Top Cybersecurity Jobs in Boston, MA

Lead Klaviyo's infrastructure security architecture and programs: IAM, secrets management, network segmentation, vulnerability management, and security tooling. Build IaC guardrails, define security SLOs and compliance posture, run threat modeling and design reviews, embed controls into CI/CD and observability, and deliver code/automation while mentoring senior engineers. Drive AI-enabled security automation and audit readiness for SOC 2/ISO 27001.

Design and implement automated compliance workflows and continuous control monitoring for SOC 2, ISO 27001/27017, PCI, and SOX ITGCs. Integrate and customize compliance automation platforms, collect scripted evidence, validate controls, partner with engineering and risk teams, and apply AI/automation to scale GRC operations.

Build and operate cloud-native security services and platforms. Own components end-to-end, improve availability, scalability, and security of distributed systems, participate in on-call, incident response, design reviews, and deliver tooling, automation, and documentation to improve developer security and reliability.

The Senior Security Engineer will build and maintain detection systems, automate responses, and lead incident investigations to enhance security observability.

Lead and grow a Security Risk Engineering team to transform risk management into an engineering-led, real-time capability. Own the risk register, taxonomy, and financial risk quantification; build risk intelligence, automation, and AI-enabled pipelines; integrate third-party and application risk scoring; provide second-line oversight, policy custody, KPI reporting, and partnership with Legal, Audit, Finance, and engineering to reduce enterprise risk.

The Lead Security Engineer will oversee the corporate security posture, manage identity and access management, and mature the company’s Zero Trust network while collaborating across departments to enhance security protocols using AI.