Top Cyber Security Jobs in Boston, MA

Leads product and platform security for Federal Reserve Financial Services, overseeing security architecture, secure development lifecycles, threat modeling, DevSecOps, security testing, risk management, and cloud security. Advises product, engineering, architecture, and executive stakeholders; establishes security standards and reference architectures; evaluates security technologies; and leads, mentors, and develops the security team. The role also represents security interests across Federal Reserve System forums and requires occasional travel and national security clearance eligibility.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.

Designs and automates application, cloud, infrastructure, and AI security controls across CI/CD pipelines and public-cloud environments. Conducts penetration testing, red teaming, source-code audits, and cloud exploitation. Leads incident containment, forensic collection, threat detection engineering, and SIEM automation. Partners with software engineering and SRE teams on secure architecture, Zero Trust, container security, and Infrastructure-as-Code scanning while mentoring junior engineers and aligning controls with financial-sector compliance standards.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Lead Toast’s product and platform security organization, overseeing security platform engineering, application and cloud security, secure development practices, offensive security, vulnerability management, hardware security, and developer enablement. Partner with product and engineering leaders to establish secure defaults and scalable guardrails while reducing developer friction. Manage and grow a multi-team security engineering organization, expand security champions and tooling adoption, and align security posture with business and product priorities.

Partners with Sales to advise enterprise customers on cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Leads discovery, solution design, technical demonstrations, proof-of-value and proof-of-concept engagements, customer validation, executive discussions, documentation, and technical training. Requires strong cybersecurity and enterprise networking expertise, customer-facing presales experience, and the ability to connect technical capabilities with business outcomes. Travel is typically 25–50%.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.

Leads security engineering strategy across application security, cloud security, penetration testing, security operations, and incident response. Defines roadmaps, integrates automated controls into engineering and cloud environments, approves complex IAM and Zero Trust decisions, directs offensive testing and detection engineering, and leads critical incident escalations. Mentors engineers, influences executives, supports hiring and resourcing, and aligns security controls with PCI-DSS, SOC, and DORA requirements.

Lead software security for Cisco’s IT and Enterprise Operations portfolio. The role owns security posture, threat modeling, secure architecture reviews, AI and LLM security, risk-based remediation, security metrics, and release risk reporting. It partners with engineering, product, and IT leadership to drive security outcomes without direct authority, coordinate security subject-matter experts, and reduce security debt across cloud-native applications and enterprise platforms.

Maintains corporate information security and cloud system protections by evaluating monitoring outputs, assessing risks and vulnerabilities, implementing access and remediation controls, designing secure configurations, supporting incident response, and coordinating with IT, security, and application teams. The role also advises on risk acceptance, regulatory standards, confidentiality, and secure system design.

Designs and implements security for embedded consumer electronics products, including ARM TrustZone applets, cryptographic device identity, secure boot, firmware protection, key management, and trust chains. Defines security requirements, performs assessments and testing, supports compliance audits, mitigates vulnerabilities, and advises engineering teams through architecture and code reviews. Collaborates with firmware, DevOps, cloud, manufacturing, and program management teams to strengthen product security and incident response.

Supports enterprise cybersecurity through security configuration, identity and access management, vulnerability management, cloud security, audits, penetration testing, risk analysis, security monitoring, and remediation coordination. The role diagnoses escalated security issues, maintains dashboards and metrics, supports compliance initiatives, collaborates with technical and business teams, and mentors Help Desk Analysts. Responsibilities span Azure, AWS, on-premises infrastructure, applications, and enterprise security systems.

Provides cybersecurity consulting and professional services for enterprise Cisco customers. Designs, documents, implements, automates, troubleshoots, and supports Cisco security solutions across cloud and on-premises environments. Leads customer engagements, technical workshops, training, project delivery, and engineering teams while advising on firewall, VPN, SASE, zero trust, and network security architectures. Builds trusted customer relationships, identifies future opportunities, and contributes to proposals and statements of work.

Build and scale backend security platform services, including authentication, authorization, identity infrastructure, permission systems, and data models. Lead cross-team technical initiatives, standardize security solutions, collaborate with compliance and mission stakeholders, and influence architecture and engineering standards. The role requires strong system design, backend development, security expertise, technical leadership, and the ability to operate in sensitive environments.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Build and mature WHOOP’s Security Architecture practice by establishing governance, standards, reference architectures, and reusable security patterns. Provide architectural guidance across application, cloud, infrastructure, API, identity, networking, AI, and enterprise systems. Lead threat modeling and architecture reviews, assess vendor security, translate compliance requirements into engineering controls, mentor teams, document guidance, and advise leaders on security strategy and risk-based decisions.

Designs and improves enterprise security across endpoints, SaaS, identity, infrastructure-as-code, AI applications, and corporate networks. Responsibilities include Terraform and GitOps automation, endpoint lifecycle security, AI and MCP governance, third-party risk assessments, threat modeling, detection and response collaboration, and security control assessments. The role requires strong Python or Go skills, endpoint and identity expertise, macOS security experience, and the ability to communicate and guide distributed engineering teams.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Build and maintain custom security tools, middleware, automation, APIs, integrations, dashboards, and security workflows. Integrate identity, endpoint, SIEM, SaaS, and other security platforms using APIs, cloud services, containers, and CI/CD. Translate security policies into secure, code-driven solutions while supporting SOAR, continuous monitoring, compliance, and cross-functional collaboration.

Assists with designing, implementing, monitoring, configuring, and maintaining information security and risk management infrastructure. Supports requirements definition, root cause analysis, technical training, project delivery, compliance, and security systems administration. The role requires familiarity with operating systems, software administration, network security technologies, endpoint protection, firewalls, encryption, SIEM, DLP, and relevant security frameworks and regulations.

Owns end-to-end security engineering, including risk identification, secure-by-default libraries, least-privilege guardrails, developer machine hardening, supply-chain security, and identity and authentication protections. Partners with compliance to implement effective controls for healthcare requirements such as HIPAA and HITRUST. The role requires production software engineering and security expertise, with broad autonomy in a fully remote environment.

Designs, implements, maintains, and improves cybersecurity controls across enterprise systems, networks, cloud environments, and applications. Deploys and troubleshoots security technologies, responds to incidents, identifies security requirements, supports audits and change management, documents procedures, analyzes risks, and delivers remediation recommendations. Collaborates with architects, project managers, engineers, and stakeholders to protect organizational data and infrastructure while automating repeatable security tasks.

Leads the strategy, lifecycle, financial performance, positioning, and growth of Arctic Wolf’s Endpoint Security portfolio. The role oversees product expansion, cross-sell opportunities, competitive analysis, M&A integration, and integration with managed security services. It also leads a global product management team, establishes product metrics and operating cadences, and represents endpoint strategy to executives, customers, analysts, and partners.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.