Top Senior Cyber Security Jobs in Boston, MA

Build and operate central security systems, automation, tooling, and controls across cloud infrastructure, identity, access, products, partners, and vendors. Develop AI-assisted security workflows, lead external assessments through verified remediation, identify and validate vulnerabilities, guide engineering teams, and participate in incident response. The role requires production security engineering experience, strong programming skills, cloud security expertise, and fintech, payments, or crypto experience.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Leads a multi-team organization building AI-driven cybersecurity systems for endpoint and cloud environments. Owns technical strategy, roadmap, hiring, delivery, evaluation, and safe production deployment of AI models and autonomous defense agents. Oversees systems operating under strict endpoint resource limits and at cloud scale across trillions of events. Partners with engineering, product, threat intelligence, and executives while advancing security efficacy, reliability, and responsible AI adoption.

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Own and expand CivilGrid’s security program, including SOC 2 readiness, access controls, endpoint security, threat modeling, vulnerability management, incident response, and customer security reviews. Support AWS infrastructure, GIS servers, reliability practices, observability, SLOs, on-call operations, and post-incident reviews. Partner with engineering, IT, and leadership to embed security and reliability across the SDLC and production systems.

Leads enterprise AI Security and GenAI data protection, owning the AI Gateway from evaluation through deployment and ongoing operations. Designs controls for prompts, uploads, browser traffic, copilots, agents, and integrations; implements monitoring, coaching, redaction, quarantine, and blocking. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures effectiveness, supports audit readiness, and partners with business and technology teams to enable responsible AI adoption.

Designs, deploys, and operates global network access security using Forescout, Cisco ISE, 802.1X, MAB, RADIUS, and TACACS+. Responsibilities include troubleshooting authentication, managing ISE upgrades and certificates, enforcing segmentation and Zero Trust controls, securing corporate and manufacturing networks, and supporting Cisco access-layer infrastructure. The role also partners across security and networking teams, maintains documentation, supports change windows, and automates NAC operations.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.

Conduct research on vulnerabilities and risks in AI systems, develop hardware, software, and algorithmic protections for trustworthy AI, and collaborate across research, hardware, software, and product teams. Publish original research and present findings at conferences. The role requires deep expertise in a security area such as applied cryptography, programming languages, software systems, computer architecture, or AI/ML, along with experimental research and strong coding skills.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.

Assesses and mitigates security risks across applications, systems, networks, and cloud infrastructure. Conducts security assessments, identifies vulnerabilities and compromises, deploys mitigating controls, performs compliance investigations, and develops security guidance, policies, scripts, and tools. The role requires collaboration with IT, engineering, and business units, with emphasis on NIST frameworks, adversarial techniques, malware, intrusion management, FedRAMP, and CMMC environments.

Owns the security posture and architecture of Akamai’s globally distributed AI inference platform. Leads threat modeling, security standards, design reviews, cloud-native and application security, multi-tenant isolation, compliance readiness, incident response, and defenses against AI-specific threats such as prompt injection, model extraction, data poisoning, and adversarial attacks.

Own and improve network, firewall, cloud, endpoint, identity, email, and SaaS security controls. Responsibilities include firewall administration, VPNs, segmentation, secure architecture, traffic and log analysis, incident investigation, vulnerability remediation, security monitoring, technical project support, compliance evidence, and automation. The role collaborates with Infrastructure and DevOps teams, troubleshoots complex connectivity and security issues, and applies least-privilege, Zero Trust, and defense-in-depth principles.

Executes end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational environments. Develops offensive tooling, implants, and evasion tradecraft; operates and improves AI-driven security agents; discovers and exploits vulnerabilities; and communicates findings to customers and internal security teams. The role also contributes to operational playbooks, product hardening, detection improvements, and scalable offensive security practices.

Leads technical security sales engagements for K-12 and community college customers through demonstrations, workshops, whiteboarding, hackathons, and proofs of concept. Designs secure cloud and hybrid architectures, resolves technical blockers, advises on Zero Trust, XDR, AI security, and compliance, and supports production deployments. Builds relationships with developers, platform leaders, partners, and customer success teams while promoting Microsoft security, cloud, and AI solutions.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Leads regional enterprise security sales by serving as a cloud security expert, shaping opportunities, advising account teams, managing executive relationships, and orchestrating technical teams and partners. Conducts architecture reviews, demos, proof-of-concepts, pilots, ROI/TCO analyses, and consultative engagements to promote Microsoft security solutions, Zero Trust adoption, and customer business outcomes.

Provides technical pre-sales leadership for data security solutions, including demos, proofs of concept, architecture workshops, and secure cloud or hybrid deployments. Advises customers on data security posture, Microsoft Purview, AI application security, and scalable architectures. Builds developer and platform-lead relationships, resolves technical blockers, develops technical win strategies, and collaborates with product engineering. Represents Microsoft in customer and developer communities.

Design, secure, administer, and improve on-premises, cloud, and hybrid infrastructure. Manage servers, networks, operating systems, virtualization, firewalls, endpoints, and monitoring tools. Strengthen security controls, investigate incidents with a third-party SOC, manage vulnerabilities and risks, maintain documentation, and lead infrastructure and security projects including upgrades, migrations, automation, and tool deployments.

Designs and implements secure architecture across cloud, on-premises, hybrid, application, infrastructure, and AI-enabled environments. Defines security controls, governance requirements, and enterprise guardrails; supports cloud transformation and emerging AI adoption. Leads architecture reviews, ensures regulatory and policy compliance, and collaborates with architecture, engineering, development, cybersecurity, compliance, risk, and operations teams to identify and mitigate security risks.

Serves as a senior technical authority for Splunk security solutions across the Americas Service Provider market. Advises CISOs and technical leaders, designs SIEM and security operations architectures, leads complex technical sales engagements, supports competitive displacement, mentors field teams, and provides customer and market insights to product and engineering organizations.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Owns and improves Microsoft security platforms across Azure, Microsoft 365, and hybrid infrastructure. Implements Zero Trust, identity, endpoint, application, cloud, and data security controls; develops automation with PowerShell, Graph, KQL, APIs, Bicep, and Terraform; integrates security telemetry; supports detection and incident response; documents controls for audits and compliance; mentors engineers and partners with platform teams.