Top Cyber Security Jobs in Boston, MA

Design and implement secure AWS infrastructure, integrate development, operations, and security practices, automate infrastructure with CloudFormation and Terraform, assess vulnerabilities, manage incident remediation, and deploy scalable CI/CD solutions using Jenkins and GitLab. The role also involves applying cybersecurity tools, troubleshooting security infrastructure, analyzing data, advising clients, and leading others while maintaining professional and technical standards.

Designs and implements secure AWS infrastructure, integrating development, operations, and security practices. Automates infrastructure with CloudFormation and Terraform, conducts vulnerability assessments, implements security controls, manages incident remediation, and supports CI/CD through Jenkins and GitLab. The role also uses Python, CrowdStrike, and Palo Alto Networks while collaborating with clients and technical teams to improve cybersecurity, reliability, and infrastructure performance.

Designs and automates application, cloud, and infrastructure security controls across CI/CD pipelines and public cloud environments. Responsibilities include penetration testing, red teaming, threat detection engineering, incident response, forensic collection, AI security governance, and secure software design. Partners with engineering and SRE teams on Terraform, Docker, Kubernetes, and Zero Trust security, while mentoring junior engineers and supporting compliance with PCI-DSS, SOC, and DORA standards.

Lead Toast’s product and platform security organization, overseeing security platform engineering, application and cloud security, secure development practices, offensive security, vulnerability management, hardware security, and developer enablement. Partner with product and engineering leaders to establish secure defaults and scalable guardrails while reducing developer friction. Manage and grow a multi-team security engineering organization, expand security champions and tooling adoption, and align security posture with business and product priorities.

Partners with Sales to advise enterprise customers on cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Leads discovery, solution design, technical demonstrations, proof-of-value and proof-of-concept engagements, customer validation, executive discussions, documentation, and technical training. Requires strong cybersecurity and enterprise networking expertise, customer-facing presales experience, and the ability to connect technical capabilities with business outcomes. Travel is typically 25–50%.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Lead client engagements to design and implement secure network architectures (Zero Trust, SASE/SSE, segmentation, OT security). Manage teams, mentor staff, oversee enterprise network security configurations, and ensure project delivery and quality. Collaborate with clients to align security strategies with business objectives and drive innovation in network security practices.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.

Leads security engineering strategy across application security, cloud security, penetration testing, security operations, and incident response. Defines roadmaps, integrates automated controls into engineering and cloud environments, approves complex IAM and Zero Trust decisions, directs offensive testing and detection engineering, and leads critical incident escalations. Mentors engineers, influences executives, supports hiring and resourcing, and aligns security controls with PCI-DSS, SOC, and DORA requirements.

Designs and implements security for embedded consumer electronics products, including ARM TrustZone applets, cryptographic device identity, secure boot, firmware protection, key management, and trust chains. Defines security requirements, performs assessments and testing, supports compliance audits, mitigates vulnerabilities, and advises engineering teams through architecture and code reviews. Collaborates with firmware, DevOps, cloud, manufacturing, and program management teams to strengthen product security and incident response.

Build and scale backend security platform services, including authentication, authorization, identity infrastructure, permission systems, and data models. Lead cross-team technical initiatives, standardize security solutions, collaborate with compliance and mission stakeholders, and influence architecture and engineering standards. The role requires strong system design, backend development, security expertise, technical leadership, and the ability to operate in sensitive environments.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Build and mature WHOOP’s Security Architecture practice by establishing governance, standards, reference architectures, and reusable security patterns. Provide architectural guidance across application, cloud, infrastructure, API, identity, networking, AI, and enterprise systems. Lead threat modeling and architecture reviews, assess vendor security, translate compliance requirements into engineering controls, mentor teams, document guidance, and advise leaders on security strategy and risk-based decisions.

Build and maintain custom security tools, middleware, automation, APIs, integrations, dashboards, and security workflows. Integrate identity, endpoint, SIEM, SaaS, and other security platforms using APIs, cloud services, containers, and CI/CD. Translate security policies into secure, code-driven solutions while supporting SOAR, continuous monitoring, compliance, and cross-functional collaboration.

Harden and maintain AWS GovCloud, Microsoft GCC High, cloud, endpoint, container, and CI/CD environments for defense applications. Investigate vulnerabilities, secure software supply chains, lead threat modeling, enforce configuration and patching policies, monitor SIEM and cloud security alerts, and support federal compliance with CMMC, NIST, and FedRAMP standards. Collaborate across product, platform, and compliance teams to integrate security into the SDLC and support incident response.

Designs, implements, and secures enterprise network infrastructure, including firewalls, trust zones, routing, switching, VPNs, wireless, load balancers, and data center networks. Leads network and security projects, performs technical planning and packet-level analysis, supports network operations at Tier 2, documents implementations, gathers stakeholder requirements, and mentors junior engineers. Ensures solutions consider NIST 800-171 compliance and contributes to network automation using tools such as Python, Ansible, and Terraform.

Designs and leads enterprise cybersecurity architecture across network, cloud, endpoint, identity, and data environments. Develops security strategies, governance frameworks, and controls; conducts risk assessments, vulnerability management, penetration testing, and incident response. Oversees security tool integration, regulatory compliance, third-party risk, and secure development practices. Provides technical leadership, mentoring, and cross-functional guidance to protect business-critical systems and minimize cyber risk.

Lead enterprise vulnerability management and security configuration programs. Analyze vulnerabilities, assess business risk, develop remediation and mitigation strategies, manage exceptions, and engineer automated configuration compliance capabilities. Partner with infrastructure, cloud, application, engineering, and security teams to improve cyber risk visibility and security posture. Serve as a subject matter expert, technical escalation point, and mentor while translating complex findings into actionable recommendations for technical and business stakeholders.

Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.

Leads enterprise security engineering, architecture, cloud and security platform operations, AI security governance, incident response, compliance, and technical team development. Designs controls for AI systems, manages cybersecurity technologies, supports audits and regulatory engagements, mentors security staff, and serves as the designated backup to the CISO. The role combines strategic leadership with hands-on technical execution and executive collaboration.

Lead product cybersecurity for connected heart-recovery medical devices across development and post-market lifecycles. Responsibilities include security architecture, threat modeling, risk assessments, cryptographic controls, secure boot, firmware protection, PKI, vulnerability management, penetration testing, SBOM analysis, secure OTA updates, regulatory submissions, and remediation planning. The role partners with R&D and cross-functional teams to implement secure development practices, embedded protections, cloud and device security, and compliance with medical-device cybersecurity standards.

Supports cybersecurity and systems security engineering for mission-critical NC3 and weapon systems. Responsibilities include RMF authorization and accreditation, security requirements, architecture reviews, threat assessment, risk mitigation, cybersecurity strategy, vulnerability scanning, DevSecOps security reviews, contingency planning, and compliance with DoD and Air Force requirements. The role requires collaboration with government, contractor, vendor, and program management teams.

Own and advance cybersecurity for satellites, flight software, ground systems, mission networks, communication links, and AWS infrastructure. Responsibilities include security architecture, threat modeling, vulnerability management, incident response, IAM, SIEM detection engineering, network defense, cloud security, DLP, security assessments, awareness training, and compliance with CMMC Level 2, NIST 800-171, and ITAR/EAR requirements. The role collaborates with aerospace, software, systems, and compliance teams and requires expertise in mission-system security.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.