Top Hybrid Cybersecurity Jobs in Boston, MA

Lead cybersecurity, AI, and technology risk assessments across systems, cloud environments, business processes, and initiatives. Maintain the enterprise cyber risk register, track mitigation plans, translate technical findings into business risks, support FAIR-based quantitative analysis, and prepare executive reporting. Partner with Security, Legal, Product, IT, and business teams to assess architectures, AI use cases, emerging technologies, and third-party integrations while strengthening GRC processes and operational resilience.

Lead and scale multiple product security engineering teams while defining security strategy, secure SDLC standards, identity and authentication capabilities, vulnerability management, DevSecOps tooling, cloud security, privacy by design, and threat modeling. Partner across engineering, product, legal, compliance, and enterprise security; mentor leaders and staff-level contributors; and foster a collaborative culture focused on secure, reliable software delivery.

Leads enterprise Security Engineering and Security Operations strategy, teams, technical standards, roadmaps, and measurable outcomes. Oversees detection and response, incident readiness, security automation, identity, cloud, endpoint, SaaS, data protection, and AI security. Manages significant incidents, security partners, organizational design, hiring, and cross-functional collaboration while developing managers, engineers, and analysts. Partners with the CISO to strengthen security posture and operational performance in a sensitive-data technology environment.

Engineer and optimize Palo Alto Networks XSIAM security operations capabilities by tuning alerts, validating rules, monitoring performance, investigating incidents, automating workflows, onboarding data sources, and integrating security tools. The role supports threat intelligence, vulnerability management, cloud and network security, forensics, intrusion detection, secure systems, documentation, and client-facing cybersecurity consulting while maintaining current knowledge of Palo Alto Networks technologies and emerging threats.

Own technical compliance domains and lead audit and certification activities across SOC 2, ISO 27001, PCI DSS, SOX ITGC, NIST, and related frameworks. Coordinate evidence collection, control validation, remediation, and external auditor responses. Translate requirements into technical controls and scalable workflows, identify risks and gaps, report compliance metrics, and improve governance, risk, and compliance tooling through automation and repeatable processes.

Audits internal cybersecurity control systems through personnel interviews, testwork, results analysis, and communication of audit issues. The co-op participates independently and collaboratively in projects while developing knowledge of cybersecurity practices and their application in the insurance industry.

Threat model and secure Snyk’s GCP and AWS cloud infrastructure by creating Terraform, Kubernetes, CI/CD, and GitOps fixes. Use AI coding agents and MCP-connected cloud data to automate security remediation across repositories. Harden IAM, Kubernetes, containers, and deployment pipelines; implement CSPM and security testing; benchmark against CIS, ISO 27001, and NIST 800-53; review AI-generated changes; and consult with platform teams to drive secure implementations.

Supports application security through threat modeling, risk assessments, vulnerability triage and remediation, security scanning, developer training, investigations, and implementation of security controls. Partners with development and senior security teams to protect cloud-first infrastructure using AWS, Kubernetes, and related technologies while developing secure coding and SDLC expertise.

Designs, implements, and secures enterprise network infrastructure, including firewalls, trust zones, routing, switching, VPNs, wireless, load balancers, and data center networks. Leads network and security projects, performs technical planning and packet-level analysis, supports network operations at Tier 2, documents implementations, gathers stakeholder requirements, and mentors junior engineers. Ensures solutions consider NIST 800-171 compliance and contributes to network automation using tools such as Python, Ansible, and Terraform.

Serve as a trusted, embedded cybersecurity consultant across the customer lifecycle: lead technical pre-sales demonstrations and POVs, advise C-level and technical stakeholders, design cyber workforce resilience programs, drive platform adoption, operationalize metrics and reports, act as escalation between sales/product, and influence product innovation to maximize value from the Immersive One platform.

Lead product security for embedded and Linux-based consumer devices. Design secure architectures, implement ARM TrustZone applets, cryptographic device identity, key management, secure firmware distribution, IP protection, and secure boot. Define security requirements, perform assessments, guide engineers, improve vulnerability discovery and patching, and support compliance and certifications.

Lead data and technology advisory engagements for pharma and biotech, managing projects and client relationships while integrating advanced analytics and scientific expertise.