Top Cyber Security Jobs in Boston, MA

Leads enterprise security engineering, architecture, cloud and security platform operations, AI security governance, incident response, compliance, and technical team development. Designs controls for AI systems, manages cybersecurity technologies, supports audits and regulatory engagements, mentors security staff, and serves as the designated backup to the CISO. The role combines strategic leadership with hands-on technical execution and executive collaboration.

As a Security Engineer, you will conduct security assessments, develop security tools, perform architecture reviews, and collaborate on advanced security research.

Lead and grow a security engineering team to design and operate cloud-native security controls, drive DevSecOps practices, conduct threat modeling and incident response, partner cross-functionally on security roadmaps, and ensure compliance with frameworks (NIST, SOC 2, ISO, etc.). Responsible for vulnerability management, identity and access controls, observability/SIEM, and security automation.

Lead client engagements to design and implement secure network architectures (Zero Trust, SASE/SSE, segmentation, OT security). Manage teams, mentor staff, oversee enterprise network security configurations, and ensure project delivery and quality. Collaborate with clients to align security strategies with business objectives and drive innovation in network security practices.

The Senior Security Engineering Manager oversees security policy compliance, manages incident response, tracks threats, and coordinates investigations, ensuring operational stability.

Secure LLMs, generative AI systems, ML infrastructure, training pipelines, and AI applications. Responsibilities include threat modeling, architecture reviews, security controls, hardening, vulnerability remediation, data privacy, incident response runbooks, vendor reviews, governance, policy development, and AI security training. The role also supports proof-of-concept security solutions and monitors emerging AI threats.

Design, implement, and support enterprise identity and access management using Microsoft Entra. Build controls for Conditional Access, MFA, identity governance, privileged access, authentication modernization, and Zero Trust. Develop PowerShell automation for identity lifecycle and governance, partner with technical and business teams, improve security operations, and mentor engineers. The role also includes on-call participation and occasional after-hours work.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Build and operate security log pipelines, SIEM detections, endpoint controls, security automation, and internal tooling across AWS, macOS, Windows, CI/CD, and infrastructure repositories. Develop primarily in Python, implement Terraform-based infrastructure and policy-as-code safeguards, integrate security tools through APIs, and embed scanning and secrets detection into developer workflows. Own the reliability and coverage of security platforms while independently driving projects and implementing fixes directly in systems managed by other teams.

Support enterprise security sales by identifying customer requirements, demonstrating Datadog security solutions, providing technical expertise during evaluations and proof-of-value initiatives, and developing proposals and sales materials. The role partners with sales, product, and engineering teams, tracks security trends and vulnerabilities, influences product development, and represents Datadog at industry events. Travel up to 30% is required.

Own the security and identity architecture for CDW’s MyCDW ServiceNow platform. Lead consolidation of Entra, Okta, and ServiceNow authentication; architect SailPoint-to-Entra IGA migration; define RBAC, lifecycle, certification, governance, and compliance controls; and guide threat modeling, monitoring, risk reduction, and remediation. Partner across technology and compliance teams, lead IAM and security engineers, manage vendors, and develop strategic roadmaps for secure, cost-effective platform transformation.

Design and build real-time security detection engines and streaming analytics using Apache Flink and Kafka. Develop high-performance security APIs and microservices in Go and Node.js, architect Kubernetes-based security solutions, and build petabyte-scale data pipelines. Lead technical design, collaborate with security teams, and mentor junior engineers.

Lead and mentor a small IT security engineering team to deploy and operate enterprise-grade Zero Trust security across networks, endpoints, applications, and cloud. Drive Customer Zero initiatives, manage cross-functional security projects, optimize policies (SSL decryption, segmentation, access control), and serve as an internal subject-matter expert.

Senior security engineer responsible for developing automation and tooling, building and deploying security solutions, conducting incident response and proactive threat hunting, supporting investigations through data analysis, and advising development teams. Must document solutions, participate in agile teams, mentor juniors, and continuously research evolving security threats.

Lead applied research on agentic AI for cybersecurity: develop efficient post-trained models, agent designs, and rigorous evaluation/verification. Partner with security teams to translate research into products, run experiments, and publish novel techniques.

Lead AI security strategy and guardrails, design and review AI gateways and tooling, scale InfoSec review processes, reduce AI-driven security noise, drive remediation and investigations, and mentor security and platform engineers.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Designs and reviews security architectures for applications, networks, databases, operating systems, SAP, cloud environments, and service providers. Partners with business and IT stakeholders throughout project lifecycles to identify risks, define controls, document solutions, and ensure requirements are delivered on time and within budget. Maintains security procedures, recommends improvements, and supports information governance, policy development, hardening, and compliance with frameworks including NIST and NERC CIP. Global travel may be required.

Leads and supports offensive security consulting engagements, including network, web application, wireless, social engineering, red team, and purple team testing. Evaluates controls and security configurations, performs cybersecurity assessments, recommends remediation, and presents findings to technical and executive stakeholders. Supports client program execution, metrics, issue remediation, and continuous improvement. Mentors junior consultants and contributes to cybersecurity practice development, methodology innovation, and thought leadership.

The Network Security Architect will assess network security, guide teams, enhance security policies, design network solutions, and mentor engineers while aligning with a Zero Trust Strategy.

Lead system security engineering for secure platforms across architecture, design, integration, and deployment. Define system-level requirements, identify and mitigate technical risks, develop security documentation and program protection plans, mentor engineers, and communicate technical results to sponsors and program leadership. Support evaluation, accreditation, and implementation of cryptographic and supply-chain protections.

Lead design, integration, and deployment of trustworthy secure platforms. Define system security requirements, architect cybersecurity solutions, evaluate systems for cyber, reverse-engineering, and supply-chain threats, develop security documentation per government requirements, configure and monitor security infrastructure, mentor junior engineers, and present technical results to stakeholders.

Own OT security engineering for laboratory instruments, automation, and building systems. Translate OT security architecture into controls (segmentation, identity, PAM, PKI), build detection and response, validate vendor integrations, run vulnerability and lifecycle management, and mentor engineers while partnering with SOC, OT engineering, and lab operations.

Lead and provide technical oversight for complex network and security implementations, manage engineering teams, run design workshops, support presales, ensure best practices and successful project delivery, and maintain strong client relationships while fostering team development.

Designs and governs enterprise identity security architectures using ServiceNow and Veza. Integrates identity governance, authorization visibility, CMDB, IRM, SecOps, and external identity platforms across hybrid and multi-cloud environments. Establishes least-privilege, zero-trust, compliance, and identity governance frameworks for human and non-human identities. Leads architecture workshops, solution reviews, client advisory discussions, delivery oversight, troubleshooting, proposals, and technical mentoring.