Top Cybersecurity Jobs in Boston, MA

Own security and privacy compliance programs, audits, policies, controls, evidence pipelines, continuous monitoring, and automation. Lead framework gap assessments, control design, risk analysis, and auditor relationships. Build sustainable GRC workflows across SaaS and cloud environments, establish KPIs and SLAs, mentor practitioners, delegate work, and drive technical direction without formal authority.

Build and maintain detection and response capabilities across enterprise, cloud, and product environments. Responsibilities include developing detections-as-code, triaging alerts, investigating and responding to incidents, conducting digital forensics and threat hunting, automating workflows, building security tooling, supporting SIEM and security data lake pipelines, developing AI-driven security systems, participating in on-call rotations, and mentoring engineers.

Build and operate cloud-native security services and platforms. Own components end-to-end, improve availability, scalability, and security of distributed systems, participate in on-call, incident response, design reviews, and deliver tooling, automation, and documentation to improve developer security and reliability.

Own and automate Klaviyo's technology and third-party risk register and taxonomy, lead AI risk governance and ISO 42001 readiness, perform quantitative cyber risk analysis (financial expected loss), drive third-party risk scoring automation, produce decision-ready risk reporting for leadership, and provide independent second-line oversight while partnering cross-functionally to track and close remediation.

The Senior Security Engineer will build and maintain detection systems, automate responses, and lead incident investigations to enhance security observability.