Top Hybrid Cybersecurity Jobs in Boston, MA

Provide regulatory compliance guidance and cybersecurity risk management to clients. Conduct compliance risk assessments and audits, implement frameworks (ISO/IEC 27001, NIST CSF), develop compliance programs, analyze data for insights, lead training on AML and financial crime prevention, and build client relationships while upholding professional standards.

Leads Mastercard’s North American Field CISO function for financial services, advising CISOs, CIOs, CROs, and boards on cybersecurity, cyber resilience, fraud, digital trust, and risk. Builds executive customer relationships, supports strategic sales opportunities, influences product and engineering roadmaps, represents Mastercard at industry forums, and drives thought leadership, customer value, revenue growth, and global capability development.

Leads cross-functional security programs connecting security risk engineering with Product, Engineering, and SRE teams. Manages Security by Design, Secure-SDLC, vulnerability remediation, compliance audits, security roadmaps, governance, and AI-enabled process automation. The role requires financial services and payments expertise, cloud architecture knowledge, and proficiency with PCI-DSS, SOX, SOC 1, and SOC 2. It also provides coaching and drives secure technical enablement across globally distributed teams.

Designs and implements security for embedded consumer electronics products, including ARM TrustZone applets, cryptographic device identity, secure boot, firmware protection, key management, and trust chains. Defines security requirements, performs assessments and testing, supports compliance audits, mitigates vulnerabilities, and advises engineering teams through architecture and code reviews. Collaborates with firmware, DevOps, cloud, manufacturing, and program management teams to strengthen product security and incident response.

Lead a small engineering team owning identity & access architecture and roadmap (SSO/OIDC/SAML, SCIM, multi-tenant isolation, authorization) across Tulip's multi-cloud environment. Stay hands-on in design and code, enforce automated tests and runbooks, partner with Security, Infrastructure, Product and Customer Success, and drive adoption of AI tooling in the SDLC to accelerate safe, reliable delivery.

Manage the vulnerability lifecycle across Datadog’s multi-cloud environment, including detection, impact assessment, prioritization, remediation, and verification. Build AI-assisted automation, tools, and workflows that reduce engineering toil and address vulnerabilities earlier in the SDLC. Analyze remediation failures, identify root causes, partner with security and engineering teams, and provide vulnerability-management expertise for SOC 2, HIPAA, PCI, FedRAMP, and ISO compliance.

Lead and scale multiple product security engineering teams while defining security strategy, secure SDLC standards, identity and authentication capabilities, vulnerability management, DevSecOps tooling, cloud security, privacy by design, and threat modeling. Partner across engineering, product, legal, compliance, and enterprise security; mentor leaders and staff-level contributors; and foster a collaborative culture focused on secure, reliable software delivery.

Own technical compliance domains and lead audit and certification activities across SOC 2, ISO 27001, PCI DSS, SOX ITGC, NIST, and related frameworks. Coordinate evidence collection, control validation, remediation, and external auditor responses. Translate requirements into technical controls and scalable workflows, identify risks and gaps, report compliance metrics, and improve governance, risk, and compliance tooling through automation and repeatable processes.

Audits internal cybersecurity control systems through personnel interviews, testwork, results analysis, and communication of audit issues. The co-op participates independently and collaboratively in projects while developing knowledge of cybersecurity practices and their application in the insurance industry.

Threat model and secure Snyk’s GCP and AWS cloud infrastructure by creating Terraform, Kubernetes, CI/CD, and GitOps fixes. Use AI coding agents and MCP-connected cloud data to automate security remediation across repositories. Harden IAM, Kubernetes, containers, and deployment pipelines; implement CSPM and security testing; benchmark against CIS, ISO 27001, and NIST 800-53; review AI-generated changes; and consult with platform teams to drive secure implementations.