Information Security Engineer

Job Title:

Senior Information Security Engineer

Location:

Hybrid – Andover, MA | Full-Time Pay: $150,000 - $180,000

About ALKUALKU is a specialized staffing firm headquartered in Andover, MA. As we scale, we’re seeking a Senior Information Security Engineer to lead our cybersecurity function, a hands-on, strategic role that sits at the intersection of technical depth and business alignment. This is a high impact role for someone who can both set direction and execute.

Position Details Experience Level: 10+ years of progressive information security experience, with 2–3+ years in a senior or lead role

Location:

Hybrid – Andover, MARole Summary You will own ALKU’s day-to-day cybersecurity operations and long-term security strategy, serving as the primary internal liaison to our Managed Security Service Provider (MSSP) and our Managed Service Provider (MSP). You bring deep security engineering experience, a strong networking foundation, recent hands-on experience driving cybersecurity strategy and operations within a Microsoft-centric environment (Microsoft 365, Entra , Defender), and the ability to communicate risk clearly to leadership.

Key Responsibilities
• Security Strategy & Governance
• Drive and maintain ALKU’s cybersecurity roadmap and controls, aligning initiatives with business risk and priorities
• Establish and communicate security policies, standards, and procedures across the organization
• Report on security posture and program maturity to senior leadership
• Help drive risk assessments, remediation planning, and evaluate security investments and vendors
• Serve as ALKU’s primary point of contact with MSSP and MSP managing alert tuning, detection coverage, response playbooks, and regular business reviews
• Ensure SLAs and security commitments from both partners are met AWS & Cloud Infrastructure Security
• Partner with the Engineering team on the security of ALKU's AWS environment, providing hands-on security expertise and guidance
• Build and maintain a security roadmap for ALKU's custom-built applications, in partnership with Engineering leadership
• Implement and maintain AWS security best practices across the environment
• Assess and advise on cloud security posture across AWS, Azure, SaaS platforms, and custom applications at ALKU
• Track and prioritize remediation of application-layer findings alongside infrastructure risk Incident Monitoring, Triage & Response
• Oversee detection, triage, escalation, and response to security incidents
• Partner with MSP to maintain ALKU’s incident response plan, tabletop exercise program, and post- incident review process
• Provide on-call escalation support during high-severity incidents; occasional after-hours availability required
• Analyze security data, alerts, and logs to identify risks and trends; maintain up-to-date awareness of the evolving threat landscape
• Work with MSP and MSSP to tune Automatic Response Plays, SIEM and EDR tooling to reduce noise and improve detection

Network, Endpoint & Infrastructure Security
• General understanding of networking expertise to assess and improve ALKU’s security architecture (firewalls, VPN, network segmentation, DNS security, and Zero Trust initiatives)
• Review and advise on network changes, cloud connectivity, remote access design, and firewall rule sets in partnership with the MSP
• Work with MSP to oversee Microsoft 365 and Entra  (Azure AD) security configuration, Conditional Access, and MFA enforcement
• Assess and advise on cloud security posture across Azure, SaaS platforms, and custom applications at ALKUCompliance, Awareness & Reporting
• Lead the security awareness training program including phishing simulations and role-based education
• Maintain accurate security incident records, documentation,…