Top Cybersecurity Jobs in Boston, MA

Leads CrowdStrike’s global 24/7 Digital Operations Center across multiple sites and regions. Owns operational strategy, staffing, tooling, policies, monitoring, alerting, and incident response. Directs critical incident escalation, crisis activation, post-incident reviews, root-cause analysis, and corrective actions. Develops DOC leaders and staff, manages resource recommendations and budgets, maintains procedures and incident documentation, and reports performance to senior leadership. Partners with engineering, SRE, IT, and enterprise leaders to improve resilience and operational effectiveness.

Analyze in-the-wild exploits and perform deep reverse engineering to track adversaries. Build detection, automation, and classification frameworks; develop host/network signatures and tooling. Produce high-quality intelligence reports and briefings, collaborate across teams, and contribute to mitigation and large-scale hunting efforts.

Lead strategy and execution for CrowdStrike's Identity Protection product: detect and prioritize identity risk across human and non-human identities, define identity graph models, drive remediation automation and verification, and surface identity risk across the security stack. Use AI agents and rapid prototyping to iterate specs and partner with engineering, customers, and stakeholders to deliver usable identity risk solutions.

Deploys, configures, optimizes, and supports the CrowdStrike Falcon platform and related applications for enterprise customers. Responsibilities include troubleshooting, software deployment engineering, API scripting, integrations, vulnerability and asset management support, incident response deployment assistance, customer project planning, technical workshops, mentoring, and collaboration with customer IT and internal services teams. Travel may reach 25%.

Perform red team engagements, penetration tests, adversary emulation, and threat actor simulations across operating systems, applications, databases, and networks. Plan and execute assessments, identify vulnerabilities, produce executive and technical reports, provide security recommendations, and support customers during crisis scenarios. Collaborate with leadership and technical teams, improve information security programs, operate with an OPSEC mindset, and use automation, scripting, and AI technologies to enhance assessment effectiveness.

Delivers virtual and occasional onsite cloud security training covering Falcon Cloud Security, CNAPP, CSPM, CWPP, containers, and incident response. Develops curricula, certification exams, and hands-on labs; maintains expertise in cloud threats and CrowdStrike products; and supports broader endpoint, identity, logging, and SIEM topics. Requires strong technical education, cloud security, communication, project management, AI technology, and occasional travel experience.

Build and maintain scalable cybersecurity data infrastructure, distributed systems, and tools supporting OverWatch threat hunting across trillions of events. Develop web services and processing pipelines, integrate research projects into production, improve analyst workflows, and operate highly available cloud systems. Responsibilities include DevOps ownership, on-call support, testing, code reviews, open-source collaboration, and working with a distributed remote team.

Serves as a technical advisor to strategic customers, supporting CrowdStrike Falcon planning, deployment, configuration, troubleshooting, optimization, integrations, and operational adoption. Provides guidance on security operations, threat hunting, incident management, vulnerability and asset management, and Falcon modules. Develops API-based solutions, collaborates with customer IT and Professional Services teams, delivers training, manages projects, and maintains trusted customer relationships. The role is remote and requires travel up to 20%.

Lead complex incident response engagements, investigate advanced threats, conduct host and network forensics across Windows, macOS, and Linux, perform malware analysis, and develop remediation plans. The consultant will communicate findings to executives, regulators, legal counsel, and customers; lead teams; conduct cloud incident response; contribute industry thought leadership; apply AI technologies; and travel on short notice up to 30%.

Provides customer-facing cybersecurity consulting focused on threat emulation, exposure management, red teaming, vulnerability management, penetration testing, and technical risk mitigation. Uses SafeMind, Falcon, and AI-enabled capabilities to evaluate exposures, refine risk outputs, advise technical and executive audiences, improve service delivery, and mentor junior consultants. Requires advanced security assessment, infrastructure, networking, operating system, automation, and scripting expertise, with occasional travel.