Top Hybrid Cybersecurity Jobs in Boston, MA

Implements and optimizes ServiceNow GRC and IRM solutions for client governance, risk, and compliance programs. Designs workflows, data structures, controls-testing processes, reports, and risk-management capabilities. Translates regulatory and operational requirements into technology features, analyzes business needs, supports deployment, identifies control and process gaps, and develops compliance insights. Collaborates with clients, manages assigned workstreams, resolves issues, and guides junior team members.

Designs and implements secure AWS infrastructure, integrating development, operations, and security practices. Automates infrastructure with CloudFormation and Terraform, conducts vulnerability assessments, implements security controls, manages incident remediation, and supports CI/CD through Jenkins and GitLab. The role also uses Python, CrowdStrike, and Palo Alto Networks while collaborating with clients and technical teams to improve cybersecurity, reliability, and infrastructure performance.

Leads client-facing enterprise and cloud security engagements across IaaS, PaaS, and SaaS environments. Responsibilities include cloud security architecture, control design, risk assessments, vulnerability testing, security reviews, threat monitoring, and coordinating network, endpoint, identity, and cloud infrastructure safeguards. The role translates technical findings into business-aligned recommendations, directs teams through complex challenges, coaches team members, and prioritizes critical risks for client decision-making.

Lead security across data, cloud, applications, corporate systems, and AI platforms. Manage incident response, security monitoring, vulnerability management, automation, governance, regulated-data controls, vendor relationships, budget, and the security roadmap. Build and manage a security engineering team, partner with engineering and infrastructure teams, conduct control testing and tabletop exercises, support audit readiness, and report security posture and risks to leadership.

Lead the architecture, roadmap, and delivery of Tulip’s identity and access platform, including SSO, federation, SCIM provisioning, multi-tenant account structures, authorization, and access policy across AWS and Azure. Manage and develop a small software engineering team, maintain high code and operational standards, support architecture decisions, and drive responsible AI tooling adoption in development workflows.

Provides senior technical strategy for ServiceNow partners within Risk and Security practices. Responsibilities include co-creating reference architectures, reusable solution assets, AI-enabled capabilities, proofs of concept, technical workshops, partner enablement, architecture training, executive briefings, and thought leadership. The role mentors partner architects and pre-sales teams, supports joint business planning, influences pipeline, and improves partner practice maturity and commercialization.

The Security Analyst will monitor and investigate security alerts across endpoint, identity, cloud, and SaaS environments; manage the security operations queue; support incident response, threat hunting, vulnerability management, and phishing simulations; and coordinate with internal teams and external partners. The role also improves detection coverage, documentation, automation, and investigation workflows while participating in on-call support.

Manage the enterprise IT controls and access governance program across applications, infrastructure, developer platforms, and data services. Build risk-based control inventories, operate access reviews and certifications, track exceptions and remediation, establish metrics and executive reporting, and maintain audit-ready documentation. Partner with Security, IT, application owners, Finance, Legal, auditors, and business stakeholders to improve identity governance, privileged access, lifecycle management, segregation of duties, and control effectiveness. Use automation, APIs, analytics, and AI agents to improve governance efficiency and auditability.

This 11-week internship supports Liberty Mutual’s Cybersecurity and Technology Audit department. Responsibilities include interviewing personnel, performing audit testwork, analyzing results, communicating issues, and participating in IT risk assessments and control evaluations. Interns gain experience auditing internal control systems and may be considered for future career opportunities.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Lead complex identity and access management projects from design through production. Build secure, reliable authentication, authorization, delegation, auditing, and revocation services. Own system reliability, customer impact, architecture, and SLOs while partnering across Security, Product, Platform, and engineering teams. Develop reusable IAM patterns, mentor engineers, improve technical quality, and responsibly apply new engineering and AI tools.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.