Top Hybrid Cybersecurity Jobs in Boston, MA

Monitors and investigates security events and alerts across SIEM, IDS/IPS, malware prevention, and system-log sources. The analyst detects and analyzes threats, responds to incidents, remediates or escalates issues, coordinates with business and technology teams, maintains case records, monitors security-product tickets, and develops documentation, reports, procedures, and security-control expertise.

Perform offensive security operations, including cloud, network, web application, and API penetration testing; source-code and vulnerability analysis; purple- and red-team exercises; bug bounty management; and threat-informed testing using MITRE ATT&CK. Collaborate with engineering, SRE, IT, and Blue Teams to improve detections, communicate remediation guidance, and support security fixes. The role requires at least two years of IT security and penetration-testing experience.

Secures enterprise business applications and integrations, including NetSuite and SAP SuccessFactors. Reviews configurations, access models, APIs, data flows, IAM, logging, and cloud controls; performs risk assessments, threat modeling, and audit support; aligns controls with FedRAMP, ISO 27001, SOC 2, and SOX requirements. Partners with application owners, cloud teams, IT, security, and business stakeholders to implement least privilege, secure configurations, compensating controls, and remediation plans.

Lead and mature the companys information security program: maintain ISMS and certifications, run SOC operations (SIEM/EDR), integrate security into SDLC, manage vulnerability and incident response, oversee third-party/vendor risk, conduct security testing and training, and support regulatory cybersecurity QMS documentation and submissions for FDA, EU MDR, NIST standards.

Build and maintain detection and response capabilities across enterprise, cloud, and product environments. Responsibilities include developing detections-as-code, triaging alerts, investigating and responding to incidents, conducting digital forensics and threat hunting, automating workflows, building security tooling, supporting SIEM and security data lake pipelines, developing AI-driven security systems, participating in on-call rotations, and mentoring engineers.

Supports cybersecurity, data protection, privacy compliance, cyber risk management, privacy impact assessments, breach prevention, and compliance training. The intern researches privacy requirements, contributes to privacy program strategies, analyzes information, assists consulting teams, and learns technology consulting practices while helping clients protect digital assets and address data protection challenges.

Leads daily Governance, Risk, and Compliance operations, including enterprise risk reviews, third-party risk assessments, security and privacy compliance, risk-register management, audit support, policy governance, metrics reporting, and incident-response compliance activities. The role manages team workload, oversees complex assessments, partners with Legal, IT, Security, and Product teams, and strengthens organizational resilience through scalable GRC processes and SSDLC governance.

Designs and implements security for embedded consumer electronics products, including ARM TrustZone applets, cryptographic device identity, secure boot, firmware protection, key management, and trust chains. Defines security requirements, performs assessments and testing, supports compliance audits, mitigates vulnerabilities, and advises engineering teams through architecture and code reviews. Collaborates with firmware, DevOps, cloud, manufacturing, and program management teams to strengthen product security and incident response.

Lead a small engineering team owning identity & access architecture and roadmap (SSO/OIDC/SAML, SCIM, multi-tenant isolation, authorization) across Tulip's multi-cloud environment. Stay hands-on in design and code, enforce automated tests and runbooks, partner with Security, Infrastructure, Product and Customer Success, and drive adoption of AI tooling in the SDLC to accelerate safe, reliable delivery.

Manage the vulnerability lifecycle across Datadog’s multi-cloud environment, including detection, impact assessment, prioritization, remediation, and verification. Build AI-assisted automation, tools, and workflows that reduce engineering toil and address vulnerabilities earlier in the SDLC. Analyze remediation failures, identify root causes, partner with security and engineering teams, and provide vulnerability-management expertise for SOC 2, HIPAA, PCI, FedRAMP, and ISO compliance.