Top Hybrid Cybersecurity Jobs in Boston, MA

Design and implement secure AWS-based systems, integrate DevSecOps practices, manage security incidents, run vulnerability assessments, and support CI/CD using CloudFormation, Terraform, GitHub, and Jenkins while collaborating with clients and cross-functional teams.

Provide regulatory compliance guidance and cybersecurity risk management to clients. Conduct compliance risk assessments and audits, implement frameworks (ISO/IEC 27001, NIST CSF), develop compliance programs, analyze data for insights, lead training on AML and financial crime prevention, and build client relationships while upholding professional standards.

Lead strategy and roadmap for Agentic Identity Management (AIM), validate product-market fit, drive commercialization and adoption, partner cross-functionally, mentor product teams, and measure product and business success.

Lead Imprivatas Enterprise Access Management Cloud product lifecycle, define vision and roadmap, coordinate cross-functional delivery, drive adoption and growth, leverage AI/LLM tools for product workflows, and communicate strategy to stakeholders.

Lead technical pre-sales for enterprise security and identity solutions: perform discovery, design solutions, deliver demos/POVs/POCs, validate integrations, train customers, support sales cycles, and translate technical capabilities into business outcomes. Travel 25-50% as needed.

Lead and mature the companys information security program: maintain ISMS and certifications, run SOC operations (SIEM/EDR), integrate security into SDLC, manage vulnerability and incident response, oversee third-party/vendor risk, conduct security testing and training, and support regulatory cybersecurity QMS documentation and submissions for FDA, EU MDR, NIST standards.

Lead a small engineering team owning identity & access architecture and roadmap (SSO/OIDC/SAML, SCIM, multi-tenant isolation, authorization) across Tulip's multi-cloud environment. Stay hands-on in design and code, enforce automated tests and runbooks, partner with Security, Infrastructure, Product and Customer Success, and drive adoption of AI tooling in the SDLC to accelerate safe, reliable delivery.

Provide Tier 1/2 support across MacOS, Windows, and Linux; onboard employees; troubleshoot desktops, servers, and networks; assist with cybersecurity architecture, vulnerability scanning, incident response, audits, and compliance documentation.

Lead and scale global security engineering across application, AI, cloud, corporate, SecOps, and red team domains. Define secure architecture and governance, drive automated threat detection and AI security, personally perform adversarial testing, coordinate incident response and regulatory readiness, and report security posture to executives while building a high-performing team.

Lead strategy and execution for CrowdStrike's Identity Protection product: detect and prioritize identity risk across human and non-human identities, define identity graph models, drive remediation automation and verification, and surface identity risk across the security stack. Use AI agents and rapid prototyping to iterate specs and partner with engineering, customers, and stakeholders to deliver usable identity risk solutions.

Lead Klaviyo's infrastructure security architecture and programs: IAM, secrets management, network segmentation, vulnerability management, and security tooling. Build IaC guardrails, define security SLOs and compliance posture, run threat modeling and design reviews, embed controls into CI/CD and observability, and deliver code/automation while mentoring senior engineers. Drive AI-enabled security automation and audit readiness for SOC 2/ISO 27001.

Lead IT compliance and SOX program activities: design and monitor IT controls, perform risk assessments, coordinate internal/external audits, manage control evidence and remediation, and drive continuous monitoring and policy management. Act as liaison between Business Systems, IT owners, and audit partners to optimize control effectiveness and automation.