Top Hybrid Cybersecurity Jobs in Boston, MA

Owns infrastructure security across AWS, Azure, and GCP cloud environments. Defines security standards, IAM policies, secrets management, guardrails, and infrastructure-as-code controls. Conducts threat modeling, vulnerability assessments, and penetration testing; monitors alerts and leads incident response. Drives SOC 2 and ISO 27001 compliance, audit readiness, and AI-assisted threat detection. Partners with platform, engineering, operations, legal, and business stakeholders to remediate risks and strengthen cloud security.

Own security and privacy compliance programs, audits, policies, controls, evidence pipelines, continuous monitoring, and automation. Lead framework gap assessments, control design, risk analysis, and auditor relationships. Build sustainable GRC workflows across SaaS and cloud environments, establish KPIs and SLAs, mentor practitioners, delegate work, and drive technical direction without formal authority.

Own secure software design, cloud infrastructure defense, CI/CD security automation, AI security governance, penetration testing, threat detection, and incident response. Partner with engineering and SRE teams to harden AWS and containerized environments, integrate security controls, investigate threats, contain incidents, and mentor junior engineers. The role requires hands-on application security, cloud defense, offensive testing, forensics, and security automation experience.

Leads organization-wide application security programs, integrating security throughout the SDLC and coordinating vulnerability remediation, compliance, audits, and third-party security initiatives. Partners with engineering, product, SRE, QA, and executive stakeholders to define priorities, track security metrics, improve processes, and deliver business outcomes. Serves as an application security subject matter expert, manages vendors, ensures adherence to GDPR, HIPAA, PCI DSS, and related standards, and mentors junior team members.

Designs and maintains cloud security controls across AWS and Azure, including Terraform and Python automation, posture hardening, and account guardrails. Owns vulnerability management, detection tuning, SIEM and log-ingestion pipelines, container scanning, and incident response participation. Partners with engineering and product teams on architecture, authentication, application security, and code reviews. Supports FedRAMP and other compliance programs through documentation, evidence collection, monitoring, training exercises, and customer security questionnaires.

Designs and implements security measures across IaaS, PaaS, and SaaS environments. Conducts risk assessments, vulnerability testing, audits, forensic investigations, and incident response. Collaborates with cloud service providers, develops security architectures and frameworks, monitors for breaches, manages cloud resources, and supports compliance. The role also involves client relationship management, solving complex cybersecurity challenges, and advancing cloud security strategies.

Lead strategy and execution for CrowdStrike's Identity Protection product: detect and prioritize identity risk across human and non-human identities, define identity graph models, drive remediation automation and verification, and surface identity risk across the security stack. Use AI agents and rapid prototyping to iterate specs and partner with engineering, customers, and stakeholders to deliver usable identity risk solutions.

Partners with Sales to advise enterprise customers on cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Leads discovery, solution design, technical demonstrations, proof-of-value and proof-of-concept engagements, customer validation, executive discussions, documentation, and technical training. Requires strong cybersecurity and enterprise networking expertise, customer-facing presales experience, and the ability to connect technical capabilities with business outcomes. Travel is typically 25–50%.

Monitors and investigates security events and alerts across SIEM, IDS/IPS, malware prevention, and system-log sources. The analyst detects and analyzes threats, responds to incidents, remediates or escalates issues, coordinates with business and technology teams, maintains case records, monitors security-product tickets, and develops documentation, reports, procedures, and security-control expertise.

Lead and mature the companys information security program: maintain ISMS and certifications, run SOC operations (SIEM/EDR), integrate security into SDLC, manage vulnerability and incident response, oversee third-party/vendor risk, conduct security testing and training, and support regulatory cybersecurity QMS documentation and submissions for FDA, EU MDR, NIST standards.

Leads daily Governance, Risk, and Compliance operations, including enterprise risk reviews, third-party risk assessments, security and privacy compliance, risk-register management, audit support, policy governance, metrics reporting, and incident-response compliance activities. The role manages team workload, oversees complex assessments, partners with Legal, IT, Security, and Product teams, and strengthens organizational resilience through scalable GRC processes and SSDLC governance.