Top Hybrid Cybersecurity Jobs in Boston, MA

Secures enterprise business applications and integrations, including NetSuite and SAP SuccessFactors. Reviews configurations, access models, APIs, data flows, IAM, logging, and cloud controls; performs risk assessments, threat modeling, and audit support; aligns controls with FedRAMP, ISO 27001, SOC 2, and SOX requirements. Partners with application owners, cloud teams, IT, security, and business stakeholders to implement least privilege, secure configurations, compensating controls, and remediation plans.

Leads daily Governance, Risk, and Compliance operations, including enterprise risk reviews, third-party risk assessments, security and privacy compliance, risk-register management, audit support, policy governance, metrics reporting, and incident-response compliance activities. The role manages team workload, oversees complex assessments, partners with Legal, IT, Security, and Product teams, and strengthens organizational resilience through scalable GRC processes and SSDLC governance.

Designs and implements security for embedded consumer electronics products, including ARM TrustZone applets, cryptographic device identity, secure boot, firmware protection, key management, and trust chains. Defines security requirements, performs assessments and testing, supports compliance audits, mitigates vulnerabilities, and advises engineering teams through architecture and code reviews. Collaborates with firmware, DevOps, cloud, manufacturing, and program management teams to strengthen product security and incident response.

Manage the vulnerability lifecycle across Datadog’s multi-cloud environment, including detection, impact assessment, prioritization, remediation, and verification. Build AI-assisted automation, tools, and workflows that reduce engineering toil and address vulnerabilities earlier in the SDLC. Analyze remediation failures, identify root causes, partner with security and engineering teams, and provide vulnerability-management expertise for SOC 2, HIPAA, PCI, FedRAMP, and ISO compliance.

Supports application security through threat modeling, risk assessments, vulnerability triage and remediation, security scanning, developer training, investigations, and implementation of security controls. Partners with development and senior security teams to protect cloud-first infrastructure using AWS, Kubernetes, and related technologies while developing secure coding and SDLC expertise.

The Information System Security Manager ensures classified and unclassified systems comply with security policies, government requirements, NIST frameworks, and CMMC controls. Responsibilities include maintaining security architecture, supporting secure system development, collaborating with administrators, drafting policies, testing controls, maintaining POA&Ms, monitoring compliance, analyzing Linux, Windows, and AWS vulnerabilities, and researching CVEs to guide remediation.

Lead data and technology advisory engagements for pharma and biotech, managing projects and client relationships while integrating advanced analytics and scientific expertise.

Secure Hi Marley’s internal AI environment by threat-modeling LLM integrations, agents, MCP connectors, and data pipelines; enforcing isolation, least privilege, and data boundaries; conducting AI red-team testing; managing AI tool governance; maintaining incident response runbooks; and producing SOC 2 and ISO 42001 compliance evidence. Partner with AI Operations and IT on access controls, cloud workload isolation, DLP, monitoring, and safe AI usage guidance.

Perform IT audits and assessments across enterprise systems and applications, focusing on cybersecurity, cloud, AI, and digital infrastructure. Evaluate inherent and residual risks, test control design and effectiveness, set audit scope, and deliver value-added recommendations while mentoring associates and collaborating with stakeholders to mitigate technology risks.

Lead cloud security strategy across AWS, GCP, Kubernetes, and self-managed systems. Define security standards, reference architectures, threat-modeling practices, IAM controls, detection engineering, incident response, vulnerability management, and secure infrastructure pipelines. Serve as a senior technical leader, mentor engineers, guide cross-functional initiatives, and develop scalable security controls and playbooks. The role requires production cloud security ownership, hands-on AWS, GCP, Kubernetes, Python, and Terraform experience.