Top Hybrid Cybersecurity Jobs in Boston, MA

Responds to cybersecurity incidents by triaging alerts, analyzing indicators of compromise, coordinating containment and recovery, and investigating attack paths using forensic tools and threat intelligence. Develops incident response workstreams, prepares technical findings and executive summaries, tracks remediation, validates control gaps, and improves response plans and playbooks. The role also involves client collaboration, stakeholder communication, and mentoring junior team members.

Leads cybersecurity incident response workstreams across client environments, directing triage, investigation, containment, eradication, and recovery. Manages response plans, escalations, priorities, root cause analysis, and remediation recommendations. Coaches incident response teams, reviews technical deliverables, briefs clients, and improves vulnerability management, threat detection, response playbooks, and cyber resilience using security frameworks and threat intelligence.

Owns infrastructure security across AWS, Azure, and GCP cloud environments. Defines security standards, IAM policies, secrets management, guardrails, and infrastructure-as-code controls. Conducts threat modeling, vulnerability assessments, and penetration testing; monitors alerts and leads incident response. Drives SOC 2 and ISO 27001 compliance, audit readiness, and AI-assisted threat detection. Partners with platform, engineering, operations, legal, and business stakeholders to remediate risks and strengthen cloud security.

Leads a global team of OT/CPS Solution Consultants while shaping technical pre-sales strategy and supporting strategic cybersecurity opportunities. Responsibilities include team development, AI-native sales enablement, customer discovery, demonstrations, proofs of value, executive presentations, regulatory guidance, go-to-market strategy, and cross-functional product feedback. The role engages senior OT, security, and operations stakeholders and requires up to 40% travel.

Lead application security and DevSecOps strategy across cloud, on-premises, hybrid, and traditional product environments. Embed security controls into software development and CI/CD, establish secure-by-default standards, automate policy and infrastructure security, protect software supply chains, and address application, cloud, identity, API, AI, and endpoint risks. Partner across engineering, product, operations, SecOps, and GRC to prioritize vulnerabilities, support incident response, maintain compliance evidence, and drive measurable security adoption.

Develop and maintain data-protection features in CrowdStrike Falcon sensor on Windows, working across kernel and user mode. Implement filesystem minifilter drivers, AI-aware detection/protection logic, debug kernel issues, own features end-to-end, and collaborate with cross-functional teams to ship and support endpoint data security capabilities.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.

Designs and automates application, cloud, infrastructure, and AI security controls across CI/CD pipelines and public-cloud environments. Conducts penetration testing, red teaming, source-code audits, and cloud exploitation. Leads incident containment, forensic collection, threat detection engineering, and SIEM automation. Partners with software engineering and SRE teams on secure architecture, Zero Trust, container security, and Infrastructure-as-Code scanning while mentoring junior engineers and aligning controls with financial-sector compliance standards.

An 11-week Cybersecurity and Technology Audit internship supporting internal control audits. Responsibilities include interviewing personnel, performing audit testwork, analyzing results, communicating issues, and participating in IT risk assessments and control evaluations. The role offers real-world audit experience and potential future career opportunities.

Own security and privacy compliance programs, audits, policies, controls, evidence pipelines, continuous monitoring, and automation. Lead framework gap assessments, control design, risk analysis, and auditor relationships. Build sustainable GRC workflows across SaaS and cloud environments, establish KPIs and SLAs, mentor practitioners, delegate work, and drive technical direction without formal authority.

Designs and maintains cloud security controls across AWS and Azure, including Terraform and Python automation, posture hardening, and account guardrails. Owns vulnerability management, detection tuning, SIEM and log-ingestion pipelines, container scanning, and incident response participation. Partners with engineering and product teams on architecture, authentication, application security, and code reviews. Supports FedRAMP and other compliance programs through documentation, evidence collection, monitoring, training exercises, and customer security questionnaires.