Top Cybersecurity Jobs in Boston, MA

Leads a weekend-shift DFIR consulting team and incident response engagements. Responsibilities include triage, scoping, forensic and malware investigations, threat hunting, remediation planning, executive and customer communication, regulatory and legal reporting, and mentoring analysts across Windows, macOS, and Linux. The role also develops security methods, supports cloud incident response, contributes thought leadership, and may travel up to 30%.

Leads incident response consulting engagements, including triage, scoping, forensic and malware investigations, threat hunting, remediation planning, and executive communications. The role directs investigations with legal counsel, mentors junior analysts, develops security posture recommendations, produces reports and presentations, contributes industry thought leadership, and manages customer-facing response work. Candidates need incident response, computer and network forensics, reverse engineering, cloud response, team leadership, project management, and willingness to travel up to 30%.

Define and own the technical vision, product strategy, roadmap, data strategy, and AI integration for CrowdStrike’s Next-Gen SIEM and log management products. Translate customer, market, and threat intelligence into shipped capabilities; lead cross-platform integration across endpoint, cloud, identity, and exposure products; and articulate the platform consolidation narrative. Engage executives, customers, analysts, sales, engineering, and product teams while driving detection, investigation, response automation, and cybersecurity thought leadership.

Lead complex incident response engagements, conduct host and network forensics, investigate intrusions and malware, hunt advanced threats, develop remediation plans, and communicate findings to executives, regulators, legal counsel, and customers. The role also requires team leadership, project management, cloud incident response knowledge, thought leadership, and travel up to 30%.

Leads complex, high-severity cybersecurity investigations across endpoint, identity, email, network, and cloud environments. Performs forensic, malware, network, and threat analysis; develops remediation plans; investigates Microsoft 365 attacks; and improves detection and response through automation. Mentors analysts, creates training and SOP content, manages customer escalations, and represents CrowdStrike through thought leadership and external engagements.

Manage and enhance identity infrastructure operations in CrowdStrike’s federal cloud environments. Responsibilities include identity provider operations, application lifecycle management, access troubleshooting, security control compliance, automation, monitoring, alerting, tier 2/3 support, root cause analysis, stakeholder communication, and on-call support. The role focuses on IAM security, scalability, FedRAMP and DoD requirements, and collaboration with Engineering and IT teams.

Lead product strategy, roadmap, and delivery for Falcon Complete’s internal MDR tooling, including AI-powered investigation and triage, ticketing, case management, and analyst workbench systems. Partner with security operations, analysts, engineering, and data science teams to translate workflows into product requirements, prioritize automation, improve analyst productivity and response times, define success metrics, and enhance customer outcomes.

Conduct sophisticated threat hunting, dark web monitoring, and customer-specific cyber threat intelligence operations. Serve as a trusted customer advisor, research targeted threats, validate security controls using MITRE ATT&CK, prepare intelligence reports, and deliver briefings to stakeholders ranging from SOC analysts to CISOs. Collaborate across teams to develop solutions, respond to customer requests, and improve threat hunting services.

Lead technical marketing for Falcon Secure Access by creating demos, labs, workshops, and technical content that translate secure access, browser security, Zero Trust, and AI security capabilities into market-facing messaging, sales enablement, and go-to-market strategy. Collaborate cross-functionally to drive adoption and competitive differentiation.

Serve as the technical bridge between CrowdStrike and customers/prospects, demonstrating endpoint and network security solutions, articulating complex security problems, supporting sales engagements, presenting to varied audiences (including C-level), and collaborating with sales, marketing, support, and engineering to drive adoption of CrowdStrike's platform.