Top Cybersecurity Jobs in Boston, MA

Provides embedded technical consulting for government customers using the CrowdStrike Falcon platform. Responsibilities include customer advising, Falcon deployment and configuration, troubleshooting, module operationalization, integrations, scripting, vulnerability and asset management support, incident management guidance, threat hunting mentorship, project coordination, and government-focused technical reporting. The role operates in FedRAMP and DoD-accredited environments and requires cybersecurity expertise, consulting experience, U.S. work authorization, clearance eligibility, and up to 20% travel.

Leads a multi-team organization building AI-driven cybersecurity systems for endpoint and cloud environments. Owns technical strategy, roadmap, hiring, delivery, evaluation, and safe production deployment of AI models and autonomous defense agents. Oversees systems operating under strict endpoint resource limits and at cloud scale across trillions of events. Partners with engineering, product, threat intelligence, and executives while advancing security efficacy, reliability, and responsible AI adoption.

Monitor, triage, investigate, and respond to security alerts across endpoint, identity, email, and cloud environments. Analyze EDR telemetry, logs, forensic artifacts, Microsoft 365 activity, and enterprise security data to identify compromises and support remediation. Communicate findings and recommendations to customers, contain threats such as business email compromise and adversary-in-the-middle attacks, and improve incident detection and response processes. The role requires technical troubleshooting, customer communication, foundational cybersecurity knowledge, and a 4x10 schedule including one weekend day.

Develop and maintain high-fidelity CrowdStrike Next-Gen SIEM detection rules for managed detection and response. Conduct threat research and hunting, analyze emerging adversary tactics, test and deploy detections as code, review detection quality, and collaborate on data parsing and normalization. Build automation and utilities using AI-assisted workflows, maintain documentation, and participate in an on-call rotation.

Delivers customer-facing threat emulation, exposure management, red teaming, vulnerability management, penetration testing, and technical risk consulting services. Uses SafeMind, Falcon, generative AI, and agentic technologies to evaluate exposures, refine risk outputs, recommend mitigations, and support service operations. Presents findings to technical and executive audiences, coordinates customer delivery, improves technical capabilities, and mentors junior team members.

Develop and operate scalable cybersecurity systems for Falcon Complete, enabling analysts to triage, remediate, and prevent threats. Responsibilities include implementing product enhancements, designing reliable microservices and data pipelines, improving monitoring, automating operations, collaborating with stakeholders, and participating in 24/7 on-call rotations. The role requires cloud-native development, distributed systems expertise, database and messaging-system knowledge, container orchestration experience, and practical use of AI technologies.

Deploys, configures, optimizes, and supports CrowdStrike Falcon’s AI-powered detection and response capabilities. The role tunes machine learning models, develops security automation playbooks, troubleshoots customer environments, integrates Falcon with existing tools, supports threat hunting and forensic analysis, and develops AI training and customer-facing materials. Requires extensive IT deployment, endpoint, security automation, operating system, AI/ML, scripting, and customer consulting experience, with travel up to 25%.

Analyzes the Security for AI competitive landscape, including AI detection and response, generative AI security, autonomous agents, prompt injection, and data leakage. Partners with Product, Sales, Marketing, Strategy, and senior leaders to guide product roadmaps, go-to-market strategy, deal support, sales tactics, and competitive positioning. Conducts win/loss analysis and translates complex AI and cybersecurity concepts into executive and field-actionable guidance.

Architect and build production AI security systems spanning endpoint sensors and cloud-scale infrastructure. Lead autonomous cyber defense capabilities, including detection, threat hunting, response, adversary simulation, secure agent execution, and model evaluation. Establish technical direction, benchmarks, and safety practices while mentoring senior engineers and researchers. Carry frontier AI research into the Falcon platform and represent the company through publications, open source, standards, and industry collaboration.

Conduct incident response engagements, intrusion investigations, threat hunting, and host or network forensics across Windows, Mac, and Linux. Analyze malware and network activity, support remediation planning, and investigate targeted attacks. Prepare written and verbal findings for customers, regulators, management, and legal counsel. Consultants also collaborate with project leaders and internal teams while using AI technologies to improve workflows and decision-making.