Information Security Engineer II Cloud Incident Response
Brigham and Women's Hospital
Somerville, MA, USA
USD 75,275.2-109,553.6 / year
Posted on Feb 5, 2026
Site: Mass General Brigham Incorporated
The Information Security Engineer II – Cloud Incident Responder tackles moderately complex security engineering challenges within their domain. They maintain and enhance existing security controls while actively participating in the design and development of new solutions. They proactively identify and address vulnerabilities or deficiencies within their domain, develop and implement robust controls to mitigate these risks, create detailed documentation, and implement mechanisms to ensure the effectiveness of solutions.
The Engineer II – Cloud Incident Responder will focus on building and operationalizing cloud-specific incident response processes, playbooks, and procedures across Azure, AWS, and GCP environments. This role requires strong technical expertise in cloud security and incident response, and will be instrumental in improving MGB’s ability to detect, respond to, and recover from cloud-based threats.
The Engineer II – Cloud Incident Responder is expected to work independently on moderately complex problems within their domain and provide guidance to junior team members to support their development. They will regularly engage with external stakeholders and partners to support the development of effective solutions.
• Takes ownership of specific modules or components within projects or tools, from design to implementation.
• Reviews and provides constructive feedback on build/code contributions from team members.
• Participates in architectural discussions and contributes to the design of complex solutions.
• Proactively identifies and optimizes improvement in existing processes.
• Mentors junior team members, sharing knowledge and best practices.
• Cross-Functional collaboration with other teams to ensure successful solution delivery.
• Designs and maintains cloud incident response playbooks tailored to Azure, AWS, and GCP environments.
• Develops and documents cloud-specific IR procedures, including detection, triage, containment, eradication, and recovery workflows.
• Collaborates with cloud engineering, SOC, and threat intelligence teams to ensure alignment of IR capabilities with cloud architecture and threat landscape.
• Participates in tabletop exercises and simulations to validate cloud IR readiness and improve response capabilities.
• Implements automation and orchestration for cloud incident response using native and third-party tools.
• Use/s the Mass General Brigham values to govern decisions, actions, and behaviors. These values guide how we get our work done: Patients, Affordability, Accountability & Service Commitment, Decisiveness, Innovation & Thoughtful Risk; and how we treat each other: Diversity & Inclusion, Integrity & Respect, Learning, Continuous Improvement & Personal Growth, Teamwork & Collaboration
• Other duties and responsibilities as assignedHybrid399 Revolution Drive40RegularDay (United States of America)0100 Mass General Brigham Incorporated is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religious creed, national origin, sex, age, gender identity, disability, sexual orientation, military service, genetic information, and/or other status protected under law. We will ensure that all individuals with a disability are provided a reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. To ensure reasonable accommodation for individuals protected by Section 503 of the Rehabilitation Act of 1973, the Vietnam Veteran’s Readjustment Act of 1974, and Title I of the Americans with Disabilities Act of 1990, applicants who require accommodation in the job application process may contact Human Resources at (857)-282-7642.
Mass General Brigham relies on a wide range of professionals, including doctors, nurses, business people, tech experts, researchers, and systems analysts to advance our mission. As a not-for-profit, we support patient care, research, teaching, and community service, striving to provide exceptional care. We believe that high-performing teams drive groundbreaking medical discoveries and invite all applicants to join us and experience what it means to be part of Mass General Brigham.
Job Summary
The OpportunityThe Information Security Engineer II – Cloud Incident Responder tackles moderately complex security engineering challenges within their domain. They maintain and enhance existing security controls while actively participating in the design and development of new solutions. They proactively identify and address vulnerabilities or deficiencies within their domain, develop and implement robust controls to mitigate these risks, create detailed documentation, and implement mechanisms to ensure the effectiveness of solutions.
The Engineer II – Cloud Incident Responder will focus on building and operationalizing cloud-specific incident response processes, playbooks, and procedures across Azure, AWS, and GCP environments. This role requires strong technical expertise in cloud security and incident response, and will be instrumental in improving MGB’s ability to detect, respond to, and recover from cloud-based threats.
The Engineer II – Cloud Incident Responder is expected to work independently on moderately complex problems within their domain and provide guidance to junior team members to support their development. They will regularly engage with external stakeholders and partners to support the development of effective solutions.
• Takes ownership of specific modules or components within projects or tools, from design to implementation.
• Reviews and provides constructive feedback on build/code contributions from team members.
• Participates in architectural discussions and contributes to the design of complex solutions.
• Proactively identifies and optimizes improvement in existing processes.
• Mentors junior team members, sharing knowledge and best practices.
• Cross-Functional collaboration with other teams to ensure successful solution delivery.
• Designs and maintains cloud incident response playbooks tailored to Azure, AWS, and GCP environments.
• Develops and documents cloud-specific IR procedures, including detection, triage, containment, eradication, and recovery workflows.
• Collaborates with cloud engineering, SOC, and threat intelligence teams to ensure alignment of IR capabilities with cloud architecture and threat landscape.
• Participates in tabletop exercises and simulations to validate cloud IR readiness and improve response capabilities.
• Implements automation and orchestration for cloud incident response using native and third-party tools.
• Use/s the Mass General Brigham values to govern decisions, actions, and behaviors. These values guide how we get our work done: Patients, Affordability, Accountability & Service Commitment, Decisiveness, Innovation & Thoughtful Risk; and how we treat each other: Diversity & Inclusion, Integrity & Respect, Learning, Continuous Improvement & Personal Growth, Teamwork & Collaboration
• Other duties and responsibilities as assigned
Qualifications
- Bachelor’s or Associate’s Degree or requisite experience
- 3+ years of relevant experience highly preferred. 2-3 years required
- Relevant Certifications preferred
- Experience in cloud security and incident response across Azure, AWS, and GCP.
- Certifications such as AWS Certified Security – Specialty, Azure Security Engineer Associate, or Google Professional Cloud Security Engineer are preferred.
- Can this consider and review experience in lieu of a degree? Yes
- This position requires occasional local travel to MGB sites, vendors, and/or conferences.
- This position requires work from an MGB site 1 day per week.
Skills For Succes
- Strong understanding of cybersecurity concepts within their domain.
- High proficiency with the tools and solutions supported by the team.
- Solid understanding of system architecture and design.
- Strong problem solving skills and analytical thinking to identify solutions to complex problems, and to optimize existing solutions.
- Excellent prioritization capabilities, with an aptitude for breaking down work into manageable parts, effectively assessing the priority and time required to complete each part.
- Excellent communication and teamwork skills to share knowledge, present ideas, and lead discussions.
- Proficiency in cloud-native security tools such as AWS GuardDuty, Azure Sentinel, and GCP Security Command Center.
- Experience with SIEM, SOAR, and EDR platforms in cloud environments.
- Ability to analyze cloud logs and telemetry for threat detection and investigation.
- Strong understanding of cloud architecture, IAM, and network security principles.
- No direct reports; may provide guidance to less seasoned and new staff
Additional Job Details (if applicable)
Working Model Requirements
- M-F Eastern Business Hours
- Hybrid Model includes weekly onsite in office
- Wednesdays in office are required weekly
- Weekly and monthly flexibility required for business needs, onsite meetings, stakeholder meetings and initiatives
- Remote workdays require stable, secure, quiet compliant work station
Remote Type
Work Location
Scheduled Weekly Hours
Employee Type
Work Shift
Pay Range
$75,275.20 - $109,553.60/Annual
Grade
6
EEO Statement:
Mass General Brigham Competency Framework
At Mass General Brigham, our competency framework defines what effective leadership “looks like” by specifying which behaviors are most critical for successful performance at each job level. The framework is comprised of ten competencies (half People-Focused, half Performance-Focused) and are defined by observable and measurable skills and behaviors that contribute to workplace effectiveness and career success. These competencies are used to evaluate performance, make hiring decisions, identify development needs, mobilize employees across our system, and establish a strong talent pipeline.