Security Automation Engineer II, BU Info Security
- Boston, MA, United States
Category Charles River Campus --> Professional Job Location Boston, MA, United States Tracking Code 26500124401102 Posted Date 11/9/2026 Salary Grade Grade 50 Expected Hiring Range Minimum $100,000.00 Expected Hiring Range Maximum $130,000.00
Applications open in a new tab.
Job details
- Pay
- Category Charles River Campus --> Professional Job Location Boston, MA, United States Tracking Code 26500124401102 Posted Date 11/9/2026 Salary Grade Grade 50 Expected Hiring Range Minimum $100,000.00 Expected Hiring Range Maximum $130,000.00
- Apply by
- Experience
- 3+ years of related experience in security engineering, security architecture, or adjacent infrastructure and software engineering roles.
- Posting language
- English
- Posted
Original job description
Security Automation Engineer II, BU Info Security
Job Description
Security Automation Engineer II, BU Info Security
Category Charles River Campus --> Professional Job Location Boston, MA, United States Tracking Code 26500124401102 Posted Date 11/9/2026 Salary Grade Grade 50 Expected Hiring Range Minimum $100,000.00 Expected Hiring Range Maximum $130,000.00
The salary of the finalist selected for this role will be set based on a variety of factors, including but not limited to departmental budgets, qualifications, experience, education, licenses, specialty, training and internal pay comparison. The above hiring range represents the University's good faith and reasonable estimate of the range of possible compensation at the time of posting.
Position Type Full-Time/Regular
Help secure a major research university's IT systems, and automate as much of that work as you can. You'll work with technologists and business units across Boston University to define, implement, and evaluate security risks and controls, and to make sure what we build matches our enterprise architecture standards and Information Security policy. You'll deploy and maintain security services, both commercial and home-grown, and help refine the policies and standards that govern them. What makes this role different is how we expect the work to be done. Security delivered as code, with version control, automated tests, and pipelines - and automated security checks living inside the pipelines our IS&T colleagues already use. We also want real fluency with current AI tooling: working in AI-assisted development environments day to day, using AI to help generate and validate tests and review code, building AI-assisted security tooling and MCP integrations, and being the engineer who can look hard at the AI systems other units want to deploy and say something useful about them. Raising everyone else's capability is a permanent part of this job, not a side project. You'll pair with colleagues, build patterns they reuse, run working sessions, and be the person others come to with a question about doing this safely - and you'll keep doing it, because the tooling keeps moving. Collaborative team, real problems, and strong benefits including tuition remission.
Required Skills
- Bachelor's degree in a related field or equivalent experience; master's degree preferred.
- 3+ years of related experience in security engineering, security architecture, or adjacent infrastructure and software engineering roles.
- Proficiency in at least one general-purpose programming language: Python, Go, Java, C#, or PowerShell.
- Git-based version control, and experience building CI/CD pipelines that include automated testing.
- Practical experience writing automated tests, including unit, integration, and regression tests.
- Working knowledge of cloud and on-premises security controls, identity protocols, and network and system administration.
- Demonstrated fluency with current AI tooling, including routine use of AI-assisted development environments and practical experience integrating large language models or AI services into working tools using tool and function calling, retrieval-augmented generation, or agentic patterns.
- Judgment about where AI output requires verification, and an understanding of how AI-generated code and tests fail.
- Working understanding of AI-specific security risk, including prompt injection, data leakage through model context, and authorization for agentic systems.
- A track record of teaching or enabling colleagues: pairing, internal training, documentation others actually use, or reusable patterns adopted by a team.
- Detail-oriented, with strong written and verbal communication skills.