Top Cyber Security Jobs in Boston, MA

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.

Designs and automates application, cloud, infrastructure, and AI security controls across CI/CD pipelines and public-cloud environments. Conducts penetration testing, red teaming, source-code audits, and cloud exploitation. Leads incident containment, forensic collection, threat detection engineering, and SIEM automation. Partners with software engineering and SRE teams on secure architecture, Zero Trust, container security, and Infrastructure-as-Code scanning while mentoring junior engineers and aligning controls with financial-sector compliance standards.

Design and implement secure AWS infrastructure, integrate development, operations, and security practices, automate infrastructure with CloudFormation and Terraform, assess vulnerabilities, manage incident remediation, and deploy scalable CI/CD solutions using Jenkins and GitLab. The role also involves applying cybersecurity tools, troubleshooting security infrastructure, analyzing data, advising clients, and leading others while maintaining professional and technical standards.

Partners with Sales to advise enterprise customers on cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Leads discovery, solution design, technical demonstrations, proof-of-value and proof-of-concept engagements, customer validation, executive discussions, documentation, and technical training. Requires strong cybersecurity and enterprise networking expertise, customer-facing presales experience, and the ability to connect technical capabilities with business outcomes. Travel is typically 25–50%.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Lead client engagements to design and implement secure network architectures (Zero Trust, SASE/SSE, segmentation, OT security). Manage teams, mentor staff, oversee enterprise network security configurations, and ensure project delivery and quality. Collaborate with clients to align security strategies with business objectives and drive innovation in network security practices.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.

Leads security engineering strategy across application security, cloud security, penetration testing, security operations, and incident response. Defines roadmaps, integrates automated controls into engineering and cloud environments, approves complex IAM and Zero Trust decisions, directs offensive testing and detection engineering, and leads critical incident escalations. Mentors engineers, influences executives, supports hiring and resourcing, and aligns security controls with PCI-DSS, SOC, and DORA requirements.

Designs and implements security for embedded consumer electronics products, including ARM TrustZone applets, cryptographic device identity, secure boot, firmware protection, key management, and trust chains. Defines security requirements, performs assessments and testing, supports compliance audits, mitigates vulnerabilities, and advises engineering teams through architecture and code reviews. Collaborates with firmware, DevOps, cloud, manufacturing, and program management teams to strengthen product security and incident response.

Build and scale backend security platform services, including authentication, authorization, identity infrastructure, permission systems, and data models. Lead cross-team technical initiatives, standardize security solutions, collaborate with compliance and mission stakeholders, and influence architecture and engineering standards. The role requires strong system design, backend development, security expertise, technical leadership, and the ability to operate in sensitive environments.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Design, develop, and support CIAM solutions using IBM Verify in hybrid on-premises and Azure environments. Implement authentication, federation, and access management capabilities; troubleshoot incidents; optimize platform performance; and collaborate with engineering and security teams to ensure scalable, compliant identity solutions.

Build and mature WHOOP’s Security Architecture practice by establishing governance, standards, reference architectures, and reusable security patterns. Provide architectural guidance across application, cloud, infrastructure, API, identity, networking, AI, and enterprise systems. Lead threat modeling and architecture reviews, assess vendor security, translate compliance requirements into engineering controls, mentor teams, document guidance, and advise leaders on security strategy and risk-based decisions.

Designs and improves enterprise security across endpoints, SaaS, identity, infrastructure-as-code, AI applications, and corporate networks. Responsibilities include Terraform and GitOps automation, endpoint lifecycle security, AI and MCP governance, third-party risk assessments, threat modeling, detection and response collaboration, and security control assessments. The role requires strong Python or Go skills, endpoint and identity expertise, macOS security experience, and the ability to communicate and guide distributed engineering teams.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Build and maintain custom security tools, middleware, automation, APIs, integrations, dashboards, and security workflows. Integrate identity, endpoint, SIEM, SaaS, and other security platforms using APIs, cloud services, containers, and CI/CD. Translate security policies into secure, code-driven solutions while supporting SOAR, continuous monitoring, compliance, and cross-functional collaboration.

Translates compliance guidelines into business requirements, technical specifications, and security frameworks. Collaborates with internal teams, assessors, sales, project managers, support, engineering, and customers to understand web-scale systems, meet security obligations, integrate solutions, mitigate risks, and support go-live activities. Provides guidance on security controls, DDoS mitigation, network monitoring, incident escalation, threat detection, and security documentation.

Harden and maintain AWS GovCloud, Microsoft GCC High, cloud, endpoint, container, and CI/CD environments for defense applications. Investigate vulnerabilities, secure software supply chains, lead threat modeling, enforce configuration and patching policies, monitor SIEM and cloud security alerts, and support federal compliance with CMMC, NIST, and FedRAMP standards. Collaborate across product, platform, and compliance teams to integrate security into the SDLC and support incident response.

Designs, implements, and secures enterprise network infrastructure, including firewalls, trust zones, routing, switching, VPNs, wireless, load balancers, and data center networks. Leads network and security projects, performs technical planning and packet-level analysis, supports network operations at Tier 2, documents implementations, gathers stakeholder requirements, and mentors junior engineers. Ensures solutions consider NIST 800-171 compliance and contributes to network automation using tools such as Python, Ansible, and Terraform.

Designs and leads enterprise cybersecurity architecture across network, cloud, endpoint, identity, and data environments. Develops security strategies, governance frameworks, and controls; conducts risk assessments, vulnerability management, penetration testing, and incident response. Oversees security tool integration, regulatory compliance, third-party risk, and secure development practices. Provides technical leadership, mentoring, and cross-functional guidance to protect business-critical systems and minimize cyber risk.

Lead enterprise vulnerability management and security configuration programs. Analyze vulnerabilities, assess business risk, develop remediation and mitigation strategies, manage exceptions, and engineer automated configuration compliance capabilities. Partner with infrastructure, cloud, application, engineering, and security teams to improve cyber risk visibility and security posture. Serve as a subject matter expert, technical escalation point, and mentor while translating complex findings into actionable recommendations for technical and business stakeholders.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Deploys and operates Axonius Asset Cloud for cyber asset management, exposure management, and risk-based vulnerability prioritization. Builds integrations, unified asset inventories, correlation models, dashboards, and automated remediation workflows. Supports CNAPP and cloud security operations, vulnerability remediation tracking, platform maintenance, scripting, API integrations, and client engagements. Requires cybersecurity engineering experience, Axonius or comparable CAASM expertise, vulnerability management knowledge, and automation skills.

Leads regional enterprise security sales by serving as a cloud security expert, shaping opportunities, advising account teams, managing executive relationships, and orchestrating technical teams and partners. Conducts architecture reviews, demos, proof-of-concepts, pilots, ROI/TCO analyses, and consultative engagements to promote Microsoft security solutions, Zero Trust adoption, and customer business outcomes.

Leads architecture and implementation of Microsoft Red Team visibility, telemetry, monitoring, detection, alerting, deconfliction, and operational security capabilities. Designs scalable services and data pipelines, maintains authoritative operational asset inventories, identifies systemic security gaps, and drives durable engineering solutions. Provides hands-on technical leadership, architecture reviews, debugging, incident response, mentorship, and cross-organizational influence while enabling authentic Red Team operations with strong defensive visibility and control.