Senior Security Engineer
HealthDrive · Framingham, MA
$85,000–$115,000from the description
Jul 5, 2026
Framingham, MA
Jul 21, 2026
What this job asks for AI summary
A hands-on security engineering role at a healthcare services company, focused on building and operating security controls across on-premises infrastructure and Microsoft Azure. Day-to-day work spans firewall and endpoint configuration, cloud security, vulnerability management, incident response, and end-to-end third-party vendor risk management. Suits an experienced infrastructure-oriented security engineer comfortable owning both technical implementation and the HIPAA compliance obligations that come with handling sensitive patient data.
Senior level · 10+ years · Boston-Cambridge-Newton, MA-NH · Bachelor's required · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 50 people in the Boston-Cambridge-Newton, MA-NH area plausibly meet what this posting asks for (information security analysts). range 15–85
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $139,553 (middle half $110,917–$180,330). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (9)
The role is hybrid (not fully remote), based at HealthDrive's Framingham, MA office; Framingham falls within the Boston-Cambridge-Newton, MA-NH CBSA.
The JD lists a Bachelor's degree in Cybersecurity, Computer Science, or a related field under 'Education & Qualifications' without an 'or equivalent experience' escape clause, so it is treated as a hard requirement.
Fortinet is listed as 'preferred' within the responsibilities narrative, but Palo Alto is explicitly called out as a transferable alternative — both are captured as a single skill with Palo Alto in alternatives. The broader requirement for enterprise-grade firewall experience is a hard gate per the Must Have section.
PowerShell, Python, and Bash are listed under 'Nice to have' as interchangeable scripting options; emitted as one skill (PowerShell) with Python and Bash as alternatives.
Microsoft Sentinel and SecureWorks appear together under 'Nice to have' as SIEM/XDR platform examples; emitted as one skill with the other as an alternative.
Qualys and SecureWorks appear in the responsibilities narrative as example vulnerability management tools (not in a requirements section), so they are marked preferred.
HIPAA knowledge appears only under 'Nice to have' (healthcare compliance standards), so it is marked preferred despite being central to the role's compliance obligations.
The SOC classification is Medium confidence: the role is primarily security-focused (15-1212) but has a substantial infrastructure build-and-operate component that could also fit 15-1244; 15-1212 wins because security engineering and incident response are the primary day-to-day duties.
Certifications (CISSP, AZ-500, CompTIA Security+, CISM, CCSP, HCISPP) are listed as preferred, not hard gates, so they are not emitted as skills.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.