Top Hybrid Cybersecurity Jobs in Boston, MA

Own technical compliance domains and lead audit and certification activities across SOC 2, ISO 27001, PCI DSS, SOX ITGC, NIST, and related frameworks. Coordinate evidence collection, control validation, remediation, and external auditor responses. Translate requirements into technical controls and scalable workflows, identify risks and gaps, report compliance metrics, and improve governance, risk, and compliance tooling through automation and repeatable processes.

Leads teams designing and deploying AI-driven enterprise and cloud security solutions. Responsibilities include developing machine learning systems, integrating data infrastructure and pipelines, performing advanced modeling and analysis, and building AI applications with Python, Java, and C++. The role involves client engagement, strategic problem-solving, stakeholder validation, coaching, process innovation, and operational excellence while addressing complex cybersecurity and privacy challenges.

Leads the design and development of AI-driven enterprise and cloud security solutions. Manages teams delivering data, analytics, and machine learning engineering projects; oversees AI model implementation, data infrastructure, pipelines, and platform deployments. Uses Python and C++ for algorithm development, analyzes data, improves data quality, ensures technical compliance, mentors staff, manages client expectations, and drives innovation across cybersecurity and privacy initiatives.

Audits internal cybersecurity control systems through personnel interviews, testwork, results analysis, and communication of audit issues. The co-op participates independently and collaboratively in projects while developing knowledge of cybersecurity practices and their application in the insurance industry.

Lead and mature the companys information security program: maintain ISMS and certifications, run SOC operations (SIEM/EDR), integrate security into SDLC, manage vulnerability and incident response, oversee third-party/vendor risk, conduct security testing and training, and support regulatory cybersecurity QMS documentation and submissions for FDA, EU MDR, NIST standards.

Threat model and secure Snyk’s GCP and AWS cloud infrastructure by creating Terraform, Kubernetes, CI/CD, and GitOps fixes. Use AI coding agents and MCP-connected cloud data to automate security remediation across repositories. Harden IAM, Kubernetes, containers, and deployment pipelines; implement CSPM and security testing; benchmark against CIS, ISO 27001, and NIST 800-53; review AI-generated changes; and consult with platform teams to drive secure implementations.

Supports application security through threat modeling, risk assessments, vulnerability triage and remediation, security scanning, developer training, investigations, and implementation of security controls. Partners with development and senior security teams to protect cloud-first infrastructure using AWS, Kubernetes, and related technologies while developing secure coding and SDLC expertise.

Designs, implements, and secures enterprise network infrastructure, including firewalls, trust zones, routing, switching, VPNs, wireless, load balancers, and data center networks. Leads network and security projects, performs technical planning and packet-level analysis, supports network operations at Tier 2, documents implementations, gathers stakeholder requirements, and mentors junior engineers. Ensures solutions consider NIST 800-171 compliance and contributes to network automation using tools such as Python, Ansible, and Terraform.

Serve as a trusted, embedded cybersecurity consultant across the customer lifecycle: lead technical pre-sales demonstrations and POVs, advise C-level and technical stakeholders, design cyber workforce resilience programs, drive platform adoption, operationalize metrics and reports, act as escalation between sales/product, and influence product innovation to maximize value from the Immersive One platform.

Lead product security for embedded and Linux-based consumer devices. Design secure architectures, implement ARM TrustZone applets, cryptographic device identity, key management, secure firmware distribution, IP protection, and secure boot. Define security requirements, perform assessments, guide engineers, improve vulnerability discovery and patching, and support compliance and certifications.

Lead data and technology advisory engagements for pharma and biotech, managing projects and client relationships while integrating advanced analytics and scientific expertise.