Senior Product Security Engineer at Nexthink
Boston, MA
—
Jul 23, 2026
Boston, MA
Jul 26, 2026
What this job asks for AI summary
A senior cloud security engineering role focused on owning and hardening an AWS-based SaaS platform, with particular emphasis on FedRAMP compliance. Day-to-day work spans designing and automating security controls, managing Kubernetes and infrastructure-as-code environments, leading incident response, and collaborating with engineering teams on secure architecture. Suited to someone with 7+ years of hands-on AWS security experience in regulated environments.
Senior level · 7+ years · Boston, MA · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 7 people in the Boston, MA area plausibly meet what this posting asks for (information security analysts). range 4–10
Applicant volume Light — Few people clear these requirements, so an application that does clear them gets looked at. Worth applying to even if you miss a nice-to-have.
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $139,553 (middle half $110,917–$180,330).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (9)
This role sits at the boundary between security analysis (15-1212) and software/infrastructure engineering (15-1252). The JD emphasizes designing and building cloud infrastructure, automation, and DevSecOps practices as heavily as security monitoring and incident response — hence the medium confidence and runner-up SOC.
The 7+ years requirement is explicitly tied to AWS cloud infrastructure experience; it also functions as the overall role-level experience gate.
Terraform/OpenTofu are listed as a single interchangeable pair in the JD ('Terraform/OpenTofu'); they are captured as one skill with OpenTofu as an alternative.
Ansible, Crossplane, Jenkins, and GitHub Actions appear in the same required 'infrastructure as code and automation tooling' sentence and are treated as individually required tools (not interchangeable with each other), consistent with the JD's 'such as' enumeration within a hard-requirements section.
CNAPP is mentioned in the responsibilities narrative ('tools such as CNAPP') rather than the qualifications section, so it is marked preferred.
Python/Golang are listed under 'What will make you stand out' (the preferred/standout section), as is Azure — all marked preferred accordingly.
JavaScript/TypeScript is explicitly called 'a plus' in the standout section.
No compensation figures are disclosed in the posting; the JD states ranges are shared during the hiring process.
The role is described as hybrid (not fully remote), based at Nexthink's US presence; Boston, MA is used as the primary US metro given the dual HQ framing.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.