Top Hybrid Cybersecurity Jobs in Boston, MA

Build and maintain detection and response capabilities across enterprise, cloud, and product environments. Responsibilities include developing detections-as-code, triaging alerts, conducting incident response and digital forensics, threat hunting, automating workflows, supporting security data lakes and SIEM platforms, developing AI-driven security systems, participating in on-call rotations, and mentoring security engineers.

Manage cybersecurity incident response activities, including alert triage, threat analysis, forensic investigation, containment, recovery, remediation tracking, and attack-path reconstruction. Develop response workstreams for malware, phishing, credential abuse, and ransomware; prepare technical findings and executive summaries; improve response plans and playbooks; coordinate with clients and internal teams; and guide junior team members.

Manage SailPoint identity governance and access management workstreams, including provisioning, role design, lifecycle controls, access reviews, entitlement management, and policy enforcement. Analyze identity and authorization data to identify risks, recommend remediation, and configure integrations. Collaborate with clients and internal teams, track delivery milestones, review cybersecurity and privacy deliverables, apply AI-enabled tools, and mentor junior team members.

Lead security across data, cloud, applications, corporate systems, and AI platforms. Manage incident response, security monitoring, vulnerability management, automation, governance, regulated-data controls, vendor relationships, budget, and the security roadmap. Build and manage a security engineering team, partner with engineering and infrastructure teams, conduct control testing and tabletop exercises, support audit readiness, and report security posture and risks to leadership.

Lead the architecture, roadmap, and delivery of Tulip’s identity and access platform, including SSO, federation, SCIM provisioning, multi-tenant account structures, authorization, and access policy across AWS and Azure. Manage and develop a small software engineering team, maintain high code and operational standards, support architecture decisions, and drive responsible AI tooling adoption in development workflows.

Provides senior technical strategy for ServiceNow partners within Risk and Security practices. Responsibilities include co-creating reference architectures, reusable solution assets, AI-enabled capabilities, proofs of concept, technical workshops, partner enablement, architecture training, executive briefings, and thought leadership. The role mentors partner architects and pre-sales teams, supports joint business planning, influences pipeline, and improves partner practice maturity and commercialization.

The Security Analyst will monitor and investigate security alerts across endpoint, identity, cloud, and SaaS environments; manage the security operations queue; support incident response, threat hunting, vulnerability management, and phishing simulations; and coordinate with internal teams and external partners. The role also improves detection coverage, documentation, automation, and investigation workflows while participating in on-call support.

Manage the enterprise IT controls and access governance program across applications, infrastructure, developer platforms, and data services. Build risk-based control inventories, operate access reviews and certifications, track exceptions and remediation, establish metrics and executive reporting, and maintain audit-ready documentation. Partner with Security, IT, application owners, Finance, Legal, auditors, and business stakeholders to improve identity governance, privileged access, lifecycle management, segregation of duties, and control effectiveness. Use automation, APIs, analytics, and AI agents to improve governance efficiency and auditability.

This 11-week internship supports Liberty Mutual’s Cybersecurity and Technology Audit department. Responsibilities include interviewing personnel, performing audit testwork, analyzing results, communicating issues, and participating in IT risk assessments and control evaluations. Interns gain experience auditing internal control systems and may be considered for future career opportunities.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.