ZipRecruiter

Log In

1

In Penetration Testing Jobs in Massachusetts (NOW HIRING)

Harvard University

Senior Security Engineer

Boston, MA · On-site

$59/hr

Serve as an information security subject matter expert in penetration testing and application security. * Research, evaluate, and recommend new security tools, technologies, and processes that ...

Harvard University

Senior Security Engineer

Boston, MA

$124K - $170K/yr

Serve as an information security subject matter expert in penetration testing and application security. * Research, evaluate, and recommend new security tools, technologies, and processes that ...

State Street Corporation

Red Team Engineer

Quincy, MA · On-site

$125K - $215K/yr

Strong proficiency in offensive security techniques, including infrastructure, application, and cloud-focused penetration testing. * Deep understanding of adversary behaviors and attack frameworks (e ...

State Street Global Advisors

Red Team Engineer

Quincy, MA · On-site

$125K - $215K/yr

Strong proficiency in offensive security techniques, including infrastructure, application, and cloudfocused penetration testing. * Deep understanding of adversary behaviors and attack frameworks (e ...

Humana

Lead, Offensive Security

Boston, MA · Remote

As Lead, Offensive Security (AI & Tooling), you will own the in-house AI agent platform that powers our penetration testing and red team operations, and build the AI-driven tooling that makes every ...

Humana

Lead, Offensive Security

Boston, MA · Remote

As Lead, Offensive Security (AI & Tooling), you will own the in-house AI agent platform that powers our penetration testing and red team operations, and build the AI-driven tooling that makes every ...

Humana

Lead, Offensive Security

Boston, MA · Remote

As Lead, Offensive Security (AI & Tooling), you will own the in-house AI agent platform that powers our penetration testing and red team operations, and build the AI-driven tooling that makes every ...

Northeastern University

PATCH Research Fellow

Boston, MA · On-site

$53K - $75K/yr

Success in this role will help revolutionize the healthcare penetration testing marketplace by shifting the focus from compliance-based checklists to understanding how gracefully a hospital system ...

NorthEastern

PATCH Research Fellow

Boston, MA · On-site

$53K - $75K/yr

Success in this role will help revolutionize the healthcare penetration testing marketplace by shifting the focus from compliance-based checklists to understanding how gracefully a hospital system ...

next page

Showing results 1-20

All JobsIn Penetration Testing JobsIn Penetration Testing Jobs in Massachusetts

In Penetration Testing information

What is the difference between In Penetration Testing vs Vulnerability Assessment?

AspectIn Penetration TestingVulnerability Assessment
PurposeSimulates cyberattacks to identify exploitable vulnerabilitiesIdentifies and reports security weaknesses without exploiting them
DepthIn-depth, targeted testing with active exploitationBroad, automated or manual scanning for vulnerabilities
CertificationsOSCP, CEH, GPENOSCP, CEH, CISSP (common but less focused)
Work EnvironmentEngages in simulated attacks, often in controlled environmentsUses scanning tools, reports vulnerabilities

While both roles focus on identifying security issues, In Penetration Testing involves actively exploiting vulnerabilities to assess security defenses, whereas Vulnerability Assessment primarily identifies weaknesses without exploitation. Penetration testers provide deeper insights into potential attack vectors, making their work more targeted and detailed.

Is penetration testing a good career?

Penetration testing is a valuable cybersecurity role focused on identifying vulnerabilities in systems and networks. It requires technical skills, knowledge of security tools, and often certifications like OSCP or CEH. The field offers strong job growth, competitive salaries, and opportunities for continuous learning.

What are popular job titles related to In Penetration Testing jobs in Massachusetts?

For In Penetration Testing jobs in Massachusetts, the most frequently searched job titles are:

What job categories do people searching In Penetration Testing jobs in Massachusetts look for?

The top searched job categories for In Penetration Testing jobs in Massachusetts are:

What cities in Massachusetts are hiring for In Penetration Testing jobs?

Cities in Massachusetts with the most In Penetration Testing job openings:

In Penetration Testing jobs near you

Senior Security Engineer

Boston, MA • On-site

Harvard University
Colleges, Universities, and Professional Schools • 51 - 200 employees

8.5

Company rating: 8.5 out of 10

Based on 12 frontline employees who took The Breakroom Quiz

82nd of 627 rated colleges and universities

Good employer

Respectful managers

Good training

Learn more about Harvard Universityexternal

$59/hr

Full-time

Medical, Dental, Vision, Retirement, PTO

Re-posted 2 days ago

Job description

Company Description
By working at Harvard University, you join a vibrant community that advances Harvard's world-changing mission in meaningful ways, inspires innovation and collaboration, and builds skills and expertise. We are dedicated to creating a diverse and welcoming environment where everyone can thrive.
Why join Harvard Medical School?
Harvard Medical School's mission is to nurture a diverse, inclusive community dedicated to alleviating suffering and improving health and well-being for all through excellence in teaching and learning, discovery and scholarship, and service and leadership.
You'll be at the heart of biomedical discovery, education, and innovation, working alongside world-renowned faculty and a community dedicated to improving human health. This is more than a job - it's an opportunity to shape the future of medicine.
Job Description
The Senior Security Engineer will have responsibility for supporting and advancing Harvard Medical School's application security, Secure SDLC, and penetration testing programs. This role will partner closely with others across HMS IT and Security to enable the HMS mission by implementing Secure SDLC practices, operating application security testing platforms, identifying security weaknesses through penetration testing, and collaborating with development teams to improve security throughout the software lifecycle. On a daily basis, this role will perform penetration testing of applications, systems, and emerging technologies; support the administration of application security platforms; conduct threat research; identify security risks and remediation opportunities; and help mature the organization's application security capabilities. This role will partner with SecOps when required during security incidents and investigations. The Senior Security Engineer, as part of the IT Security team, will partner with others across Security and IT to establish strategic and tactical roadmaps and help mature application and offensive security capabilities.
Principal duties and responsibilities:
  • Perform penetration testing of applications, systems, infrastructure, cloud environments, and emerging technologies.
  • Identify security weaknesses and provide remediation recommendations through technical testing.
  • Support Secure SDLC initiatives and collaborate with development teams to improve application security.
  • Administer and support application security platforms and testing tools.
  • Assist with implementation and operation of SAST, SCA, DAST, API Security, Secrets Detection, and related application security capabilities.
  • Conduct threat research and stay current on emerging attack techniques, vulnerabilities, adversary activity, and security trends.
  • Inform the organization of emerging threats, attack techniques, vulnerabilities, and risks.
  • Serve as an information security subject matter expert in penetration testing and application security.
  • Research, evaluate, and recommend new security tools, technologies, and processes that improve HMS security capabilities.
  • Abide by and follow Harvard University IT technical standards, policies, and Code of Conduct.

Qualifications
Basic Qualifications:
  • Minimum of seven years' post-secondary education or relevant work experience.

Additional Qualifications and Skills:
  • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; or equivalent combination of education and relevant experience.
  • Experience using common security testing and analysis tools.
  • Ability to communicate technical security findings and remediation recommendations to both technical and non-technical audiences.
  • Hands-on experience performing penetration testing of web applications, systems, networks, cloud environments, or APIs.
  • Familiarity with common offensive security tools, techniques, and methodologies.
  • Experience identifying, validating, and helping remediate common web application vulnerabilities (OWASP Top 10).
  • Experience with Secure SDLC concepts and application security testing tools such as Checkmarx, Burp Suite, Veracode, GitHub Advanced Security, or similar platforms.
  • Experience administering or supporting application security platforms preferred.
  • Familiarity with software development practices and modern application architectures.
  • Experience conducting threat research and analyzing emerging threats, vulnerabilities, attack techniques, and adversary activity.
  • Experience creating technical reports and communicating security findings and remediation recommendations.
  • Participation in cyber competitions (CTFs), cyber ranges, security research projects, bug bounty programs, red team exercises, or similar activities is highly desirable.
  • Demonstrated analytical, problem-solving, and technical investigation skills.
  • Demonstrated team performance skills, service-oriented mindset, and ability to collaborate effectively with technical and non-technical stakeholders.
  • Strong desire to continuously learn and develop expertise in offensive security, application security, and emerging technologies.

Certificates and Licenses:
  • Completion of Harvard IT Academy Information Security Foundations course (or external equivalent) preferred.
  • IT Security Certification preferred; e.g., OSCP, CSSLP, GIAC GWAPT, CISSP, PenTest+

Additional Information
  • Standard Hours/Schedule: 35 hours per week
  • Visa Sponsorship Information: Harvard University is unable to provide visa sponsorship for this position.
  • Pre-Employment Screening: Identity, Criminal
  • Staying Informed About Your Application: Due to the high volume of applications, we may not always be able to reach out right away, but you can track your status anytime through the Careers@Harvard portal.

#LI-DK1
Work Format Details
This position has been determined by school or unit leaders that some of the duties and responsibilities can be effectively performed at a non-Harvard location. The work schedule and location will be set by the department at its discretion and based upon operational needs. When not working at a Harvard or Harvard-designated location, employees in hybrid positions must work in a Harvard registered state in compliance with the University's Policy on Employment Outside of Massachusetts. Additional details will be discussed during the interview process. Certain visa types and funding sources may limit work location. Individuals must meet work location sponsorship requirements prior to employment.
Salary Grade and Ranges
This position is salary grade level 059. Please visit Harvard's Salary Ranges to view the corresponding salary range and related information.
Benefits
Harvard offers a comprehensive benefits package that is designed to support a healthy work-life balance and your physical, mental and financial wellbeing. Because here, you are what matters. Our benefits include, but are not limited to:
  • Generous paid time off including parental leave
  • Medical, dental, and vision health insurance coverage starting on day one
  • Retirement plans with university contributions
  • Wellbeing and mental health resources
  • Support for families and caregivers
  • Professional development opportunities including tuition assistance and reimbursement
  • Commuter benefits, discounts and campus perks

Learn more about these and additional benefits on our Benefits & Wellbeing Page.
EEO/Non-Discrimination Commitment Statement
Harvard University is committed to equal opportunity and non-discrimination. We seek talent from all parts of society and the world, and we strive to ensure everyone at Harvard thrives. Our differences help our community advance Harvard's academic purposes.
Harvard has an equal employment opportunity policy that outlines our commitment to prohibiting discrimination on the basis of race, ethnicity, color, national origin, sex, sexual orientation, gender identity, veteran status, religion, disability, or any other characteristic protected by law or identified in the university's non-discrimination policy. Harvard's equal employment opportunity policy and non-discrimination policy help all community members participate fully in work and campus life free from harassment and discrimination.

What Harvard University employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply