Top Hybrid Cybersecurity Jobs in Boston, MA

Lead and mature the companys information security program: maintain ISMS and certifications, run SOC operations (SIEM/EDR), integrate security into SDLC, manage vulnerability and incident response, oversee third-party/vendor risk, conduct security testing and training, and support regulatory cybersecurity QMS documentation and submissions for FDA, EU MDR, NIST standards.

Threat model and secure Snyk’s GCP and AWS cloud infrastructure by creating Terraform, Kubernetes, CI/CD, and GitOps fixes. Use AI coding agents and MCP-connected cloud data to automate security remediation across repositories. Harden IAM, Kubernetes, containers, and deployment pipelines; implement CSPM and security testing; benchmark against CIS, ISO 27001, and NIST 800-53; review AI-generated changes; and consult with platform teams to drive secure implementations.

Leads cybersecurity strategy and transformation engagements for clients, including regulatory compliance, internal controls, risk mitigation, and cybersecurity framework translation. Oversees multiple projects, develops innovative solutions, drives business development, maintains executive client relationships, and mentors cybersecurity and compliance leaders. The role also promotes technological advancement, thought leadership, continuous improvement, and adherence to professional, technical, conduct, and independence standards.

Supports application security through threat modeling, risk assessments, vulnerability triage and remediation, security scanning, developer training, investigations, and implementation of security controls. Partners with development and senior security teams to protect cloud-first infrastructure using AWS, Kubernetes, and related technologies while developing secure coding and SDLC expertise.

Designs, implements, and secures enterprise network infrastructure, including firewalls, trust zones, routing, switching, VPNs, wireless, load balancers, and data center networks. Leads network and security projects, performs technical planning and packet-level analysis, supports network operations at Tier 2, documents implementations, gathers stakeholder requirements, and mentors junior engineers. Ensures solutions consider NIST 800-171 compliance and contributes to network automation using tools such as Python, Ansible, and Terraform.

Serve as a trusted, embedded cybersecurity consultant across the customer lifecycle: lead technical pre-sales demonstrations and POVs, advise C-level and technical stakeholders, design cyber workforce resilience programs, drive platform adoption, operationalize metrics and reports, act as escalation between sales/product, and influence product innovation to maximize value from the Immersive One platform.

Lead product security for embedded and Linux-based consumer devices. Design secure architectures, implement ARM TrustZone applets, cryptographic device identity, key management, secure firmware distribution, IP protection, and secure boot. Define security requirements, perform assessments, guide engineers, improve vulnerability discovery and patching, and support compliance and certifications.

Lead data and technology advisory engagements for pharma and biotech, managing projects and client relationships while integrating advanced analytics and scientific expertise.

Partners with Sales to lead technical discovery, solution design, demonstrations, proof-of-value and proof-of-concept engagements for enterprise cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Advises technical and executive stakeholders, translates capabilities into business outcomes, supports evaluations and deal progression, develops technical documentation, leads training, and collaborates cross-functionally. Travel is typically 25–50%.

Develop and maintain data-protection features in CrowdStrike Falcon sensor on Windows, working across kernel and user mode. Implement filesystem minifilter drivers, AI-aware detection/protection logic, debug kernel issues, own features end-to-end, and collaborate with cross-functional teams to ship and support endpoint data security capabilities.