Top Hybrid Cybersecurity Jobs in Boston, MA

Supports cybersecurity consulting teams with technology and data risk management, cybersecurity strategy and policy development, security architecture reviews, vulnerability assessments, incident management, and privacy compliance efforts. The intern conducts research, analyzes information, assists with client projects, uses Azure Data Factory to automate workflows, applies Agile practices, and learns from experienced cybersecurity professionals.

Supports cybersecurity, data protection, and privacy consulting projects by researching privacy regulations, analyzing privacy impact assessments, assisting with compliance training and privacy program strategies, and helping identify cyber risks and data protection challenges. The intern collaborates with advisory teams, contributes to data breach prevention efforts, and develops foundational skills in technology consulting, privacy compliance, and cybersecurity risk management.

Lead cybersecurity, AI, and technology risk assessments across systems, cloud environments, business processes, and initiatives. Maintain the enterprise cyber risk register, track mitigation plans, translate technical findings into business risks, support FAIR-based quantitative analysis, and prepare executive reporting. Partner with Security, Legal, Product, IT, and business teams to assess architectures, AI use cases, emerging technologies, and third-party integrations while strengthening GRC processes and operational resilience.

Own technical compliance domains and lead audit and certification activities across SOC 2, ISO 27001, PCI DSS, SOX ITGC, NIST, and related frameworks. Coordinate evidence collection, control validation, remediation, and external auditor responses. Translate requirements into technical controls and scalable workflows, identify risks and gaps, report compliance metrics, and improve governance, risk, and compliance tooling through automation and repeatable processes.

Audits internal cybersecurity control systems through personnel interviews, testwork, results analysis, and communication of audit issues. The co-op participates independently and collaboratively in projects while developing knowledge of cybersecurity practices and their application in the insurance industry.

Threat model and secure Snyk’s GCP and AWS cloud infrastructure by creating Terraform, Kubernetes, CI/CD, and GitOps fixes. Use AI coding agents and MCP-connected cloud data to automate security remediation across repositories. Harden IAM, Kubernetes, containers, and deployment pipelines; implement CSPM and security testing; benchmark against CIS, ISO 27001, and NIST 800-53; review AI-generated changes; and consult with platform teams to drive secure implementations.

Supports application security through threat modeling, risk assessments, vulnerability triage and remediation, security scanning, developer training, investigations, and implementation of security controls. Partners with development and senior security teams to protect cloud-first infrastructure using AWS, Kubernetes, and related technologies while developing secure coding and SDLC expertise.

Designs, implements, and secures enterprise network infrastructure, including firewalls, trust zones, routing, switching, VPNs, wireless, load balancers, and data center networks. Leads network and security projects, performs technical planning and packet-level analysis, supports network operations at Tier 2, documents implementations, gathers stakeholder requirements, and mentors junior engineers. Ensures solutions consider NIST 800-171 compliance and contributes to network automation using tools such as Python, Ansible, and Terraform.

Serve as a trusted, embedded cybersecurity consultant across the customer lifecycle: lead technical pre-sales demonstrations and POVs, advise C-level and technical stakeholders, design cyber workforce resilience programs, drive platform adoption, operationalize metrics and reports, act as escalation between sales/product, and influence product innovation to maximize value from the Immersive One platform.

Lead product security for embedded and Linux-based consumer devices. Design secure architectures, implement ARM TrustZone applets, cryptographic device identity, key management, secure firmware distribution, IP protection, and secure boot. Define security requirements, perform assessments, guide engineers, improve vulnerability discovery and patching, and support compliance and certifications.

Lead data and technology advisory engagements for pharma and biotech, managing projects and client relationships while integrating advanced analytics and scientific expertise.