Security Automation Engineer II, BU Info Security

We also want real fluency with current AI tooling: working in AI-assisted development environments day to day, using AI to help generate and validate tests and review code, building AI-assisted security tooling and MCP integrations, and being the engineer who can look hard at the AI systems other units want to deploy and say something useful about them. Demonstrated fluency with current AI tooling, including routine use of AI-assisted development environments and practical experience integrating large language models or AI services into working tools using tool and function calling, retrieval-augmented generation, or agentic patterns.

Help secure a major research university's IT systems, and automate as much of that work as you can. You'll work with technologists and business units across Boston University to define, implement, and evaluate security risks and controls, and to make sure what we build matches our enterprise architecture standards and Information Security policy. You'll deploy and maintain security services, both commercial and home-grown, and help refine the policies and standards that govern them. What makes this role different is how we expect the work to be done. Security delivered as code, with version control, automated tests, and pipelines — and automated security checks living inside the pipelines our IS&T colleagues already use. We also want real fluency with current AI tooling: working in AI-assisted development environments day to day, using AI to help generate and validate tests and review code, building AI-assisted security tooling and MCP integrations, and being the engineer who can look hard at the AI systems other units want to deploy and say something useful about them. Raising everyone else's capability is a permanent part of this job, not a side project. You'll pair with colleagues, build patterns they reuse, run working sessions, and be the person others come to with a question about doing this safely — and you'll keep doing it, because the tooling keeps moving. Collaborative team, real problems, and strong benefits including tuition remission.

Required Skills

• Bachelor's degree in a related field or equivalent experience; master's degree preferred.
• 3+ years of related experience in security engineering, security architecture, or adjacent infrastructure and software engineering roles.
• Proficiency in at least one general-purpose programming language: Python, Go, Java, C#, or PowerShell.
• Git-based version control, and experience building CI/CD pipelines that include automated testing.
• Practical experience writing automated tests, including unit, integration, and regression tests.
• Working knowledge of cloud and on-premises security controls, identity protocols, and network and system administration.
• Demonstrated fluency with current AI tooling, including routine use of AI-assisted development environments and practical experience integrating large language models or AI services into working tools using tool and function calling, retrieval-augmented generation, or agentic patterns.
• Judgment about where AI output requires verification, and an understanding of how AI-generated code and tests fail.
• Working understanding of AI-specific security risk, including prompt injection, data leakage through model context, and authorization for agentic systems.
• A track record of teaching or enabling colleagues: pairing, internal training, documentation others actually use, or reusable patterns adopted by a team.
• Detail-oriented, with strong written and verbal communication skills.

 

Bonus Qualifications:

• If you do not meet these, you are still encouraged to apply; we value employees with a willingness to learn.
• Model Context Protocol (MCP) server or client development.
• Familiarity with the OWASP Top 10 for LLM Applications and the NIST AI Risk Management Framework.
• Infrastructure as code (Terraform, Ansible) and containerization (Docker, Kubernetes)
• DevSecOps tooling for dependency, container, secrets, and infrastructure-as-code scanning.
• Higher education experience.

 

Boston University offers an excellent benefits package including:

• Time Off: In addition to PTO and leave policy, BU employees have a paid intersession break and 13 paid holidays.
• Retirement: University-funded retirement plan with full vesting after 2 years of eligible service. 
• Tuition Assistance Program: Competitive tuition assistance program for yourself and family members.
• Check out https://www.bu.edu/wellness/ and https://www.bu.edu/hr/part-time-employee-perks/ for more information!

 

Boston University IS&T invests in our staff and their personal and professional growth. We promote staff learning including lunch and learn sessions, an extensive library of online courses, Fun Advisory Board (FAB) arranges a number of events throughout the year and opportunities to engage with peers at NERCOMP and EDUCAUSE events. If you require a reasonable accommodation in order to complete the employment application process, please contact the Equal Opportunity Office at 617-353-6474. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We, at IS&T, appreciate each individual's knowledge, experiences and insights which enhance who we are, and as our DEIA knowledge and practice grows, we will ensure that our Mission, Vision, & Practices remain equitable and welcoming to all.

 

We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, natural or protective hairstyle, religion, sex, age, national origin, physical or mental disability, sexual orientation, gender identity, genetic information, military service, pregnancy or pregnancy-related condition, or because of marital, parental, or veteran status. We are a VEVRAA Federal Contractor. 

Required Experience