Top Hybrid Cybersecurity Jobs in Boston, MA

Lead a small engineering team owning identity & access architecture and roadmap (SSO/OIDC/SAML, SCIM, multi-tenant isolation, authorization) across Tulip's multi-cloud environment. Stay hands-on in design and code, enforce automated tests and runbooks, partner with Security, Infrastructure, Product and Customer Success, and drive adoption of AI tooling in the SDLC to accelerate safe, reliable delivery.

Manage the vulnerability lifecycle across Datadog’s multi-cloud environment, including detection, impact assessment, prioritization, remediation, and verification. Build AI-assisted automation, tools, and workflows that reduce engineering toil and address vulnerabilities earlier in the SDLC. Analyze remediation failures, identify root causes, partner with security and engineering teams, and provide vulnerability-management expertise for SOC 2, HIPAA, PCI, FedRAMP, and ISO compliance.

Supports cybersecurity consulting teams with technology and data risk management, cybersecurity strategy and policy development, security architecture reviews, vulnerability assessments, incident management, and privacy compliance efforts. The intern conducts research, analyzes information, assists with client projects, uses Azure Data Factory to automate workflows, applies Agile practices, and learns from experienced cybersecurity professionals.

Lead and scale multiple product security engineering teams while defining security strategy, secure SDLC standards, identity and authentication capabilities, vulnerability management, DevSecOps tooling, cloud security, privacy by design, and threat modeling. Partner across engineering, product, legal, compliance, and enterprise security; mentor leaders and staff-level contributors; and foster a collaborative culture focused on secure, reliable software delivery.

Own technical compliance domains and lead audit and certification activities across SOC 2, ISO 27001, PCI DSS, SOX ITGC, NIST, and related frameworks. Coordinate evidence collection, control validation, remediation, and external auditor responses. Translate requirements into technical controls and scalable workflows, identify risks and gaps, report compliance metrics, and improve governance, risk, and compliance tooling through automation and repeatable processes.

Audits internal cybersecurity control systems through personnel interviews, testwork, results analysis, and communication of audit issues. The co-op participates independently and collaboratively in projects while developing knowledge of cybersecurity practices and their application in the insurance industry.

Threat model and secure Snyk’s GCP and AWS cloud infrastructure by creating Terraform, Kubernetes, CI/CD, and GitOps fixes. Use AI coding agents and MCP-connected cloud data to automate security remediation across repositories. Harden IAM, Kubernetes, containers, and deployment pipelines; implement CSPM and security testing; benchmark against CIS, ISO 27001, and NIST 800-53; review AI-generated changes; and consult with platform teams to drive secure implementations.

Supports application security through threat modeling, risk assessments, vulnerability triage and remediation, security scanning, developer training, investigations, and implementation of security controls. Partners with development and senior security teams to protect cloud-first infrastructure using AWS, Kubernetes, and related technologies while developing secure coding and SDLC expertise.

Designs, implements, and secures enterprise network infrastructure, including firewalls, trust zones, routing, switching, VPNs, wireless, load balancers, and data center networks. Leads network and security projects, performs technical planning and packet-level analysis, supports network operations at Tier 2, documents implementations, gathers stakeholder requirements, and mentors junior engineers. Ensures solutions consider NIST 800-171 compliance and contributes to network automation using tools such as Python, Ansible, and Terraform.

Serve as a trusted, embedded cybersecurity consultant across the customer lifecycle: lead technical pre-sales demonstrations and POVs, advise C-level and technical stakeholders, design cyber workforce resilience programs, drive platform adoption, operationalize metrics and reports, act as escalation between sales/product, and influence product innovation to maximize value from the Immersive One platform.