Top Senior Cyber Security Jobs in Boston, MA

Designs and implements security for embedded consumer electronics products, including ARM TrustZone applets, cryptographic device identity, secure boot, firmware protection, key management, and trust chains. Defines security requirements, performs assessments and testing, supports compliance audits, mitigates vulnerabilities, and advises engineering teams through architecture and code reviews. Collaborates with firmware, DevOps, cloud, manufacturing, and program management teams to strengthen product security and incident response.

Supports enterprise cybersecurity through security configuration, identity and access management, vulnerability management, cloud security, audits, penetration testing, risk analysis, security monitoring, and remediation coordination. The role diagnoses escalated security issues, maintains dashboards and metrics, supports compliance initiatives, collaborates with technical and business teams, and mentors Help Desk Analysts. Responsibilities span Azure, AWS, on-premises infrastructure, applications, and enterprise security systems.

Provides cybersecurity consulting and professional services for enterprise Cisco customers. Designs, documents, implements, automates, troubleshoots, and supports Cisco security solutions across cloud and on-premises environments. Leads customer engagements, technical workshops, training, project delivery, and engineering teams while advising on firewall, VPN, SASE, zero trust, and network security architectures. Builds trusted customer relationships, identifies future opportunities, and contributes to proposals and statements of work.

Build and scale backend security platform services, including authentication, authorization, identity infrastructure, permission systems, and data models. Lead cross-team technical initiatives, standardize security solutions, collaborate with compliance and mission stakeholders, and influence architecture and engineering standards. The role requires strong system design, backend development, security expertise, technical leadership, and the ability to operate in sensitive environments.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Provides technical leadership for enterprise AI security, designing secure AI platform architectures, vetting frameworks, identity and posture management for AI agents, and preventative security guardrails. The role requires building scalable security systems with Python, Go, or Java, managing infrastructure as code, addressing cloud and container security, mentoring engineers, and advising leadership on AI security risks.

The Senior Security Engineer architects, implements, and supports enterprise security capabilities across vulnerability management, cloud security, identity, endpoint, application security, and security architecture. The role leads security initiatives, resolves complex platform issues, develops automation and AI-assisted workflows, establishes documentation and reporting standards, and mentors security engineers and analysts while partnering across infrastructure, application, network, cloud, and security teams.

Designs, deploys, troubleshoots, and supports enterprise network and security infrastructure, including routing, switching, firewalls, wireless, cloud networking, VPNs, and data center services. The role analyzes operational incidents, implements remediation, maintains documentation, communicates with management, supports roadmap decisions, and participates in on-call rotations. It requires extensive experience with multi-vendor network security technologies, cloud platforms, and customer-facing technical work.

Designs and improves enterprise security across endpoints, SaaS, identity, infrastructure-as-code, AI applications, and corporate networks. Responsibilities include Terraform and GitOps automation, endpoint lifecycle security, AI and MCP governance, third-party risk assessments, threat modeling, detection and response collaboration, and security control assessments. The role requires strong Python or Go skills, endpoint and identity expertise, macOS security experience, and the ability to communicate and guide distributed engineering teams.

Designs and integrates secure information systems, cloud, and defense architectures; leads federal NIST RMF and ATO processes; implements security controls; performs vulnerability, threat, and risk assessments; advises engineering and program teams; and manages continuous monitoring, compliance, audit, and patch-management activities.

Leads technical security sales engagements through demonstrations, proofs of concept, hackathons, architecture workshops, and customer consultations. Designs secure, scalable cloud and hybrid architectures, resolves technical blockers, and advises customers on Microsoft Security solutions, including Defender and Sentinel. Develops security posture recommendations, supports XDR, zero trust, cloud security, and AI adoption strategies, while influencing technical decisions and representing Microsoft in developer communities.

Owns end-to-end security engineering, including risk identification, secure-by-default libraries, least-privilege guardrails, developer machine hardening, supply-chain security, and identity and authentication protections. Partners with compliance to implement effective controls for healthcare requirements such as HIPAA and HITRUST. The role requires production software engineering and security expertise, with broad autonomy in a fully remote environment.

Identify and remediate vulnerabilities across products and AWS infrastructure, respond to security incidents, close security tickets, integrate security controls into CI/CD, review code and infrastructure, support SOC 2 and CASA compliance, and strengthen access management, secrets handling, and cloud hardening.

Lead enterprise vulnerability management and security configuration programs. Analyze vulnerabilities, assess business risk, develop remediation and mitigation strategies, manage exceptions, and engineer automated configuration compliance capabilities. Partner with infrastructure, cloud, application, engineering, and security teams to improve cyber risk visibility and security posture. Serve as a subject matter expert, technical escalation point, and mentor while translating complex findings into actionable recommendations for technical and business stakeholders.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Architect and engineer multi-tenant SIEM, SOAR, EDR, telemetry, and cloud security platforms for managed security services. Build detection content, automate response workflows, optimize log ingestion, and secure customer connectivity. Lead technical discovery, onboarding, security assessments, remediation planning, escalations, solution design, and customer advisory engagements. Create architectures, runbooks, and documentation while shaping the MSSP technology strategy.

Leads regional enterprise security sales by serving as a cloud security expert, shaping opportunities, advising account teams, managing executive relationships, and orchestrating technical teams and partners. Conducts architecture reviews, demos, proof-of-concepts, pilots, ROI/TCO analyses, and consultative engagements to promote Microsoft security solutions, Zero Trust adoption, and customer business outcomes.

Provides security engineering and architecture expertise for FedRAMP Cloud Service Provider assessments. Reviews full-stack architectures, authorization packages, security controls, policies, assessment reports, vulnerability scans, and penetration tests for compliance with FedRAMP, NIST, FISMA, RMF, and agency requirements. Leads vendor interviews, identifies technical and documentation gaps, supports continuous monitoring, advises government program leaders and CISOs, and provides security recommendations for cloud systems.

Implement and configure SailPoint IdentityIQ and Identity Security Cloud solutions, including identity lifecycle management, access certifications, provisioning, integrations, workflows, rules, and application onboarding. Lead or support IIQ-to-ISC migrations, gather client requirements, create technical documentation, troubleshoot deployments, and support UAT and hypercare. The role also involves client interaction, mentoring junior engineers, and contributing to reusable delivery assets in a remote consulting environment.

Leads enterprise security engineering, architecture, cloud and security platform operations, AI security governance, incident response, compliance, and technical team development. Designs controls for AI systems, manages cybersecurity technologies, supports audits and regulatory engagements, mentors security staff, and serves as the designated backup to the CISO. The role combines strategic leadership with hands-on technical execution and executive collaboration.

Lead Prelim’s security program across secure SDLC, application and cloud security, IAM, incident response, endpoint management, vendor risk, security reviews, and SOC 2 Type II compliance. Partner with DevOps and engineering, coordinate penetration testing, develop policies and risk roadmaps, manage audits and customer questionnaires, and improve detection and access controls. The role is the company’s first dedicated security hire and requires strong judgment, communication, and hands-on technical skills.

Supports cybersecurity and systems security engineering for mission-critical NC3 and weapon systems. Responsibilities include RMF authorization and accreditation, security requirements, architecture reviews, threat assessment, risk mitigation, cybersecurity strategy, vulnerability scanning, DevSecOps security reviews, contingency planning, and compliance with DoD and Air Force requirements. The role requires collaboration with government, contractor, vendor, and program management teams.

Own and advance cybersecurity for satellites, flight software, ground systems, mission networks, communication links, and AWS infrastructure. Responsibilities include security architecture, threat modeling, vulnerability management, incident response, IAM, SIEM detection engineering, network defense, cloud security, DLP, security assessments, awareness training, and compliance with CMMC Level 2, NIST 800-171, and ITAR/EAR requirements. The role collaborates with aerospace, software, systems, and compliance teams and requires expertise in mission-system security.

Secure Wiz’s products, CI/CD systems, and production cloud infrastructure through threat modeling, security reviews, vulnerability management, detection and response, cloud and Kubernetes security baselines, policy-as-code, and automation. Partner with engineering, DevOps, operations, and Federal teams to implement scalable security controls, remediate risks, support FedRAMP requirements, and promote secure-by-design development practices.