Edtech.com's Summary

Boston University is hiring a Security Automation Engineer II, BU Info Security. The role helps protect the university’s IT systems by defining, implementing, and evaluating security risks and controls with technologists and business units across campus, and by deploying and maintaining commercial and home-grown security services. The engineer delivers security as code, with version control, automated tests, and checks built into the pipelines the university’s IT teams already use, and brings fluency in AI tooling to both the work and the review of AI systems other units want to deploy.

Highlights

Define, implement, and evaluate security risks and controls with technologists and business units, making sure new systems match enterprise architecture standards and Information Security policy.
Deploy and maintain commercial and home-grown security services and help refine the policies and standards that govern them.
Deliver security as code, using version control, automated tests, and CI/CD pipelines that include automated security checks.
Use AI-assisted development environments daily to generate and validate tests and review code, build AI-assisted security tooling and MCP integrations, and assess AI systems other units plan to deploy.
Pair with colleagues, build reusable patterns, and run working sessions so others can handle security questions safely.
Bachelor’s degree or equivalent experience (master’s preferred) and 3+ years in security engineering, security architecture, or adjacent infrastructure and software engineering roles.
Proficiency in a general-purpose language such as Python, Go, Java, C#, or PowerShell, plus Git, CI/CD pipelines, and automated unit, integration, and regression testing.
Working knowledge of cloud and on-premises security controls, identity protocols, and network and system administration, along with AI-specific risks such as prompt injection and data leakage through model context.
Bonus experience with MCP server or client development, the OWASP Top 10 for LLM Applications, infrastructure as code, Docker, Kubernetes, and DevSecOps scanning tools.
Hiring range of $100,000 to $130,000, with tuition assistance among the benefits, in a remote-local role for candidates living within commuting distance of Boston University.

Security Automation Engineer II, BU Info Security Full Description

This is a remote-local position. Candidates should reside within commuting distance of Boston University and be available to come to campus as needed.

A cover letter is required for consideration.

Help secure a major research university's IT systems, and automate as much of that work as you can.

You'll work with technologists and business units across Boston University to define, implement, and evaluate security risks and controls, and to make sure what we build matches our enterprise architecture standards and Information Security policy.

You'll deploy and maintain security services, both commercial and home-grown, and help refine the policies and standards that govern them.

What makes this role different is how we expect the work to be done.

Security delivered as code, with version control, automated tests, and pipelines — and automated security checks living inside the pipelines our IS&T colleagues already use.

We also want real fluency with current AI tooling: working in AI-assisted development environments day to day, using AI to help generate and validate tests and review code, building AI-assisted security tooling and MCP integrations, and being the engineer who can look hard at the AI systems other units want to deploy and say something useful about them.

Raising everyone else's capability is a permanent part of this job, not a side project.

You'll pair with colleagues, build patterns they reuse, run working sessions, and be the person others come to with a question about doing this safely — and you'll keep doing it, because the tooling keeps moving.

Collaborative team, real problems, and strong benefits including tuition remission.

Position Details

Position Type: Full-Time/Regular. Salary Grade: Grade 50. Expected hiring range: $100,000.00 – $130,000.00. The salary of the finalist selected for this role will be set based on a variety of factors, including but not limited to departmental budgets, qualifications, experience, education, licenses, specialty, training and internal pay comparison. The above hiring range represents the University's good faith and reasonable estimate of the range of possible compensation at the time of posting.

Required Skills

Bachelor's degree in a related field or equivalent experience; master's degree preferred.
3+ years of related experience in security engineering, security architecture, or adjacent infrastructure and software engineering roles.
Proficiency in at least one general-purpose programming language: Python, Go, Java, C#, or PowerShell.
Git-based version control, and experience building CI/CD pipelines that include automated testing.
Practical experience writing automated tests, including unit, integration, and regression tests.
Working knowledge of cloud and on-premises security controls, identity protocols, and network and system administration.
Demonstrated fluency with current AI tooling, including routine use of AI-assisted development environments and practical experience integrating large language models or AI services into working tools using tool and function calling, retrieval-augmented generation, or agentic patterns.
Judgment about where AI output requires verification, and an understanding of how AI-generated code and tests fail.
Working understanding of AI-specific security risk, including prompt injection, data leakage through model context, and authorization for agentic systems.
A track record of teaching or enabling colleagues: pairing, internal training, documentation others actually use, or reusable patterns adopted by a team.
Detail-oriented, with strong written and verbal communication skills.

Bonus Qualifications

If you do not meet these, you are still encouraged to apply; we value employees with a willingness to learn.

Model Context Protocol (MCP) server or client development.
Familiarity with the OWASP Top 10 for LLM Applications and the NIST AI Risk Management Framework.
Infrastructure as code (Terraform, Ansible) and containerization (Docker, Kubernetes)
DevSecOps tooling for dependency, container, secrets, and infrastructure-as-code scanning.
Higher education experience.

Benefits

Boston University offers an excellent benefits package including:

Time Off: In addition to PTO and leave policy, BU employees have a paid intersession break and 13 paid holidays.
Retirement: University-funded retirement plan with full vesting after 2 years of eligible service.
Tuition Assistance Program: Competitive tuition assistance program for yourself and family members.

This position is located at 930 Commonwealth Ave, Dental Health Center/OHC, Boston, MA, United States.

We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, natural or protective hairstyle, religion, sex, age, national origin, physical or mental disability, sexual orientation, gender identity, genetic information, military service, pregnancy or pregnancy-related condition, or because of marital, parental, or veteran status. We are a VEVRAA Federal Contractor.

Let me find your next job.

Thanks - you're signed up.

Security Automation Engineer II, BU Info Security

Edtech.com's Summary

Security Automation Engineer II, BU Info Security Full Description

Cybersecurity Analyst II

Information Security Engineer III - 531108

Senior Information Security Analyst (Re-Announcement)

Senior Incident Response Analyst

Senior Manager, Corporate Security