Top Hybrid Cybersecurity Jobs in Boston, MA

Build and maintain detection and response capabilities across enterprise, cloud, and product environments. Responsibilities include developing detections-as-code, triaging alerts, conducting incident response and digital forensics, threat hunting, automating workflows, supporting security data lakes and SIEM platforms, developing AI-driven security systems, participating in on-call rotations, and mentoring security engineers.

Lead security across data, cloud, applications, corporate systems, and AI platforms. Manage incident response, security monitoring, vulnerability management, automation, governance, regulated-data controls, vendor relationships, budget, and the security roadmap. Build and manage a security engineering team, partner with engineering and infrastructure teams, conduct control testing and tabletop exercises, support audit readiness, and report security posture and risks to leadership.

Lead the architecture, roadmap, and delivery of Tulip’s identity and access platform, including SSO, federation, SCIM provisioning, multi-tenant account structures, authorization, and access policy across AWS and Azure. Manage and develop a small software engineering team, maintain high code and operational standards, support architecture decisions, and drive responsible AI tooling adoption in development workflows.

Provides senior technical strategy for ServiceNow partners within Risk and Security practices. Responsibilities include co-creating reference architectures, reusable solution assets, AI-enabled capabilities, proofs of concept, technical workshops, partner enablement, architecture training, executive briefings, and thought leadership. The role mentors partner architects and pre-sales teams, supports joint business planning, influences pipeline, and improves partner practice maturity and commercialization.

The Security Analyst will monitor and investigate security alerts across endpoint, identity, cloud, and SaaS environments; manage the security operations queue; support incident response, threat hunting, vulnerability management, and phishing simulations; and coordinate with internal teams and external partners. The role also improves detection coverage, documentation, automation, and investigation workflows while participating in on-call support.

Manage the enterprise IT controls and access governance program across applications, infrastructure, developer platforms, and data services. Build risk-based control inventories, operate access reviews and certifications, track exceptions and remediation, establish metrics and executive reporting, and maintain audit-ready documentation. Partner with Security, IT, application owners, Finance, Legal, auditors, and business stakeholders to improve identity governance, privileged access, lifecycle management, segregation of duties, and control effectiveness. Use automation, APIs, analytics, and AI agents to improve governance efficiency and auditability.

This 11-week internship supports Liberty Mutual’s Cybersecurity and Technology Audit department. Responsibilities include interviewing personnel, performing audit testwork, analyzing results, communicating issues, and participating in IT risk assessments and control evaluations. Interns gain experience auditing internal control systems and may be considered for future career opportunities.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.

Lead strategy and execution for CrowdStrike's Identity Protection product: detect and prioritize identity risk across human and non-human identities, define identity graph models, drive remediation automation and verification, and surface identity risk across the security stack. Use AI agents and rapid prototyping to iterate specs and partner with engineering, customers, and stakeholders to deliver usable identity risk solutions.