Keystone Strategy Jobs Hiring Now
Keystone Strategy is hiring for 6 open roles on Migrate Mate as of July 16, 2026, concentrated in software engineering and product management, with listed salaries up to about $226,000. Migrate Mate updates Keystone Strategy's live openings daily. Keystone Strategy is a strategy and economics consulting firm that advises companies and legal teams on complex business, technology, and competition matters.
Find Keystone Strategy JobsOverview
Keystone Strategy hiring data on Migrate Mate, as of July 16, 2026.
- Open jobs
- 6
- Top team
- Software Engineering
- Seniority
- Across all levels
- Work type
- 67% remote or hybrid
- Top location
- Boston
- Salary range
- $104,000–$226,000
Listed salaries for Keystone Strategy roles on Migrate Mate range from about $104,000 to $226,000 per year across 6 open roles, as of July 16, 2026.
Open Roles at Keystone Strategy
Showing 6 of 6+ Keystone Strategy jobs
INTRODUCTION
Keystone is a premier economics, technology, and strategy consulting firm built to help companies lead through transformation. As breakthrough innovations reshape industries, redefine competition and change our society, complex and highly competitive ecosystems emerge. Keystone advises technology leaders, Fortune 100 companies, their legal counsel, and governments on business, economic, litigation, and regulatory strategy in relation to these innovations and competitive eco-systems. We operate globally from offices in New York, Boston, San Francisco, Seattle, London, Dubai, and Washington, D.C.
ABOUT THE SECURITY ENGINEER – GRC ROLE
We’re growing quickly and looking for a Security Engineer with governance, risk and compliance (GRC) proficiency who will be responsible for strengthening the organization’s cybersecurity posture through the execution of governance, risk management, and compliance activities. This role will be building and maintaining structured governance by formalizing policies, controls, and accountability across the organization, enabling proactive risk management through continuous assessment, threat modeling, and mitigation strategies, and ensuring compliance efforts can scale effectively alongside company growth, evolving regulatory requirements, and increasing complexity in systems, data handling, and third-party relationships.
Reporting to the Director, IT Security you will work cross-functionally with IT, product, compliance, and leadership team, and in some cases directly with clients or auditor, to ensure our security posture meets both technical and regulatory expectations across commercial and regulated environments. This role focuses on developing, documenting, and refining security standards and procedures; performing risk and control assessments; and ensuring alignment with government regulatory and security frameworks, including ISO, industry standards, and organizational policies. This role is ideal for a technically strong security professional who enjoys building secure systems and translating regulatory and business requirements into practical, scalable security solutions.
KEY RESPONSIBILITIES
Security Engineering & Technical Controls
- Design, implement, and maintain security controls across cloud and SaaS environments (AWS, Azure, GCP)
- Implement and manage IAM solutions (SSO, MFA, RBAC, least privilege)
- Support vulnerability management, secure configuration, and system hardening initiatives
- Support logging, monitoring, and alerting integrations (SIEM, cloud-native tools)
- Assist with incident response planning, tabletop exercises, and post-incident reviews
- Evaluate and implement security tooling to improve visibility, protection, and automation
- Partner with engineering teams to embed security into the SDLC (secure design reviews, threat modeling, security requirements)
Governance, Risk & Compliance (GRC)
- Enforce and maintain cybersecurity governance, risk, and control frameworks aligned with applicable laws and industry standards
- Perform cybersecurity risk assessments, maturity assessments, and Business Impact Analyses (BIA)
- Conduct control readiness and effectiveness assessments
- Maintain risk registers, POA&Ms, and remediation timelines
- Serve as a trusted advisor on control design, risk treatment, and security architecture decisions
Regulatory & Audit Support
- Support compliance initiatives such as FedRAMP Moderate/High, ISO 27001, and similar frameworks
- Develop and maintain compliance documentation, including:
- System Security Plans (SSPs)
- Policies, procedures, and SOPs
- Control implementation statements
- Coordinate evidence collection and technical validation for internal and external audits
- Work directly with auditors, 3PAOs, and internal stakeholders during assessments
- Support continuous monitoring activities (vulnerability scans, control testing, compliance reporting)
Program Execution & Improvement
- Track security control implementation with leadership and IT teams
- Drive automation and tooling improvements to scale compliance and monitoring
- Support third-party risk management, including technical vendor assessments and questionnaires
- Research and apply evolving security standards, regulatory requirements, and threat trends
- Lead process improvements to enhance security efficiency and operational maturity
WHAT YOU’LL BRING
Required
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent practical experience
- 5–8+ years of experience in security engineering, GRC, or hybrid security/IT roles
- Strong hands-on experience with:
- Cloud platforms (AWS, Azure, GCP)
- IAM, network security, encryption, and secure system design
- Vulnerability management and secure configuration
- Strong working knowledge of security frameworks and compliance standards:
- NIST SP 800-53 (Rev. 5), NIST RMF (800-37), NIST CSF
- FedRAMP Moderate/High (including SSPs, POA&Ms, and audits)
- ISO 27001, CIS
- Experience translating compliance requirements into technical implementations
- Excellent technical writing, documentation, and stakeholder communication skills
- Ability to operate independently, manage multiple initiatives, and influence without authority
Preferred
- Experience with FedRAMP 20x, GovRAMP, CMMC, TX-RAMP, or HIPAA
- Familiarity with GRC platforms (JupiterOne or similar)
- Experience with SIEM, WAF, CSPM, CNAPP, and vulnerability scanning tools
- Background in incident response, threat modeling, or penetration testing
- Scripting or automation experience (Python, Bash, Terraform)
- Cybersecurity certifications such as CISSP, CISA, CRISC, CCSP, Security+
COMPENSATION
- Annual Salary Range: $110,000—$150,000 USD
In addition to annual salary, we provide an annual discretionary bonus, 401k contribution, and competitive benefits package. Actual Compensation within the range will depend upon the level the individual is hired into based on their skills, experience, and qualifications.
At Keystone we believe diversity matters. At every level of our firm, we seek to advance and promote diversity, foster an inclusive culture, and ensure our colleagues have a deep sense of respect and belonging. If you are interested in growing your career with colleagues from varied backgrounds and cultures, consider Keystone.
INTRODUCTION
Keystone is a premier economics, technology, and strategy consulting firm built to help companies lead through transformation. As breakthrough innovations reshape industries, redefine competition and change our society, complex and highly competitive ecosystems emerge. Keystone advises technology leaders, Fortune 100 companies, their legal counsel, and governments on business, economic, litigation, and regulatory strategy in relation to these innovations and competitive eco-systems. We operate globally from offices in New York, Boston, San Francisco, Seattle, London, Dubai, and Washington, D.C.
ABOUT THE SECURITY ENGINEER – GRC ROLE
We’re growing quickly and looking for a Security Engineer with governance, risk and compliance (GRC) proficiency who will be responsible for strengthening the organization’s cybersecurity posture through the execution of governance, risk management, and compliance activities. This role will be building and maintaining structured governance by formalizing policies, controls, and accountability across the organization, enabling proactive risk management through continuous assessment, threat modeling, and mitigation strategies, and ensuring compliance efforts can scale effectively alongside company growth, evolving regulatory requirements, and increasing complexity in systems, data handling, and third-party relationships.
Reporting to the Director, IT Security you will work cross-functionally with IT, product, compliance, and leadership team, and in some cases directly with clients or auditor, to ensure our security posture meets both technical and regulatory expectations across commercial and regulated environments. This role focuses on developing, documenting, and refining security standards and procedures; performing risk and control assessments; and ensuring alignment with government regulatory and security frameworks, including ISO, industry standards, and organizational policies. This role is ideal for a technically strong security professional who enjoys building secure systems and translating regulatory and business requirements into practical, scalable security solutions.
KEY RESPONSIBILITIES
Security Engineering & Technical Controls
- Design, implement, and maintain security controls across cloud and SaaS environments (AWS, Azure, GCP)
- Implement and manage IAM solutions (SSO, MFA, RBAC, least privilege)
- Support vulnerability management, secure configuration, and system hardening initiatives
- Support logging, monitoring, and alerting integrations (SIEM, cloud-native tools)
- Assist with incident response planning, tabletop exercises, and post-incident reviews
- Evaluate and implement security tooling to improve visibility, protection, and automation
- Partner with engineering teams to embed security into the SDLC (secure design reviews, threat modeling, security requirements)
Governance, Risk & Compliance (GRC)
- Enforce and maintain cybersecurity governance, risk, and control frameworks aligned with applicable laws and industry standards
- Perform cybersecurity risk assessments, maturity assessments, and Business Impact Analyses (BIA)
- Conduct control readiness and effectiveness assessments
- Maintain risk registers, POA&Ms, and remediation timelines
- Serve as a trusted advisor on control design, risk treatment, and security architecture decisions
Regulatory & Audit Support
- Support compliance initiatives such as FedRAMP Moderate/High, ISO 27001, and similar frameworks
- Develop and maintain compliance documentation, including:
- System Security Plans (SSPs)
- Policies, procedures, and SOPs
- Control implementation statements
- Coordinate evidence collection and technical validation for internal and external audits
- Work directly with auditors, 3PAOs, and internal stakeholders during assessments
- Support continuous monitoring activities (vulnerability scans, control testing, compliance reporting)
Program Execution & Improvement
- Track security control implementation with leadership and IT teams
- Drive automation and tooling improvements to scale compliance and monitoring
- Support third-party risk management, including technical vendor assessments and questionnaires
- Research and apply evolving security standards, regulatory requirements, and threat trends
- Lead process improvements to enhance security efficiency and operational maturity
WHAT YOU’LL BRING
Required
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent practical experience
- 5–8+ years of experience in security engineering, GRC, or hybrid security/IT roles
- Strong hands-on experience with:
- Cloud platforms (AWS, Azure, GCP)
- IAM, network security, encryption, and secure system design
- Vulnerability management and secure configuration
- Strong working knowledge of security frameworks and compliance standards:
- NIST SP 800-53 (Rev. 5), NIST RMF (800-37), NIST CSF
- FedRAMP Moderate/High (including SSPs, POA&Ms, and audits)
- ISO 27001, CIS
- Experience translating compliance requirements into technical implementations
- Excellent technical writing, documentation, and stakeholder communication skills
- Ability to operate independently, manage multiple initiatives, and influence without authority
Preferred
- Experience with FedRAMP 20x, GovRAMP, CMMC, TX-RAMP, or HIPAA
- Familiarity with GRC platforms (JupiterOne or similar)
- Experience with SIEM, WAF, CSPM, CNAPP, and vulnerability scanning tools
- Background in incident response, threat modeling, or penetration testing
- Scripting or automation experience (Python, Bash, Terraform)
- Cybersecurity certifications such as CISSP, CISA, CRISC, CCSP, Security+
COMPENSATION
- Annual Salary Range: $110,000—$150,000 USD
In addition to annual salary, we provide an annual discretionary bonus, 401k contribution, and competitive benefits package. Actual Compensation within the range will depend upon the level the individual is hired into based on their skills, experience, and qualifications.
At Keystone we believe diversity matters. At every level of our firm, we seek to advance and promote diversity, foster an inclusive culture, and ensure our colleagues have a deep sense of respect and belonging. If you are interested in growing your career with colleagues from varied backgrounds and cultures, consider Keystone.
Job Roles at Keystone Strategy
Working at Keystone Strategy
Keystone Strategy's 6 open roles are across all levels, and about 67% are remote or hybrid. The most active teams are software engineering, product management, and cybersecurity. Keystone Strategy is a strategy and economics consulting firm whose work spans artificial intelligence, antitrust, intellectual property, and corporate strategy. The firm works with clients across technology, financial services, and other industries, combining economic analysis with applied AI and engineering capabilities. Most Keystone Strategy roles are based in Boston and Boston.
Explore more roles by function
Browse thousands of live openings across engineering, sales, product, and more, and apply in just a few clicks.
Browse jobs by roleKeystone Strategy Jobs: Frequently Asked Questions
How many jobs is Keystone Strategy hiring for right now?
Keystone Strategy is hiring for 6 open roles on Migrate Mate as of July 16, 2026, updated daily, concentrated in software engineering and product management. Roles span engineering, AI product development, economics, recruiting, and security, reflecting the firm's combined consulting and applied technology focus.
What kinds of roles does Keystone Strategy hire for?
The most active teams are software engineering, product management, and cybersecurity. Keystone Strategy recruits across AI and machine learning engineering, full-stack product engineering, security, economics, and talent acquisition. The firm's open positions reflect both its consulting practice and its internal AI product development work. Most postings are across all levels, though economist roles are also open to recent graduates.
Are Keystone Strategy jobs remote or in-person?
Mostly remote. About 67% of Keystone Strategy's open roles on Migrate Mate are remote or hybrid as of July 16, 2026, with the rest based in Boston. Each Keystone Strategy listing shows its work location so you can filter before applying.
How do I apply to a job at Keystone Strategy?
Find a Keystone Strategy role on Migrate Mate, then follow the listing through to Keystone Strategy's own careers page to submit your application directly. Keystone Strategy manages its own hiring process, including interviews and offers. Migrate Mate keeps Keystone Strategy's openings current so you can browse roles without missing new postings.
What do Keystone Strategy jobs pay?
Listed salaries for Keystone Strategy roles on Migrate Mate range from about $104,000 to $226,000 per year as of July 16, 2026, with most postings at across all levels. Exact pay is set by Keystone Strategy and shown on each listing.
Does Keystone Strategy hire entry-level?
Most of Keystone Strategy's open roles on Migrate Mate are across all levels as of July 16, 2026. Check individual Keystone Strategy listings for stated experience requirements.
Where is Keystone Strategy hiring?
Most Keystone Strategy roles are based in Boston and Boston, and about 67% offer remote or hybrid work as of July 16, 2026. Migrate Mate shows the location on each listing.