Information Security Engineer Jobs in Massachusetts
Information Security Engineer jobs in Massachusetts are among the most active in the country, concentrated in financial services, healthcare, defense contracting, and biotech across Boston, Cambridge, and the Route 128 corridor, with openings at every level from entry-level SOC analyst pipelines through senior architect roles. Major employers with a lasting Massachusetts presence include Raytheon Technologies, Fidelity Investments, and Massachusetts General Hospital, which maintain substantial security teams across the state. Demand is strongest in cloud security, identity and access management, and threat detection, reflecting the state's density of regulated-industry employers. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 60+ Information Security Engineer jobs
Mass General Brigham relies on a wide range of professionals, including doctors, nurses, business people, tech experts, researchers, and systems analysts to advance our mission. As a not-for-profit, we support patient care, research, teaching, and community service, striving to provide exceptional care. We believe that high-performing teams drive groundbreaking medical discoveries and invite all applicants to join us and experience what it means to be part of Mass General Brigham.
Job Summary
Mass General Brigham is seeking an Information Security Engineer III to serve as a senior leader within the Digital Information Security Architecture team. In this role, you will evaluate a wide variety of technologies, business initiatives, operational processes, and strategic projects to identify security risks and provide practical, risk-based guidance. Working closely with technical teams, business stakeholders, vendors, and security professionals, you will help ensure that security considerations are incorporated into decision making throughout the organization.
Bring your cybersecurity expertise to a role where you can help shape strategy, influence technology decisions, and strengthen security across the enterprise.
We’re looking for a strategic thinker who can quickly assess unfamiliar technologies and business challenges, identify meaningful cybersecurity risks, and translate complex issues into clear, actionable recommendations.
As a senior member of the team, you’ll:
Shape cybersecurity strategy and standards.
Advise leaders on technology and security risk.
Evaluate emerging technologies and enterprise initiatives.
Recommend practical, business-focused security solutions.
Partner with technical and non-technical stakeholders.
Mentor team members and foster collaboration and continuous learning.
What You'll Do
- Analyze technologies, business initiatives, operational processes, and proposed solutions to identify security risks and provide practical, risk-based guidance that supports informed decision making.
- Quickly assess unfamiliar technologies, platforms, and business challenges, develop an understanding of their security implications, and translate that understanding into actionable recommendations.
- Apply cybersecurity principles, industry frameworks, organizational standards, and professional analyses to evaluate complex situations and recommend appropriate security controls, safeguards, or courses of action.
- Collaborate with technical teams, business stakeholders, vendors, project leaders, and security professionals to address security concerns and help ensure that security considerations are incorporated into decision-making processes.
- Research emerging technologies, evolving threats, regulatory requirements, and industry practices to determine their relevance and potential impact on the organization.
- Perform security reviews, architectural evaluations, and other analytical activities to identify weaknesses, opportunities for improvement, and areas requiring additional safeguards or oversight.
- Develop clear, concise, and well-reasoned security guidance, recommendations, assessments, standards, reports, and other written deliverables that enable stakeholders to make informed business and technology decisions.
- Communicate complex technical concepts, risks, tradeoffs, and recommendations effectively to audiences ranging from engineers and project teams to business leaders and executive stakeholders.
- Present findings, facilitate discussions, answer questions, and build consensus among stakeholders by explaining security concerns and recommended approaches in a clear, practical, and persuasive manner.
- Serve as a trusted advisor by helping stakeholders understand cybersecurity risks, evaluate available options, and make balanced decisions that align with organizational objectives and risk tolerance.
- Exercise independent judgment in situations that may involve incomplete information, competing priorities, evolving technologies, or ambiguous requirements.
- Contribute to the development and continuous improvement of security standards, methodologies, assessment approaches, and best practices that strengthen the organization's overall security posture
- Mentor junior and mid-level team members by sharing technical knowledge, analytical approaches, communication skills, and professional expertise.
Qualifications
- Bachelor's degree in Computer Science or a related field required; equivalent experience may be accepted in lieu of a degree.
- 5-7 years of experience as a systems engineer, security engineer, security architect, cybersecurity consultant, or in a related role required.
- Strong understanding of cybersecurity principles, risk management concepts, and industry-standard security frameworks.
This role requires demonstrated ability to rapidly understand new technologies, business processes, and operational environments and evaluate their security implications, and;
- Experience performing security assessments, architecture reviews, risk analyses, technology evaluations, or similar analytical activities.
- Ability to identify complex security issues, evaluate potential solutions, and develop practical, risk-based recommendations.
- Strong knowledge of enterprise technologies, including familiarity with cloud platforms, identity and access management, networking, applications, infrastructure, security operations, and emerging technologies.
- Understanding of security concepts such as Zero Trust, least privilege, defense-in-depth, data protection, secure software development, threat modeling, and vulnerability management.
Skills For Success
- Exceptional communication and presentation skills, including the ability to explain complex technical concepts, influence stakeholders, and facilitate productive discussions.
- Analytical, critical-thinking, and problem-solving skills, with the ability to work effectively in complex and ambiguous environments.
- Ability to mentor junior engineers and lead cross-functional technical initiatives.
Additional Job Details (if applicable)
Working Model Required
- Hybrid role with onsite work required; candidates must be flexible based on weekly or monthly business needs.
- Monday-Friday schedule during Eastern business hours.
- On remote workdays, employees must work from a stable, secure, and compliant workstation in a quiet environment. Teams video is required and must be accessed using Mass General Brigham-provided equipment.
Remote Type
Work Location
Scheduled Weekly Hours
Employee Type
Work Shift
Pay Range
Grade
At Mass General Brigham, we believe in recognizing and rewarding the unique value each team member brings to our organization. Our approach to determining base pay is comprehensive, and any offer extended will take into account your skills, relevant experience if applicable, education, certifications and other essential factors. The base pay information provided offers an estimate based on the minimum job qualifications; however, it does not encompass all elements contributing to your total compensation package. In addition to competitive base pay, we offer comprehensive benefits, career advancement opportunities, differentials, premiums and bonuses as applicable and recognition programs designed to celebrate your contributions and support your professional growth. We invite you to apply, and our Talent Acquisition team will provide an overview of your potential compensation and benefits package.
EEO Statement:
Mass General Brigham Competency Framework
At Mass General Brigham, our competency framework defines what effective leadership “looks like” by specifying which behaviors are most critical for successful performance at each job level. The framework is comprised of ten competencies (half People-Focused, half Performance-Focused) and are defined by observable and measurable skills and behaviors that contribute to workplace effectiveness and career success. These competencies are used to evaluate performance, make hiring decisions, identify development needs, mobilize employees across our system, and establish a strong talent pipeline.
Mass General Brigham relies on a wide range of professionals, including doctors, nurses, business people, tech experts, researchers, and systems analysts to advance our mission. As a not-for-profit, we support patient care, research, teaching, and community service, striving to provide exceptional care. We believe that high-performing teams drive groundbreaking medical discoveries and invite all applicants to join us and experience what it means to be part of Mass General Brigham.
Job Summary
Mass General Brigham is seeking an Information Security Engineer III to serve as a senior leader within the Digital Information Security Architecture team. In this role, you will evaluate a wide variety of technologies, business initiatives, operational processes, and strategic projects to identify security risks and provide practical, risk-based guidance. Working closely with technical teams, business stakeholders, vendors, and security professionals, you will help ensure that security considerations are incorporated into decision making throughout the organization.
Bring your cybersecurity expertise to a role where you can help shape strategy, influence technology decisions, and strengthen security across the enterprise.
We’re looking for a strategic thinker who can quickly assess unfamiliar technologies and business challenges, identify meaningful cybersecurity risks, and translate complex issues into clear, actionable recommendations.
As a senior member of the team, you’ll:
Shape cybersecurity strategy and standards.
Advise leaders on technology and security risk.
Evaluate emerging technologies and enterprise initiatives.
Recommend practical, business-focused security solutions.
Partner with technical and non-technical stakeholders.
Mentor team members and foster collaboration and continuous learning.
What You'll Do
- Analyze technologies, business initiatives, operational processes, and proposed solutions to identify security risks and provide practical, risk-based guidance that supports informed decision making.
- Quickly assess unfamiliar technologies, platforms, and business challenges, develop an understanding of their security implications, and translate that understanding into actionable recommendations.
- Apply cybersecurity principles, industry frameworks, organizational standards, and professional analyses to evaluate complex situations and recommend appropriate security controls, safeguards, or courses of action.
- Collaborate with technical teams, business stakeholders, vendors, project leaders, and security professionals to address security concerns and help ensure that security considerations are incorporated into decision-making processes.
- Research emerging technologies, evolving threats, regulatory requirements, and industry practices to determine their relevance and potential impact on the organization.
- Perform security reviews, architectural evaluations, and other analytical activities to identify weaknesses, opportunities for improvement, and areas requiring additional safeguards or oversight.
- Develop clear, concise, and well-reasoned security guidance, recommendations, assessments, standards, reports, and other written deliverables that enable stakeholders to make informed business and technology decisions.
- Communicate complex technical concepts, risks, tradeoffs, and recommendations effectively to audiences ranging from engineers and project teams to business leaders and executive stakeholders.
- Present findings, facilitate discussions, answer questions, and build consensus among stakeholders by explaining security concerns and recommended approaches in a clear, practical, and persuasive manner.
- Serve as a trusted advisor by helping stakeholders understand cybersecurity risks, evaluate available options, and make balanced decisions that align with organizational objectives and risk tolerance.
- Exercise independent judgment in situations that may involve incomplete information, competing priorities, evolving technologies, or ambiguous requirements.
- Contribute to the development and continuous improvement of security standards, methodologies, assessment approaches, and best practices that strengthen the organization's overall security posture
- Mentor junior and mid-level team members by sharing technical knowledge, analytical approaches, communication skills, and professional expertise.
Qualifications
- Bachelor's degree in Computer Science or a related field required; equivalent experience may be accepted in lieu of a degree.
- 5-7 years of experience as a systems engineer, security engineer, security architect, cybersecurity consultant, or in a related role required.
- Strong understanding of cybersecurity principles, risk management concepts, and industry-standard security frameworks.
This role requires demonstrated ability to rapidly understand new technologies, business processes, and operational environments and evaluate their security implications, and;
- Experience performing security assessments, architecture reviews, risk analyses, technology evaluations, or similar analytical activities.
- Ability to identify complex security issues, evaluate potential solutions, and develop practical, risk-based recommendations.
- Strong knowledge of enterprise technologies, including familiarity with cloud platforms, identity and access management, networking, applications, infrastructure, security operations, and emerging technologies.
- Understanding of security concepts such as Zero Trust, least privilege, defense-in-depth, data protection, secure software development, threat modeling, and vulnerability management.
Skills For Success
- Exceptional communication and presentation skills, including the ability to explain complex technical concepts, influence stakeholders, and facilitate productive discussions.
- Analytical, critical-thinking, and problem-solving skills, with the ability to work effectively in complex and ambiguous environments.
- Ability to mentor junior engineers and lead cross-functional technical initiatives.
Additional Job Details (if applicable)
Working Model Required
- Hybrid role with onsite work required; candidates must be flexible based on weekly or monthly business needs.
- Monday-Friday schedule during Eastern business hours.
- On remote workdays, employees must work from a stable, secure, and compliant workstation in a quiet environment. Teams video is required and must be accessed using Mass General Brigham-provided equipment.
Remote Type
Work Location
Scheduled Weekly Hours
Employee Type
Work Shift
Pay Range
Grade
At Mass General Brigham, we believe in recognizing and rewarding the unique value each team member brings to our organization. Our approach to determining base pay is comprehensive, and any offer extended will take into account your skills, relevant experience if applicable, education, certifications and other essential factors. The base pay information provided offers an estimate based on the minimum job qualifications; however, it does not encompass all elements contributing to your total compensation package. In addition to competitive base pay, we offer comprehensive benefits, career advancement opportunities, differentials, premiums and bonuses as applicable and recognition programs designed to celebrate your contributions and support your professional growth. We invite you to apply, and our Talent Acquisition team will provide an overview of your potential compensation and benefits package.
EEO Statement:
Mass General Brigham Competency Framework
At Mass General Brigham, our competency framework defines what effective leadership “looks like” by specifying which behaviors are most critical for successful performance at each job level. The framework is comprised of ten competencies (half People-Focused, half Performance-Focused) and are defined by observable and measurable skills and behaviors that contribute to workplace effectiveness and career success. These competencies are used to evaluate performance, make hiring decisions, identify development needs, mobilize employees across our system, and establish a strong talent pipeline.
See All 60 Information Security Engineer Jobs in Massachusetts
Find roles in Massachusetts that match your experience and apply in just a few clicks.
Find JobsInformation Security Engineer Jobs by City in Massachusetts
Where Massachusetts roles are concentrated, by current openings.
Information Security Engineer Job Market in Massachusetts
A snapshot from current Massachusetts openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Technology & Software
What Massachusetts Employers Look For
The qualifications that appear most often in information security engineer jobs across Massachusetts.
- Bachelor's degree in computer science, cybersecurity, or a closely related technical field
- Active CISSP, CISM, CompTIA Security+, or equivalent professional security certification
- Hands-on experience with SIEM platforms, vulnerability management tools, and endpoint protection
- Working knowledge of NIST Cybersecurity Framework, CIS Controls, or ISO 27001 standards
- Experience conducting risk assessments, penetration testing, or incident response investigations
- Familiarity with cloud security architecture in AWS, Azure, or Google Cloud environments
Information Security Engineer Jobs in Massachusetts: Frequently Asked Questions
How do you become a information security engineer in Massachusetts?
Massachusetts does not issue a state-specific license for information security engineers, so the path runs through education and industry credentials. Most employers require at least a bachelor's degree in computer science, information systems, or cybersecurity. From there, earning a recognized certification such as CompTIA Security+, CISSP, or CEH is the standard next step. Many candidates enter through IT support or network administration roles at Massachusetts-based financial institutions, hospitals, or defense contractors before moving into dedicated security positions.
How much do information security engineers make in Massachusetts?
Information security engineers in Massachusetts earn a median of about $136,550 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $85,790 for the lowest 10% to over $226,190 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire information security engineers in Massachusetts?
Employers hiring information security engineers in Massachusetts right now include Global Resource Solutions, Abacus Technology, and American Operations Corporation, based on current listings on Migrate Mate as of November 2026. Massachusetts's concentration of defense contractors, large health systems, and financial services firms means security roles here tend to require experience with compliance-heavy environments such as HIPAA, FISMA, and SOX.
Which Massachusetts cities have the most information security engineer jobs?
Bedford, Hanscom AFB, and Boston account for the most information security engineer openings in Massachusetts. Boston and Cambridge anchor the market through their density of financial institutions, academic medical centers, and technology companies, while suburban Route 128 corridor cities draw openings from the defense and aerospace contractors headquartered there, making the distribution reflect employer industry rather than simple population size.
Are there remote information security engineer jobs in Massachusetts?
Yes, and more than most fields. About 67% of information security engineer openings tied to Massachusetts are remote or hybrid as of November 2026, reflecting how much of the work involves monitoring dashboards, writing policy, and analyzing logs rather than on-site hardware. Roles focused on governance, risk, and compliance or cloud security tend to be the most remote-friendly, while positions requiring hands-on lab access or classified environment work remain largely on-site.
How can I get hired as a information security engineer in Massachusetts with little or no experience?
The most realistic entry path is landing a junior SOC analyst or IT support role at a Massachusetts employer and moving into security from there. Large health systems such as Mass General Brigham and financial firms like Fidelity run structured associate and rotational programs that recruit recent graduates. Earning CompTIA Security+ before applying gives candidates a concrete credential, and Boston-area community colleges and university continuing education programs offer cybersecurity certificates that Massachusetts employers recognize. Internships through Boston-area universities with strong computer science programs also open direct pipelines into full-time roles.
Where can I find and apply to information security engineer jobs in Massachusetts?
You can find and apply to information security engineer jobs in Massachusetts on Migrate Mate, which lists current openings tied to the state. Search the listings, find roles that match your background and target location, and apply directly to the employers posting them.
See All 60 Information Security Engineer Jobs in Massachusetts
Find roles in Massachusetts that match your experience and apply in just a few clicks.
Find Jobs