Top Hybrid Cybersecurity Jobs in Boston, MA

Deploy, configure, and manage Palo Alto Networks XSIAM for threat detection and response. Develop detection rules, use cases, and playbooks; onboard data sources and integrate security tools; analyze cybersecurity challenges; support clients; and mentor junior team members.

Leads cloud security advisory engagements across IaaS, PaaS, and SaaS environments. Develops security strategies, architectures, controls, monitoring, and incident response processes; directs risk assessments and vulnerability testing; advises executive clients; drives business development and thought leadership; and mentors security leaders and teams.

Leads cloud security engagements across IaaS, PaaS, and SaaS environments. Designs security architecture and controls, conducts risk assessments and vulnerability testing, manages monitoring and incident response, tracks remediation, and develops technical deliverables. The manager coaches team members, oversees project quality and timelines, addresses stakeholder issues, and identifies opportunities to improve cloud security through automation and emerging technologies.

Lead application security and DevSecOps strategy across cloud, on-premises, hybrid, and traditional product environments. Embed security controls into software development and CI/CD, establish secure-by-default standards, automate policy and infrastructure security, protect software supply chains, and address application, cloud, identity, API, AI, and endpoint risks. Partner across engineering, product, operations, SecOps, and GRC to prioritize vulnerabilities, support incident response, maintain compliance evidence, and drive measurable security adoption.

Leads the DevSecOps and application security function, managing the team, program strategy, roadmap, tooling, vendors, and budget. Establishes security-by-design practices, threat modeling, secure development guidance, and training. Governs application and software supply-chain security across CI/CD, cloud, containers, infrastructure, APIs, and on-premises environments. Oversees vulnerability management, security testing, remediation, reporting, and risk processes while partnering with engineering, IT, cloud, SecOps, GRC, and architecture teams.

Develop and maintain data-protection features in CrowdStrike Falcon sensor on Windows, working across kernel and user mode. Implement filesystem minifilter drivers, AI-aware detection/protection logic, debug kernel issues, own features end-to-end, and collaborate with cross-functional teams to ship and support endpoint data security capabilities.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.

Designs and automates application, cloud, infrastructure, and AI security controls across CI/CD pipelines and public-cloud environments. Conducts penetration testing, red teaming, source-code audits, and cloud exploitation. Leads incident containment, forensic collection, threat detection engineering, and SIEM automation. Partners with software engineering and SRE teams on secure architecture, Zero Trust, container security, and Infrastructure-as-Code scanning while mentoring junior engineers and aligning controls with financial-sector compliance standards.

An 11-week Cybersecurity and Technology Audit internship supporting internal control audits. Responsibilities include interviewing personnel, performing audit testwork, analyzing results, communicating issues, and participating in IT risk assessments and control evaluations. The role offers real-world audit experience and potential future career opportunities.

Own security and privacy compliance programs, audits, policies, controls, evidence pipelines, continuous monitoring, and automation. Lead framework gap assessments, control design, risk analysis, and auditor relationships. Build sustainable GRC workflows across SaaS and cloud environments, establish KPIs and SLAs, mentor practitioners, delegate work, and drive technical direction without formal authority.

Designs and maintains cloud security controls across AWS and Azure, including Terraform and Python automation, posture hardening, and account guardrails. Owns vulnerability management, detection tuning, SIEM and log-ingestion pipelines, container scanning, and incident response participation. Partners with engineering and product teams on architecture, authentication, application security, and code reviews. Supports FedRAMP and other compliance programs through documentation, evidence collection, monitoring, training exercises, and customer security questionnaires.

Partners with Sales to advise enterprise customers on cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Leads discovery, solution design, technical demonstrations, proof-of-value and proof-of-concept engagements, customer validation, executive discussions, documentation, and technical training. Requires strong cybersecurity and enterprise networking expertise, customer-facing presales experience, and the ability to connect technical capabilities with business outcomes. Travel is typically 25–50%.

Monitors and investigates security events and alerts across SIEM, IDS/IPS, malware prevention, and system-log sources. The analyst detects and analyzes threats, responds to incidents, remediates or escalates issues, coordinates with business and technology teams, maintains case records, monitors security-product tickets, and develops documentation, reports, procedures, and security-control expertise.