Top Hybrid Cybersecurity Jobs in Boston, MA

Design and implement cloud security controls across IaaS, PaaS, and SaaS environments. Conduct risk assessments, vulnerability reviews, security testing, and threat monitoring; support remediation of vulnerabilities and control gaps; document technical findings and requirements; advise clients on cloud security improvements; collaborate with technical teams; mentor junior staff; and build client relationships within PwC’s Advisory practice.

Provides senior technical strategy for ServiceNow partners within Risk and Security practices. Responsibilities include co-creating reference architectures, reusable solution assets, AI-enabled capabilities, proofs of concept, technical workshops, partner enablement, architecture training, executive briefings, and thought leadership. The role mentors partner architects and pre-sales teams, supports joint business planning, influences pipeline, and improves partner practice maturity and commercialization.

Provides senior technical strategy in ServiceNow’s Risk and Security practice, helping partners co-create reference architectures, reusable assets, AI-enhanced solutions, proofs of concept, training, and executive workshops. The role mentors partner architects and pre-sales teams, supports partner capability development, influences pipeline, contributes to thought leadership, and collaborates with product, engineering, sales, and partner teams. It does not perform platform configuration, development, implementation delivery, contract management, or daily partner relationship management.

The Security Analyst will monitor and investigate security alerts across endpoint, identity, cloud, and SaaS environments; manage the security operations queue; support incident response, threat hunting, vulnerability management, and phishing simulations; and coordinate with internal teams and external partners. The role also improves detection coverage, documentation, automation, and investigation workflows while participating in on-call support.

Supports federal security certifications and authorizations, including FedRAMP and DoD requirements. The role assesses and mitigates risks, validates security controls, manages audits and continuous monitoring, documents compliance, and partners with engineering, legal, finance, customers, auditors, and regulators. It also evaluates AI products for regulated customers and develops compliance automation.

Manage the enterprise IT controls and access governance program across applications, infrastructure, developer platforms, and data services. Build risk-based control inventories, operate access reviews and certifications, track exceptions and remediation, establish metrics and executive reporting, and maintain audit-ready documentation. Partner with Security, IT, application owners, Finance, Legal, auditors, and business stakeholders to improve identity governance, privileged access, lifecycle management, segregation of duties, and control effectiveness. Use automation, APIs, analytics, and AI agents to improve governance efficiency and auditability.

Build and maintain scalable detection and response systems, security observability capabilities, AI-driven security automation, logging pipelines, and rule- or ML-based detections. The role includes incident response, threat hunting, security alert investigation, workflow automation, detection engineering, and participation in detection and response on-call rotations.

This 11-week internship supports Liberty Mutual’s Cybersecurity and Technology Audit department. Responsibilities include interviewing personnel, performing audit testwork, analyzing results, communicating issues, and participating in IT risk assessments and control evaluations. Interns gain experience auditing internal control systems and may be considered for future career opportunities.

Own customer security reviews, questionnaires, RFP responses, and due-diligence requests. Support SOC 2 Type II and ISO audits by coordinating evidence, auditor interactions, and remediation. Maintain security, privacy, and AI governance policies and controls, including frameworks such as ISO/IEC 42001 and NIST AI RMF. Partner with Product, Engineering, DevOps, Security, Sales, and Legal to explain cloud controls, manage customer trust requirements, and address control gaps.

Lead the global security Governance, Risk, and Compliance function, overseeing multi-framework audits, control governance, enterprise risk assessments, remediation, policy architecture, and compliance automation. Manage GRC specialists and the US regulated markets team while partnering with executives and cross-functional stakeholders. Drive compliance by design, AI-enabled continuous monitoring, evidence collection, security awareness, and regulatory alignment across ISO 27001, SOC, PCI DSS, FedRAMP, ITAR, and DoD IL4/5 requirements.

Develop and maintain data-protection features in CrowdStrike Falcon sensor on Windows, working across kernel and user mode. Implement filesystem minifilter drivers, AI-aware detection/protection logic, debug kernel issues, own features end-to-end, and collaborate with cross-functional teams to ship and support endpoint data security capabilities.