Top Senior Cyber Security Jobs in Boston, MA

Leads enterprise security engineering, architecture, cloud and security platform operations, AI security governance, incident response, compliance, and technical team development. Designs controls for AI systems, manages cybersecurity technologies, supports audits and regulatory engagements, mentors security staff, and serves as the designated backup to the CISO. The role combines strategic leadership with hands-on technical execution and executive collaboration.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Lead client engagements to design and implement secure network architectures (Zero Trust, SASE/SSE, segmentation, OT security). Manage teams, mentor staff, oversee enterprise network security configurations, and ensure project delivery and quality. Collaborate with clients to align security strategies with business objectives and drive innovation in network security practices.

The Senior Security Engineering Manager oversees security policy compliance, manages incident response, tracks threats, and coordinates investigations, ensuring operational stability.

Design and build real-time security detection engines and streaming analytics using Apache Flink and Kafka. Develop high-performance security APIs and microservices in Go and Node.js, architect Kubernetes-based security solutions, and build petabyte-scale data pipelines. Lead technical design, collaborate with security teams, and mentor junior engineers.

Senior security engineer responsible for developing automation and tooling, building and deploying security solutions, conducting incident response and proactive threat hunting, supporting investigations through data analysis, and advising development teams. Must document solutions, participate in agile teams, mentor juniors, and continuously research evolving security threats.

Lead AI security strategy and guardrails, design and review AI gateways and tooling, scale InfoSec review processes, reduce AI-driven security noise, drive remediation and investigations, and mentor security and platform engineers.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Leads and supports offensive security consulting engagements, including network, web application, wireless, social engineering, red team, and purple team testing. Evaluates controls and security configurations, performs cybersecurity assessments, recommends remediation, and presents findings to technical and executive stakeholders. Supports client program execution, metrics, issue remediation, and continuous improvement. Mentors junior consultants and contributes to cybersecurity practice development, methodology innovation, and thought leadership.

Lead system security engineering for secure platforms across architecture, design, integration, and deployment. Define system-level requirements, identify and mitigate technical risks, develop security documentation and program protection plans, mentor engineers, and communicate technical results to sponsors and program leadership. Support evaluation, accreditation, and implementation of cryptographic and supply-chain protections.

Lead design, integration, and deployment of trustworthy secure platforms. Define system security requirements, architect cybersecurity solutions, evaluate systems for cyber, reverse-engineering, and supply-chain threats, develop security documentation per government requirements, configure and monitor security infrastructure, mentor junior engineers, and present technical results to stakeholders.

Own OT security engineering for laboratory instruments, automation, and building systems. Translate OT security architecture into controls (segmentation, identity, PAM, PKI), build detection and response, validate vendor integrations, run vulnerability and lifecycle management, and mentor engineers while partnering with SOC, OT engineering, and lab operations.

Lead and provide technical oversight for complex network and security implementations, manage engineering teams, run design workshops, support presales, ensure best practices and successful project delivery, and maintain strong client relationships while fostering team development.

Designs, develops, deploys, and supports enterprise security automations, custom tools, integrations, and workflows. Responsibilities include Python-based application and API development, vulnerability enrichment, incident response automation, IAM administration, Linux and Docker platform support, and administration of SIEM, SOAR, endpoint, cloud, network, and other security technologies. The role also troubleshoots integrations, monitors operational health, supports security teams, and maintains resilient, secure configurations across enterprise systems.

Lead security architecture for a secure multi-cluster service mesh platform. Design authentication, authorization, tenant isolation, encryption, credential lifecycle, and service-to-service trust. Establish secure development patterns, threat modeling, testing, security quality gates, incident response, vulnerability discovery, and compliance practices. Implement and review Go and gRPC security systems, mentor engineers, guide technical direction, and collaborate with customers and cross-functional teams. Requires international travel to the Middle East and geopolitical hot zones up to 25% annually.

Own security and infrastructure for a fintech payments platform, with security comprising roughly two-thirds of the role. Responsibilities include cloud and application security, IAM, secrets management, threat modeling, detection engineering, incident response, vulnerability management, compliance, privacy, CI/CD, infrastructure as code, observability, reliability, backups, disaster recovery, and on-call operations. The role reports to the CTO and will establish the security function as the company’s founding security hire.

Leads the architecture, implementation, integration, automation, testing, and optimization of ServiceNow and Veza identity security solutions. Advises clients on identity governance, authorization visibility, access analytics, compliance, and cybersecurity strategy. Conducts workshops, demonstrations, training, troubleshooting, and technical delivery from discovery through deployment. Develops scripts, applications, dashboards, and workflows while mentoring junior staff and supporting proposals, estimates, and sales opportunities.

Architect and engineer multi-tenant SIEM, SOAR, EDR, telemetry, and cloud security platforms for managed security services. Build detection content, automate response workflows, optimize log ingestion, and secure customer connectivity. Lead technical discovery, onboarding, security assessments, remediation planning, escalations, solution design, and customer advisory engagements. Create architectures, runbooks, and documentation while shaping the MSSP technology strategy.

Lead enterprise AI security architecture, strategy, governance, and secure-by-design implementation across cloud, hybrid infrastructure, software, and AI/ML environments. Design security patterns for LLM hosting, agentic systems, vector databases, and inference endpoints; translate regulatory requirements into technical standards; review complex architectures; implement AI security guardrails and policy enforcement; advise engineering and product teams; and mentor teams while influencing senior stakeholders.

Lead pre-sales security architecture engagements by designing and validating defense-in-depth solutions across hybrid, cloud, application, identity, endpoint, network, and data environments. Conduct security assessments, create remediation roadmaps, integrate security platforms, and support DevSecOps, SOC, detection engineering, incident response, compliance, and risk programs. Collaborate with sales, engineering, clients, and executive stakeholders to communicate technical trade-offs and deliver scalable enterprise security strategies.

Designs, implements, and operates SASE and ZTNA architecture across GCCH and commercial environments. Owns identity-driven access controls, session management, telemetry, compliance mapping, dashboards, and audit evidence. Serves as the senior escalation point for incidents, performs root-cause analysis, integrates device posture and SOAR workflows, develops AI-enabled automations, collaborates with identity, network, compliance, and vendors, and mentors junior engineers.

Owns the company-wide IT and cybersecurity program, including SOC 2 compliance, cloud security, penetration-test remediation, business continuity testing, endpoint management, access controls, onboarding and offboarding, AI security governance, vendor reviews, security training, incident response, and employee IT support. The role partners with engineering, HR, Finance, leadership, auditors, and healthcare customers while managing security across AWS, Heroku, Cloudflare, Google Workspace, GitHub, and related tools.

Build and automate security infrastructure across AWS and Kubernetes, including cryptographic material lifecycle, telemetry pipelines, policy-as-code, compliance monitoring, and incident-response tooling. Develop agentic AI workflows using coding assistants, MCP integrations, and custom harnesses. Apply threat modeling and secure architecture review while partnering with engineering, risk, auditors, vendors, and clients. The role emphasizes production software, cloud-native automation, continuous control monitoring, and eliminating manual security toil.

Build and operate a reliable security platform across hundreds of AWS environments. Responsibilities include security telemetry and OpenSearch infrastructure, GitOps deployments, Kubernetes and AWS security controls, cross-account and multi-region architecture, Python automation, and agentic AI workflows. The role participates in on-call support, security incident enablement, audit evidence automation, and reliability improvements while collaborating with Security Operations, Risk, and SRE teams.

Senior technical authority for security architecture, engineering design, and enterprise risk mitigation. Designs, implements, and configures security solutions across firewalls, endpoints, monitoring, vulnerability management, incident response, and forensics. Leads tactical implementation, performs assessments, product evaluations, project support, and supports the Information Security program and strategic objectives.