Top Hybrid Cybersecurity Jobs in Boston, MA

Design and implement application security controls across cloud environments, assess cloud architectures for vulnerabilities and identity risks, conduct security reviews and penetration testing, monitor security events, support incident response, and develop cloud security requirements. Translate technical findings into remediation recommendations, interpret risk data, collaborate with clients, and mentor junior team members.

Manages application security assessments and client delivery across cloud environments. Designs security controls for IaaS, PaaS, and SaaS platforms; reviews architectures for vulnerabilities and control gaps; conducts risk assessments and vulnerability testing; guides remediation and security tool usage; monitors emerging threats; coaches security teams; and communicates findings to technical and business stakeholders.

Partners with Sales to advise enterprise customers on cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Leads discovery, solution design, technical demonstrations, proof-of-value and proof-of-concept engagements, customer validation, executive discussions, documentation, and technical training. Requires strong cybersecurity and enterprise networking expertise, customer-facing presales experience, and the ability to connect technical capabilities with business outcomes. Travel is typically 25–50%.

Build and maintain scalable detection and response systems, security observability capabilities, AI-driven security automation, logging pipelines, and rule- or ML-based detections. The role includes incident response, threat hunting, security alert investigation, workflow automation, detection engineering, and participation in detection and response on-call rotations.

This 11-week internship supports Liberty Mutual’s Cybersecurity and Technology Audit department. Responsibilities include interviewing personnel, performing audit testwork, analyzing results, communicating issues, and participating in IT risk assessments and control evaluations. Interns gain experience auditing internal control systems and may be considered for future career opportunities.

Leads enterprise Zero Trust strategy across identity, device trust, access, DSPM, and content management security. Owns architecture, standards, governance, operating models, risk management, and cross-functional execution across Security, IT, Product, and Engineering. Builds or leads teams, influences technical leadership, supports audits and customer security reviews, and drives least-privilege access, continuous verification, device posture enforcement, and data-security controls.

Own customer security reviews, questionnaires, RFP responses, and due-diligence requests. Support SOC 2 Type II and ISO audits by coordinating evidence, auditor interactions, and remediation. Maintain security, privacy, and AI governance policies and controls, including frameworks such as ISO/IEC 42001 and NIST AI RMF. Partner with Product, Engineering, DevOps, Security, Sales, and Legal to explain cloud controls, manage customer trust requirements, and address control gaps.

Lead the global security Governance, Risk, and Compliance function, overseeing multi-framework audits, control governance, enterprise risk assessments, remediation, policy architecture, and compliance automation. Manage GRC specialists and the US regulated markets team while partnering with executives and cross-functional stakeholders. Drive compliance by design, AI-enabled continuous monitoring, evidence collection, security awareness, and regulatory alignment across ISO 27001, SOC, PCI DSS, FedRAMP, ITAR, and DoD IL4/5 requirements.

Develop and mature an enterprise insider threat program by identifying critical assets, mapping identities and access, analyzing behavioral and technical signals, supporting investigations, and improving detection capabilities. The consultant partners with cybersecurity, HR, Legal, Privacy, and business stakeholders to assess insider risk, define protection requirements, tune security tooling, develop monitoring strategies, and produce defensible analysis and executive reporting.

Develop and maintain data-protection features in CrowdStrike Falcon sensor on Windows, working across kernel and user mode. Implement filesystem minifilter drivers, AI-aware detection/protection logic, debug kernel issues, own features end-to-end, and collaborate with cross-functional teams to ship and support endpoint data security capabilities.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.