Top Cybersecurity Jobs in Boston, MA

Conduct cloud-focused Red Team/Blue Team (CRTBT) engagements, emulating adversary TTPs against customer cloud environments, collaborate with client SOC/IR teams, manage engagements end-to-end, develop automation and tooling for adversary emulation, and recommend long-term enhancements to improve cloud detection and response.

Lead planning, deployment, and operational support for CrowdStrike Falcon cloud security modules (CWP, CSPM, ASPM, SSPM). Perform implementations, scripting, IaC, container and CI/CD integrations, troubleshooting, customer training, mentorship, cross-team coordination, and support incident response and compromise assessments.

Perform proactive and active threat hunting across government cloud environments, analyze adversary activity, develop and implement detections, conduct intrusion and forensic analysis, contribute to threat intelligence and detection engineering, and communicate findings to technical and executive stakeholders while enhancing Falcon platform capabilities.

Conduct cloud-focused Red Team/Blue Team engagements as the Blue Teamer: support SOC/IR in real-time threat hunting, detection engineering, and incident response during adversary emulation. Manage engagements end-to-end, deliver reports, and recommend long-term enhancements to improve detection, response, and recovery. Provide client-facing consulting, project management, and relationship-building with technical and executive stakeholders.

Sell and demonstrate CrowdStrikes platform by owning technical conversations, delivering tailored presentations and POVs, managing demos, and collaborating with sales and engineering. Provide expertise across AV/EDR, incident response, forensics, SIEM, cloud, identity, and AI/ML-based detection while supporting customer evaluations and technical decision-making.

Lead tailored threat hunting and intelligence operations for high-profile customers: execute sophisticated hunts, research dark web and threat activity, deliver executive and technical briefings, respond to ad hoc customer requests, and leverage AI/autonomous agents to accelerate analysis and outcomes while supporting on-call rotation and cross-team initiatives.

Perform deep security analysis of endpoint products and sensors: threat modeling, source-code review, exploit-style testing (including kernel components), reproduce/validate bug bounty findings, collaborate with developers to fix vulnerabilities, and build tooling/automation to improve security workflows.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Perform proactive and active threat hunting across government cloud environments, analyze intrusion and malware activity, develop detections, communicate findings to technical and executive stakeholders, contribute to threat intelligence and detection engineering, and leverage AI to enhance workflows and decision-making.

Lead technical marketing for Falcon Secure Access by creating demos, labs, workshops, and technical content that translate secure access, browser security, Zero Trust, and AI security capabilities into market-facing messaging, sales enablement, and go-to-market strategy. Collaborate cross-functionally to drive adoption and competitive differentiation.