Top Cyber Security Jobs in Boston, MA

Designs and implements secure AWS infrastructure, integrating development, operations, and security practices. Automates infrastructure with CloudFormation and Terraform, conducts vulnerability assessments, implements security controls, manages incident remediation, and supports CI/CD through Jenkins and GitLab. The role also uses Python, CrowdStrike, and Palo Alto Networks while collaborating with clients and technical teams to improve cybersecurity, reliability, and infrastructure performance.

Designs and implements secure AWS infrastructure, integrates development, operations, and security practices, automates infrastructure with CloudFormation and Terraform, conducts vulnerability assessments, manages incident remediation, and deploys solutions through Jenkins and GitLab. The role also requires collaboration with clients and technical teams, cybersecurity tool expertise, analytical problem-solving, and leadership in complex environments.

Lead the architecture and engineering of production-grade agentic AI platforms for offensive cybersecurity operations. Design multi-agent workflows, execution harnesses, memory, tool calling, model routing, retrieval, and enterprise integrations. Establish security, evaluation, observability, reliability, and AI safety practices, including sandboxing, authorization, secrets management, guardrails, and defenses against prompt injection and data leakage. Mentor engineers, guide cross-functional architecture decisions, and communicate tradeoffs to senior leadership.

Leads end-to-end delivery of AI security solutions for enterprise public-sector customers. Deploys and optimizes Zscaler AI Guard, AI Protect, and SPLX across cloud and Kubernetes environments; designs networking and firewall connectivity; performs automated AI red-teaming, vulnerability probing, and lab replication. Acts as a trusted technical advisor, produces documentation and demos, advocates customer needs, and supports product development. Requires expertise in LLMs, cloud networking, APIs, containers, and security, plus U.S. citizenship, clearance eligibility, and travel up to 40%.

Lead infrastructure security and DevSecOps strategy across AWS environments. Implement cloud security controls for identity, networking, encryption, secrets, logging, IaC, CI/CD, containers, and software supply chains. Partner with AppSec and InfoSec on testing, audits, vulnerability prioritization, incident response, remediation, and risk management. This player-coach role also develops the security practice, influences cross-functional teams, and may hire and manage engineers.

Designs, deploys, and operates IAM controls across cloud and on-premises infrastructure. The role secures human, service, workload, and AI-agent identities through authentication, authorization, least privilege, lifecycle automation, policy guardrails, monitoring, and incident response. Responsibilities include implementing IAM integrations, access reviews, threat modeling, security automation, and reliable on-call operations while partnering with infrastructure, platform, and incident response teams.

Design, deploy, and operate security controls for Dropbox’s AI and agentic infrastructure across cloud, Kubernetes, data stores, and on-premise systems. Secure authentication, authorization, networking, AI tools, and non-human workloads while addressing prompt injection, poisoning, supply-chain, and MCP risks. Lead security initiatives, harden infrastructure, automate policy and security operations, and collaborate cross-functionally to protect customer data. Participate in on-call rotations as required.

Own and improve Octus’s enterprise security technology across endpoints, identity, SaaS, email, DLP, AI tools, cloud, and applications. Responsibilities include managing security platforms, hardening systems, tuning SIEM detections, responding to incidents, driving remediation, supporting audits and client reviews, assessing vendor risk, automating workflows, and mentoring teammates. The role requires broad hands-on cybersecurity expertise across Mac and Windows environments, identity platforms, secure web gateways, DLP, compliance frameworks, scripting, and REST APIs.

Leads enterprise data protection and AI security strategy, architecture, and execution. Builds and manages security engineering teams; oversees Microsoft Purview classification, labeling, DLP, endpoint protection, insider risk, and DSPM. Defines security controls for generative AI, LLMs, agents, and AI-enabled SaaS; guides AI governance and vendor assessments. Partners with Security Operations and Incident Response to address data exfiltration, insider threats, and AI-related incidents while meeting regulatory and contractual obligations.

Build and operate central security systems, automation, tooling, and controls across cloud infrastructure, identity, access, products, partners, and vendors. Develop AI-assisted security workflows, lead external assessments through verified remediation, identify and validate vulnerabilities, guide engineering teams, and participate in incident response. The role requires production security engineering experience, strong programming skills, cloud security expertise, and fintech, payments, or crypto experience.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Designs, builds, and improves security detections across cloud, identity, endpoint, network, and application environments. The role develops Detection-as-Code capabilities, maps threats to MITRE ATT&CK, tunes alerts, reduces false positives, supports incident investigations, and automates triage. It also tracks detection performance, contributes to on-call operations, partners with engineering and infrastructure teams, and applies threat intelligence, data analysis, and machine learning to strengthen detection fidelity.

Designs and develops IAM and security software, automation, APIs, and microservices. Integrates security into cloud and CI/CD environments, conducts code reviews and threat modeling, monitors security events, supports incident response, and advises teams on identity architecture and best practices. Requires extensive IAM administration, programming, cloud, containerization, and secure-coding experience.

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.

Own the technical sales lifecycle for API, agent, and AI security solutions. Lead customer discovery, solution design, demonstrations, workshops, and technical engagements. Advise customers on security strategies, threat mitigation, posture management, and cloud-native architectures. Serve as a cybersecurity subject matter expert, translate complex concepts for technical and executive audiences, gather requirements, and collaborate with sales, product, engineering, and partners to deliver successful security transformations.

Leads technical pre-sales architecture for complex security solutions serving public-sector and commercial customers. Translates business, security, compliance, and technical requirements into solution designs, bills of materials, statements of work, estimates, pricing, assessments, and deployment plans. Conducts discovery sessions, architecture workshops, solution reviews, and customer presentations while partnering with sales, delivery teams, and security vendors. Mentors architects and sellers, supports regional customer activity, and travels throughout the Southeast as needed.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.

Build and operate automated infrastructure security capabilities across multi-cloud environments. Harden Linux hosts and containers, develop security controls with Terraform and production code, manage Kubernetes and cloud security platforms, implement monitoring and threat detection, and lead initiatives from threat modeling through reliable production deployment.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Conducts original research advancing AI and systems security, including secure AI models, AI-enabled secure system design and verification, and AI for cybersecurity. Develops and evaluates security techniques for hardware, software, runtimes, compilers, and applications; addresses threats such as vulnerabilities, data leakage, and attacks. Collaborates across research, hardware, software, and product teams, publishes findings, builds prototypes, and translates research into practical systems and developer capabilities.

Lead penetration testing, adversary emulation, assume-breach, and AI red-teaming engagements. Identify exploitable weaknesses, validate security controls and detection capabilities, and provide prioritized remediation guidance. Conduct testing across networks, applications, APIs, cloud, and infrastructure while mapping activity to threat frameworks. Communicate findings to technical and executive audiences, advise clients, develop methodologies and tooling, automate testing, and mentor junior team members.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Own and expand CivilGrid’s security program, including SOC 2 readiness, access controls, endpoint security, threat modeling, vulnerability management, incident response, and customer security reviews. Support AWS infrastructure, GIS servers, reliability practices, observability, SLOs, on-call operations, and post-incident reviews. Partner with engineering, IT, and leadership to embed security and reliability across the SDLC and production systems.

Leads enterprise AI Security and GenAI data protection, owning the AI Gateway from evaluation through deployment and ongoing operations. Designs controls for prompts, uploads, browser traffic, copilots, agents, and integrations; implements monitoring, coaching, redaction, quarantine, and blocking. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures effectiveness, supports audit readiness, and partners with business and technology teams to enable responsible AI adoption.