Top Hybrid Cybersecurity Jobs in Boston, MA

Owns infrastructure security across AWS, Azure, and GCP cloud environments. Defines security standards, IAM policies, secrets management, guardrails, and infrastructure-as-code controls. Conducts threat modeling, vulnerability assessments, and penetration testing; monitors alerts and leads incident response. Drives SOC 2 and ISO 27001 compliance, audit readiness, and AI-assisted threat detection. Partners with platform, engineering, operations, legal, and business stakeholders to remediate risks and strengthen cloud security.

Manages Microsoft Entra ID and identity access management workstreams, designing role-based access controls, authorization frameworks, access governance processes, and privileged access workflows. Configures Azure and Microsoft Active Directory components, analyzes access risks, documents technical requirements, develops client recommendations, and supports issue resolution. Mentors junior team members, reviews deliverables, and coordinates project timelines across client environments.

Lead SailPoint identity and access management engagements, including identity governance, access administration, RBAC, privileged access management, and lifecycle workflows. Manage project plans, budgets, timelines, deliverables, and client relationships while overseeing platform configuration and deployment. Analyze access risks and control gaps, review technical work, improve processes, and mentor junior professionals. Apply Azure Active Directory, Microsoft Active Directory, and cloud IAM expertise to deliver secure access solutions.

Leads privileged access management workstreams across client engagements, overseeing access reviews, privileged account remediation, identity governance, and role-based access controls. Reviews Azure Active Directory, Microsoft Active Directory, CyberArk, and cloud identity configurations; translates security requirements into solutions and documentation; identifies control gaps; coaches teams; manages project timelines and risks; and improves identity security through automation and stronger governance.

Leads a global team of OT/CPS Solution Consultants while shaping technical pre-sales strategy and supporting strategic cybersecurity opportunities. Responsibilities include team development, AI-native sales enablement, customer discovery, demonstrations, proofs of value, executive presentations, regulatory guidance, go-to-market strategy, and cross-functional product feedback. The role engages senior OT, security, and operations stakeholders and requires up to 40% travel.

Lead application security and DevSecOps strategy across cloud, on-premises, hybrid, and traditional product environments. Embed security controls into software development and CI/CD, establish secure-by-default standards, automate policy and infrastructure security, protect software supply chains, and address application, cloud, identity, API, AI, and endpoint risks. Partner across engineering, product, operations, SecOps, and GRC to prioritize vulnerabilities, support incident response, maintain compliance evidence, and drive measurable security adoption.

Develop and maintain data-protection features in CrowdStrike Falcon sensor on Windows, working across kernel and user mode. Implement filesystem minifilter drivers, AI-aware detection/protection logic, debug kernel issues, own features end-to-end, and collaborate with cross-functional teams to ship and support endpoint data security capabilities.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.

Designs and automates application, cloud, infrastructure, and AI security controls across CI/CD pipelines and public-cloud environments. Conducts penetration testing, red teaming, source-code audits, and cloud exploitation. Leads incident containment, forensic collection, threat detection engineering, and SIEM automation. Partners with software engineering and SRE teams on secure architecture, Zero Trust, container security, and Infrastructure-as-Code scanning while mentoring junior engineers and aligning controls with financial-sector compliance standards.

An 11-week Cybersecurity and Technology Audit internship supporting internal control audits. Responsibilities include interviewing personnel, performing audit testwork, analyzing results, communicating issues, and participating in IT risk assessments and control evaluations. The role offers real-world audit experience and potential future career opportunities.

Own security and privacy compliance programs, audits, policies, controls, evidence pipelines, continuous monitoring, and automation. Lead framework gap assessments, control design, risk analysis, and auditor relationships. Build sustainable GRC workflows across SaaS and cloud environments, establish KPIs and SLAs, mentor practitioners, delegate work, and drive technical direction without formal authority.

Designs and maintains cloud security controls across AWS and Azure, including Terraform and Python automation, posture hardening, and account guardrails. Owns vulnerability management, detection tuning, SIEM and log-ingestion pipelines, container scanning, and incident response participation. Partners with engineering and product teams on architecture, authentication, application security, and code reviews. Supports FedRAMP and other compliance programs through documentation, evidence collection, monitoring, training exercises, and customer security questionnaires.