key Responsibilities
Key Skills
M&A Cybersecurity | Security Engineering | Endpoint Security | EDR | Threat Hunting | Incident Response | IAM | Zero Trust | SAML | OAuth | MFA | Network Security | PKI | SIEM | CrowdStrike | Zscaler | Splunk | Wiz | Microsoft Security | Cloud Security
Compensation
In accordance with applicable pay transparency requirements, the anticipated hourly rate for this role is $62.00–$65.00/hr, based on experience and qualifications.
Location: Remote
Work Arrangement: Fully Remote
Employment Type: Contract
Duration: 12 months, with potential extension
Schedule: Monday–Friday, 8:00 AM–5:00 PM ET
Hours: 40 hours/week
About the Role
We are seeking a Senior Security Engineer with strong hands-on cybersecurity engineering experience and a background supporting M&A due diligence and post-acquisition security integration.
This role will assess acquisition targets, validate security controls, identify technical risks, and develop actionable integration and remediation plans. The ideal candidate will bring broad expertise across endpoint, identity, network, cloud, infrastructure, threat detection, and enterprise security platforms.
Key Responsibilities
- Conduct cybersecurity due diligence and technical assessments for acquisition targets
- Validate security configurations and identify risks across endpoint, identity, network, cloud, and infrastructure environments
- Develop Day 1 and Day 100 security integration plans, remediation roadmaps, and implementation runbooks
- Perform compromise assessments, threat hunting, endpoint triage, telemetry analysis, and IoC validation
- Assess and improve controls across firewalls, IDS/IPS, proxies, WAFs, VPNs, ZTNA, Citrix, and network segmentation
- Evaluate IAM controls including SAML, OAuth, MFA, privileged access, conditional access, federation, and Zero Trust architectures
- Review PKI, certificate lifecycle management, TLS configurations, secrets management, and legacy protocol risks
- Assess SIEM logging coverage, telemetry ingestion, use cases, and enterprise security platform requirements
- Lead hands-on remediation efforts including security agent deployment, MFA implementation, endpoint hardening, protocol improvements, and policy enforcement
- Translate technical findings into executive-level risk assessments, integration recommendations, budget forecasts, and remediation plans
- 8+ years of progressively responsible cybersecurity engineering, security architecture, incident response, infrastructure security, or enterprise integration experience
- Strong experience with M&A cybersecurity due diligence and/or post-acquisition security integration
- Deep hands-on security engineering expertise across endpoint, identity, network, cloud, and infrastructure domains
- Experience with EDR, antivirus, disk encryption, MDM, Group Policy, device control, and endpoint hardening across Windows, macOS, and Linux
- Hands-on threat hunting, compromise assessment, forensic data collection, and security telemetry analysis experience
- Strong knowledge of IAM, MFA, SAML, OAuth, federation, privileged access, conditional access, and Zero Trust
- Strong experience with network and edge security technologies including firewalls, IDS/IPS, WAF, VPN, ZTNA, proxies, and SSL/TLS inspection
- Experience with PKI, certificate management, TLS hardening, and secrets management
- Strong SIEM and enterprise logging experience
- Ability to translate technical findings into clear recommendations for both engineering teams and leadership
- Experience with CrowdStrike, Zscaler, Splunk, Wiz, and Microsoft security technologies
- Experience developing Day 1 and Day 100 M&A integration plans
- Experience with enterprise infrastructure metrics, CMDBs, vulnerability scanners, endpoint management platforms, and cloud environments
- Advanced email security knowledge including SPF, DKIM, DMARC, anti-phishing controls, and secure email gateways
- Experience with security tooling consolidation, migration sequencing, and risk-based remediation prioritization
- Strong technical leadership and stakeholder management experience across complex integration initiatives
Key Skills
M&A Cybersecurity | Security Engineering | Endpoint Security | EDR | Threat Hunting | Incident Response | IAM | Zero Trust | SAML | OAuth | MFA | Network Security | PKI | SIEM | CrowdStrike | Zscaler | Splunk | Wiz | Microsoft Security | Cloud Security
Compensation
In accordance with applicable pay transparency requirements, the anticipated hourly rate for this role is $62.00–$65.00/hr, based on experience and qualifications.
Contact
Ovrille Gonsalves
Director of Recruiting & Training
Ovrille is responsible for full lifecycle recruiting for JVT’s clients across several industry verticals. He supports the Contract Recruiting team, and specializes in identifying temp (contractual) and temp-to-perm resources for JVT’s clients.
Back to Jobs Email to a Friend Apply Now