Top Hybrid Cybersecurity Jobs in Boston, MA

The Information System Security Manager ensures classified and unclassified systems comply with security policies, government requirements, NIST frameworks, and CMMC controls. Responsibilities include maintaining security architecture, supporting secure system development, collaborating with administrators, drafting policies, testing controls, maintaining POA&Ms, monitoring compliance, analyzing Linux, Windows, and AWS vulnerabilities, and researching CVEs to guide remediation.

Leads digital assurance and IT audit engagements assessing financial statements, internal controls, cybersecurity, data and AI systems, governance, privacy compliance, SOX controls, and regulatory adherence. Manages complex projects, advises clients, coaches diverse teams, validates outcomes, communicates findings, and reinforces professional and technical standards. The role requires strategic problem-solving, systems thinking, and collaboration with stakeholders to strengthen trust in digital environments.

Serve as a trusted, embedded cybersecurity consultant across the customer lifecycle: lead technical pre-sales demonstrations and POVs, advise C-level and technical stakeholders, design cyber workforce resilience programs, drive platform adoption, operationalize metrics and reports, act as escalation between sales/product, and influence product innovation to maximize value from the Immersive One platform.

Lead product security for embedded and Linux-based consumer devices. Design secure architectures, implement ARM TrustZone applets, cryptographic device identity, key management, secure firmware distribution, IP protection, and secure boot. Define security requirements, perform assessments, guide engineers, improve vulnerability discovery and patching, and support compliance and certifications.

Lead pre- and post-sales solution architecture for enterprise customers, leveraging AppSec and AI-native expertise to drive deals, define scalable architectures, quantify ROI, influence product direction, and deliver technical presentations to technical and executive audiences.

Leads CarGurus’ cybersecurity governance, risk, and compliance program, including cyber risk management, SOC 2 Type II, SOX ITGCs, security policies, AI governance, third-party risk, customer trust, privacy compliance, executive reporting, and GRC process automation. Partners with Engineering, Product, IT, Legal, Privacy, Internal Audit, and Security Operations to improve security controls and manage organizational cyber risk.

Lead data and technology advisory engagements for pharma and biotech, managing projects and client relationships while integrating advanced analytics and scientific expertise.

Partners with Sales to lead technical discovery, solution design, demonstrations, proof-of-value and proof-of-concept engagements for enterprise cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Advises technical and executive stakeholders, translates capabilities into business outcomes, supports evaluations and deal progression, develops technical documentation, leads training, and collaborates cross-functionally. Travel is typically 25–50%.

Develop and maintain data-protection features in CrowdStrike Falcon sensor on Windows, working across kernel and user mode. Implement filesystem minifilter drivers, AI-aware detection/protection logic, debug kernel issues, own features end-to-end, and collaborate with cross-functional teams to ship and support endpoint data security capabilities.

Leads enterprise security engineering, architecture, cloud and security platform operations, AI security governance, incident response, compliance, and technical team development. Designs controls for AI systems, manages cybersecurity technologies, supports audits and regulatory engagements, mentors security staff, and serves as the designated backup to the CISO. The role combines strategic leadership with hands-on technical execution and executive collaboration.