Top Hybrid Cybersecurity Jobs in Boston, MA

Design and implement secure AWS infrastructure, integrate development, operations, and security practices, automate infrastructure with CloudFormation and Terraform, assess vulnerabilities, manage incident remediation, and deploy scalable CI/CD solutions using Jenkins and GitLab. The role also involves applying cybersecurity tools, troubleshooting security infrastructure, analyzing data, advising clients, and leading others while maintaining professional and technical standards.

Lead cybersecurity risk and compliance engagements, develop and implement compliance strategies, oversee audits, advise on AML/financial-crime controls, coach teams, validate client outcomes, and promote compliance culture across organizations.

Designs and implements secure AWS infrastructure, integrating development, operations, and security practices. Automates infrastructure with CloudFormation and Terraform, conducts vulnerability assessments, implements security controls, manages incident remediation, and supports CI/CD through Jenkins and GitLab. The role also uses Python, CrowdStrike, and Palo Alto Networks while collaborating with clients and technical teams to improve cybersecurity, reliability, and infrastructure performance.

Designs and automates application, cloud, and infrastructure security controls across CI/CD pipelines and public cloud environments. Responsibilities include penetration testing, red teaming, threat detection engineering, incident response, forensic collection, AI security governance, and secure software design. Partners with engineering and SRE teams on Terraform, Docker, Kubernetes, and Zero Trust security, while mentoring junior engineers and supporting compliance with PCI-DSS, SOC, and DORA standards.

Own security and privacy compliance programs, audits, policies, controls, evidence pipelines, continuous monitoring, and automation. Lead framework gap assessments, control design, risk analysis, and auditor relationships. Build sustainable GRC workflows across SaaS and cloud environments, establish KPIs and SLAs, mentor practitioners, delegate work, and drive technical direction without formal authority.

Designs and maintains cloud security controls across AWS and Azure, including Terraform and Python automation, posture hardening, and account guardrails. Owns vulnerability management, detection tuning, SIEM and log-ingestion pipelines, container scanning, and incident response participation. Partners with engineering and product teams on architecture, authentication, application security, and code reviews. Supports FedRAMP and other compliance programs through documentation, evidence collection, monitoring, training exercises, and customer security questionnaires.

Lead strategy and execution for CrowdStrike's Identity Protection product: detect and prioritize identity risk across human and non-human identities, define identity graph models, drive remediation automation and verification, and surface identity risk across the security stack. Use AI agents and rapid prototyping to iterate specs and partner with engineering, customers, and stakeholders to deliver usable identity risk solutions.

Partners with Sales to advise enterprise customers on cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Leads discovery, solution design, technical demonstrations, proof-of-value and proof-of-concept engagements, customer validation, executive discussions, documentation, and technical training. Requires strong cybersecurity and enterprise networking expertise, customer-facing presales experience, and the ability to connect technical capabilities with business outcomes. Travel is typically 25–50%.

Monitors and investigates security events and alerts across SIEM, IDS/IPS, malware prevention, and system-log sources. The analyst detects and analyzes threats, responds to incidents, remediates or escalates issues, coordinates with business and technology teams, maintains case records, monitors security-product tickets, and develops documentation, reports, procedures, and security-control expertise.

Secures enterprise business applications and integrations, including NetSuite and SAP SuccessFactors. Reviews configurations, access models, APIs, data flows, IAM, logging, and cloud controls; performs risk assessments, threat modeling, and audit support; aligns controls with FedRAMP, ISO 27001, SOC 2, and SOX requirements. Partners with application owners, cloud teams, IT, security, and business stakeholders to implement least privilege, secure configurations, compensating controls, and remediation plans.

Lead and mature the companys information security program: maintain ISMS and certifications, run SOC operations (SIEM/EDR), integrate security into SDLC, manage vulnerability and incident response, oversee third-party/vendor risk, conduct security testing and training, and support regulatory cybersecurity QMS documentation and submissions for FDA, EU MDR, NIST standards.

Leads daily Governance, Risk, and Compliance operations, including enterprise risk reviews, third-party risk assessments, security and privacy compliance, risk-register management, audit support, policy governance, metrics reporting, and incident-response compliance activities. The role manages team workload, oversees complex assessments, partners with Legal, IT, Security, and Product teams, and strengthens organizational resilience through scalable GRC processes and SSDLC governance.