Top Remote Entry Level Cybersecurity Jobs in Boston, MA

Sets application security direction and standards across engineering teams. Builds scalable security tooling, automation, and observability; leads threat modeling, risk assessments, code reviews, and multi-team remediation. Develops strategies for AI-powered systems and agentic development risks, API security, and software supply chain security. Partners with engineering and security teams, prioritizes investments, communicates risk to leadership, and mentors AppSec engineers.

Triage bug bounty and vulnerability management reports, validate findings, assess severity, identify duplicates, and coordinate remediation through closure. Collaborate with PSIRT, engineering, legal, communications, customer success, and security teams. Support CVE assignments as a CNA representative, communicate with researchers and customers, maintain accurate records, monitor operational metrics, and improve vulnerability-handling procedures, runbooks, and documentation.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.

Lead Affirm’s enterprise AI security review program, threat model LLM and agentic systems, review code and configurations, and develop security guardrails, tooling, policies, and monitoring. Evaluate AI-enabled SaaS vendors, identify emerging vulnerabilities, support incident response, and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance. The role requires expertise in AI security architecture, threat modeling, IAM, cloud infrastructure, policy-as-code, and regulated enterprise environments.

Support day-to-day GRC operations: assess third-party vendors, maintain vendor risk register, track remediation and control evidence, assist with internal control testing and audits (SOC 2, ISO 27001, PCI-DSS), maintain policies, prepare reporting, and contribute to process improvements.

Provides partner-facing support for cybersecurity incidents through email, chat, and phone. Triages SOC queues, troubleshoots security and product questions, translates findings into practical guidance, coordinates escalations, supports high-severity incident calls, documents investigations, manages follow-ups, and contributes to knowledge-base and process improvements. The role includes scheduled live coverage and occasional weekend or on-call support.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Own customer-facing OT cybersecurity engagements globally, generating demand, leading consultative workshops, and designing target-state architectures across Zscaler’s OT portfolio. The role requires expertise in industrial control systems, Purdue-level OT environments, segmentation, network controls, asset visibility, and privileged access management. Responsibilities also include supporting Proof of Value planning, translating architecture into business outcomes, developing technical pipeline, providing field enablement, creating thought leadership, and feeding structured customer insights to product and sales teams.

Promote information security best practices, identify and report security risks, and evaluate how data is stored, processed, and transmitted. Ensure compliance with data privacy standards (GDPR, CCPA) and integrate data protection throughout the information lifecycle.

Perform security-focused design reviews across applications, systems, networks, cloud, CDN, and security products. Partner with development and infrastructure teams to remediate vulnerabilities, guide secure design decisions, advise on security practices, support incident response, and ensure security and compliance requirements. Apply threat modeling, current vulnerability knowledge, and responsible AI practices while communicating effectively with global technical and nontechnical stakeholders.