Top Hybrid Cybersecurity Jobs in Boston, MA

Provides SAP security and access controls consulting, including role design, authorization solutions, SAP GRC implementation, segregation-of-duties reviews, compliance assessments, audit support, risk remediation, and access control documentation. Collaborates with clients and engagement teams, evaluates control gaps, tracks remediation, protects sensitive data, and mentors junior team members.

Manage the enterprise IT controls and access governance program across applications, infrastructure, developer platforms, and data services. Build risk-based control inventories, operate access reviews and certifications, track exceptions and remediation, establish metrics and executive reporting, and maintain audit-ready documentation. Partner with Security, IT, application owners, Finance, Legal, auditors, and business stakeholders to improve identity governance, privileged access, lifecycle management, segregation of duties, and control effectiveness. Use automation, APIs, analytics, and AI agents to improve governance efficiency and auditability.

Designs, builds, and improves security detections across cloud, identity, endpoint, network, and application environments. The role develops Detection-as-Code capabilities, maps threats to MITRE ATT&CK, tunes alerts, reduces false positives, supports incident investigations, and automates triage. It also tracks detection performance, contributes to on-call operations, partners with engineering and infrastructure teams, and applies threat intelligence, data analysis, and machine learning to strengthen detection fidelity.

Build and maintain scalable detection and response systems, security observability capabilities, AI-driven security automation, logging pipelines, and rule- or ML-based detections. The role includes incident response, threat hunting, security alert investigation, workflow automation, detection engineering, and participation in detection and response on-call rotations.

This 11-week internship supports Liberty Mutual’s Cybersecurity and Technology Audit department. Responsibilities include interviewing personnel, performing audit testwork, analyzing results, communicating issues, and participating in IT risk assessments and control evaluations. Interns gain experience auditing internal control systems and may be considered for future career opportunities.

Own customer security reviews, questionnaires, RFP responses, and due-diligence requests. Support SOC 2 Type II and ISO audits by coordinating evidence, auditor interactions, and remediation. Maintain security, privacy, and AI governance policies and controls, including frameworks such as ISO/IEC 42001 and NIST AI RMF. Partner with Product, Engineering, DevOps, Security, Sales, and Legal to explain cloud controls, manage customer trust requirements, and address control gaps.

Lead the global security Governance, Risk, and Compliance function, overseeing multi-framework audits, control governance, enterprise risk assessments, remediation, policy architecture, and compliance automation. Manage GRC specialists and the US regulated markets team while partnering with executives and cross-functional stakeholders. Drive compliance by design, AI-enabled continuous monitoring, evidence collection, security awareness, and regulatory alignment across ISO 27001, SOC, PCI DSS, FedRAMP, ITAR, and DoD IL4/5 requirements.

Leads a global team of OT/CPS Solution Consultants while shaping technical pre-sales strategy and supporting strategic cybersecurity opportunities. Responsibilities include team development, AI-native sales enablement, customer discovery, demonstrations, proofs of value, executive presentations, regulatory guidance, go-to-market strategy, and cross-functional product feedback. The role engages senior OT, security, and operations stakeholders and requires up to 40% travel.

Develop and maintain data-protection features in CrowdStrike Falcon sensor on Windows, working across kernel and user mode. Implement filesystem minifilter drivers, AI-aware detection/protection logic, debug kernel issues, own features end-to-end, and collaborate with cross-functional teams to ship and support endpoint data security capabilities.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.