<div class="content-intro"> </div>Job Title: Senior Information Security Engineer Location: Hybrid – Andover, MA | Full-Time Pay: $150,000 - $180,000 About ALKU ALKU is a specialized staffing firm headquartered in Andover, MA. As we scale, we’re seeking a Senior Information Security Engineer to lead our cybersecurity function, a hands-on, strategic role that sits at the intersection of technical depth and business alignment. This is a high impact role for someone who can both set direction and execute. Position Details Experience Level: 10+ years of progressive information security experience, with 2–3+ years in a senior or lead role Location: Hybrid – Andover, MA Role Summary You will own ALKU’s day-to-day cybersecurity operations and long-term security strategy, serving as the primary internal liaison to our Managed Security Service Provider (MSSP) and our Managed Service Provider (MSP). You bring deep security engineering experience, a strong networking foundation, recent hands-on experience driving cybersecurity strategy and operations within a Microsoft-centric environment (Microsoft 365, Entra ID, Defender), and the ability to communicate risk clearly to leadership. Key Responsibilities • Security Strategy & Governance • Drive and maintain ALKU’s cybersecurity roadmap and controls, aligning initiatives with business risk and priorities • Establish and communicate security policies, standards, and procedures across the organization • Report on security posture and program maturity to senior leadership • Help drive risk assessments, remediation planning, and evaluate security investments and vendors • Serve as ALKU’s primary point of contact with MSSP and MSP managing alert tuning, detection coverage, response playbooks, and regular business reviews • Ensure SLAs and security commitments from both partners are met AWS & Cloud Infrastructure Security • Partner with the Engineering team on the security of ALKU's AWS environment, providing hands-on security expertise and guidance • Build and maintain a security roadmap for ALKU's custom-built applications, in partnership with Engineering leadership • Implement and maintain AWS security best practices across the environment • Assess and advise on cloud security posture across AWS, Azure, SaaS platforms, and custom applications at ALKU • Track and prioritize remediation of application-layer findings alongside infrastructure risk Incident Monitoring, Triage & Response • Oversee detection, triage, escalation, and response to security incidents • Partner with MSP to maintain ALKU’s incident response plan, tabletop exercise program, and post- incident review process • Provide on-call escalation support during high-severity incidents; occasional after-hours availability required • Analyze security data, alerts, and logs to identify risks and trends; maintain up-to-date awareness of the evolving threat landscape • Work with MSP and MSSP to tune Automatic Response Plays, SIEM and EDR tooling to reduce noise and improve detection Network, Endpoint & Infrastructure Security • General understanding of networking expertise to assess and improve ALKU’s security architecture (firewalls, VPN, network segmentation, DNS security, and Zero Trus

Information Security Engineer

Job Description