Top Hybrid Cybersecurity Jobs in Boston, MA

Design and implement identity and access management strategies, manage user identities and access rights, develop federated identity and verification solutions, and apply encryption technologies. The role involves Azure Active Directory, CyberArk, RBAC, identity governance, cybersecurity enhancements, data analysis, client collaboration, and IT governance. It requires navigating complex situations while delivering secure solutions and maintaining professional standards.

Lead complex identity and access management projects from design through production. Build secure, reliable authentication, authorization, delegation, auditing, and revocation services. Own system reliability, customer impact, architecture, and SLOs while partnering across Security, Product, Platform, and engineering teams. Develop reusable IAM patterns, mentor engineers, improve technical quality, and responsibly apply new engineering and AI tools.

Leads a global team of OT/CPS Solution Consultants while shaping technical pre-sales strategy and supporting strategic cybersecurity opportunities. Responsibilities include team development, AI-native sales enablement, customer discovery, demonstrations, proofs of value, executive presentations, regulatory guidance, go-to-market strategy, and cross-functional product feedback. The role engages senior OT, security, and operations stakeholders and requires up to 40% travel.

Lead application security and DevSecOps strategy across cloud, on-premises, hybrid, and traditional product environments. Embed security controls into software development and CI/CD, establish secure-by-default standards, automate policy and infrastructure security, protect software supply chains, and address application, cloud, identity, API, AI, and endpoint risks. Partner across engineering, product, operations, SecOps, and GRC to prioritize vulnerabilities, support incident response, maintain compliance evidence, and drive measurable security adoption.

Develop and maintain data-protection features in CrowdStrike Falcon sensor on Windows, working across kernel and user mode. Implement filesystem minifilter drivers, AI-aware detection/protection logic, debug kernel issues, own features end-to-end, and collaborate with cross-functional teams to ship and support endpoint data security capabilities.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.

An 11-week Cybersecurity and Technology Audit internship supporting internal control audits. Responsibilities include interviewing personnel, performing audit testwork, analyzing results, communicating issues, and participating in IT risk assessments and control evaluations. The role offers real-world audit experience and potential future career opportunities.

Designs and maintains cloud security controls across AWS and Azure, including Terraform and Python automation, posture hardening, and account guardrails. Owns vulnerability management, detection tuning, SIEM and log-ingestion pipelines, container scanning, and incident response participation. Partners with engineering and product teams on architecture, authentication, application security, and code reviews. Supports FedRAMP and other compliance programs through documentation, evidence collection, monitoring, training exercises, and customer security questionnaires.

Monitors and investigates security events and alerts across SIEM, IDS/IPS, malware prevention, and system-log sources. The analyst detects and analyzes threats, responds to incidents, remediates or escalates issues, coordinates with business and technology teams, maintains case records, monitors security-product tickets, and develops documentation, reports, procedures, and security-control expertise.

Leads daily Governance, Risk, and Compliance operations, including enterprise risk reviews, third-party risk assessments, security and privacy compliance, risk-register management, audit support, policy governance, metrics reporting, and incident-response compliance activities. The role manages team workload, oversees complex assessments, partners with Legal, IT, Security, and Product teams, and strengthens organizational resilience through scalable GRC processes and SSDLC governance.