Top Remote Cyber Security Jobs in Boston, MA

Leads technical pre-sales architecture for complex security solutions serving public-sector and commercial customers. Translates business, security, compliance, and technical requirements into solution designs, bills of materials, statements of work, estimates, pricing, assessments, and deployment plans. Conducts discovery sessions, architecture workshops, solution reviews, and customer presentations while partnering with sales, delivery teams, and security vendors. Mentors architects and sellers, supports regional customer activity, and travels throughout the Southeast as needed.

Architect and build production AI security systems spanning endpoint sensors and cloud-scale infrastructure. Lead autonomous cyber defense capabilities, including detection, threat hunting, response, adversary simulation, secure agent execution, and model evaluation. Establish technical direction, benchmarks, and safety practices while mentoring senior engineers and researchers. Carry frontier AI research into the Falcon platform and represent the company through publications, open source, standards, and industry collaboration.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Build and operate secure AI platforms, agent workflows, and reusable automation patterns. Embed security into SDLC and PDLC through threat modeling, scanning, secrets detection, supply-chain controls, and automated reviews. Develop AWS identity, network, access, and infrastructure guardrails, including zero-trust and privileged-access automation. Own production services, monitoring, incident response, and on-call support while partnering with teams across the company to enable secure self-service workflows.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Lead product cybersecurity for connected heart-recovery medical devices across development and post-market lifecycles. Responsibilities include security architecture, threat modeling, risk assessments, cryptographic controls, secure boot, firmware protection, PKI, vulnerability management, penetration testing, SBOM analysis, secure OTA updates, regulatory submissions, and remediation planning. The role partners with R&D and cross-functional teams to implement secure development practices, embedded protections, cloud and device security, and compliance with medical-device cybersecurity standards.

Provides consultative pre-sales cybersecurity engineering for email security solutions. Leads customer discovery, assesses security architectures, designs solution proposals, delivers demonstrations and technical presentations, supports proofs of concept, collaborates with vendors, enables sales teams, and transitions closed opportunities to delivery teams. Focus areas include secure email gateways, phishing and BEC protection, API-based security, DLP, advanced threat protection, and hybrid cloud environments.

Part-time remote cybersecurity internship supporting presales, client engagement, technical writing, labs, certifications, and vendor solution research. Interns shadow consultants, build networking and security skills, practice explaining technical concepts, and gain exposure to SIEM, vulnerability scanning, endpoint security, cloud, and CTF platforms. The role requires foundational cybersecurity knowledge, self-directed learning, communication skills, and availability for 20–29 hours weekly during Central Time business hours. It may lead to full-time employment near Tulsa, Oklahoma.

Lead identity and access management implementations for federal and enterprise customers. Responsibilities include IAM solution design, architecture, deployment, integration, testing, troubleshooting, documentation, customer workshops, and knowledge transfer. The consultant provides technical leadership, advises stakeholders on authentication and identity governance, collaborates across project teams, and mentors junior consultants. The role requires extensive IAM consulting experience, strong security technology knowledge, active Top Secret clearance with full-scope polygraph, and customer-facing technical leadership.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Own infrastructure security for LiveKit’s production platform. Map cloud security posture, prioritize and remediate infrastructure risks, harden IAM, secrets, networks, tenant isolation, and media storage, and build secure infrastructure-as-code guardrails. Partner with compliance teams on PCI-DSS and ISO 27001 controls and automate audit evidence. The role requires cloud, Kubernetes, Terraform, scripting, and production infrastructure security experience, with AI security and real-time media experience preferred.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.

Designs, implements, and oversees security architectures for federal systems, including zero-trust and cloud environments. Leads secure system design, control integration, detection and response architecture, and alignment with NIST and FISMA requirements. Collaborates with SOC analysts, incident responders, engineers, and leadership to build resilient, scalable security operations environments.

Provides customer-facing cybersecurity expertise during presales engagements. Consults with CIOs, CISOs, security engineers, and procurement teams; educates sales teams; develops cybersecurity collateral, use cases, and service offerings; supports solution scoping and statements of work; and demonstrates security technologies including DLP, DSPM, DDR, and file encryption. The role requires strong cybersecurity knowledge, presales consulting experience, security framework familiarity, product expertise, and up to 20% travel.

Provides customer-facing presales cybersecurity expertise focused on OT and IoT environments. Advises executives, security teams, and procurement stakeholders; develops security services, sales collateral, use cases, system and network diagrams, and lab demonstrations. Educates sales teams, stays current on security technologies and trends, and supports consultative solution engagements involving industrial protocols, asset visibility, traffic analysis, segmentation, cloud security, and security frameworks.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Designs and operates controlled cyber-capability evaluations for frontier AI models and agentic systems. Builds vulnerable applications, cyber ranges, exploit-development targets, and evaluation harnesses; runs experiments; collects telemetry; analyzes model behavior and evaluation artifacts; and documents security findings. The role also develops sandboxing, containment, access, and secrets-management controls while collaborating with red-team operators, researchers, engineers, and Responsible AI stakeholders.

Designs, implements, and optimizes enterprise, cloud, and operational security controls. Responsibilities include managing firewalls, SIEM, EDR, SOAR, IAM, vulnerability assessments, penetration testing, incident response, security monitoring, architecture documentation, compliance alignment, and remediation support. The role collaborates with IT, DevOps, and security teams to improve detection, response, resilience, and audit readiness.