Top Remote Cyber Security Jobs in Boston, MA

Design and implement infrastructure security for AWS, Kubernetes, identity, networks, workloads, and CI/CD. Build agentic security tooling, lead detection and incident response, enforce least privilege, conduct architecture reviews, automate vulnerability and compliance monitoring, and guide teams toward secure designs. The role also investigates cloud security events, hardens infrastructure, creates audit evidence, and communicates technical risks to non-technical partners.

Executes end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational environments. Develops offensive tooling, implants, and evasion tradecraft; operates and improves AI-driven security agents; discovers and exploits vulnerabilities; and communicates findings to customers and internal security teams. The role also contributes to operational playbooks, product hardening, detection improvements, and scalable offensive security practices.

Leads the university’s information security architecture and engineering strategy, including cloud, network, endpoint, application, data, identity, and AI security. Establishes zero trust, DevSecOps, infrastructure-as-code, and security-as-code practices; oversees architecture, technology selection, compliance alignment, automation, and AI security initiatives. Builds roadmaps, secures funding, manages strategic initiatives, and leads, recruits, mentors, and develops security architects, engineers, and managers while advising executive leadership.

Lead the design and implementation of Aalyria’s security platform, including identity, authentication, authorization, PKI, workload identity, secrets, key management, audit evidence, and security standards. Build systems that operate securely in commercial, government, classified, and disconnected environments. Set technical direction across teams, mentor engineers, threat-model distributed systems, and operate production services through upgrades, maintenance, and incidents.

Designs, implements, and maintains enterprise security solutions across networks, endpoints, email, identity, and data protection. Responsibilities include firewall and VPN management, threat detection, incident response, vulnerability management, security audits, penetration testing, SOC 2 compliance, phishing response, SIEM monitoring, threat hunting, and security assessments. The role also supports Azure security, third-party risk questionnaires, technical design reviews, and off-hours security operations.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Owns Blueberry’s day-to-day security operations, including vulnerability management and remediation across GCP and Python/Django applications. Maintains detection, logging, monitoring, incident readiness, backups, endpoint security, network controls, access management, and IT administration. The role requires production Python experience, Linux administration, cloud experience, and hands-on familiarity with security tools and controls.

Build and operate secure, reliable Azure GPU infrastructure for distributed AI training and reinforcement-learning workloads. Develop fleet-level automation, infrastructure-as-code, remediation, drift detection, and deployment tooling. Troubleshoot multi-node, multi-GPU, networking, performance, and reliability issues while translating ambiguous research needs into production solutions. Partner with engineers, researchers, and stakeholders on architecture, security, and delivery decisions, and contribute through code reviews, technical collaboration, and mentoring.

Leads enterprise AI security and GenAI data protection, owning the AI Gateway from evaluation through deployment and operations. Designs monitoring, coaching, redaction, quarantine, and blocking controls for prompts, uploads, browser traffic, copilots, agents, and integrations. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures control effectiveness, and supports audit and regulatory readiness while enabling responsible AI adoption.

Lead Buffer’s security strategy and execution as a hands-on security engineer. Responsibilities include application and API security, secure development practices, AI threat modeling, incident leadership, vulnerability disclosure, SOC 2 and customer compliance, security automation, and infrastructure risk assessment. The role partners closely with engineering and business teams, writes and reviews code, supports on-call operations, and establishes security standards in a distributed SaaS environment.

Provides technical leadership for cybersecurity engineering on AWACS aircraft and ground-system modernization programs. Responsibilities include secure network and communications architecture, RMF compliance, ATO/IATT and POA&M development, cyber risk assessments, avionics and mission-system integration, TEMPEST compliance, security requirements, and design reviews. The role supervises personnel and collaborates with systems, software, avionics, and test engineering teams. Active Secret clearance and significant military aviation cybersecurity experience are required, with 25–35% domestic and international travel.

Assesses and mitigates security risks across applications, systems, networks, and cloud infrastructure. Conducts security assessments, identifies vulnerabilities and compromises, deploys mitigating controls, performs compliance investigations, and develops security guidance, policies, scripts, and tools. The role requires collaboration with IT, engineering, and business units, with emphasis on NIST frameworks, adversarial techniques, malware, intrusion management, FedRAMP, and CMMC environments.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Own and improve network, firewall, cloud, endpoint, identity, email, and SaaS security controls. Responsibilities include firewall administration, VPNs, segmentation, secure architecture, traffic and log analysis, incident investigation, vulnerability remediation, security monitoring, technical project support, compliance evidence, and automation. The role collaborates with Infrastructure and DevOps teams, troubleshoots complex connectivity and security issues, and applies least-privilege, Zero Trust, and defense-in-depth principles.

Leads technical security sales engagements for K-12 and community college customers through demonstrations, workshops, whiteboarding, hackathons, and proofs of concept. Designs secure cloud and hybrid architectures, resolves technical blockers, advises on Zero Trust, XDR, AI security, and compliance, and supports production deployments. Builds relationships with developers, platform leaders, partners, and customer success teams while promoting Microsoft security, cloud, and AI solutions.

Leads regional enterprise security sales by serving as a cloud security expert, shaping opportunities, advising account teams, managing executive relationships, and orchestrating technical teams and partners. Conducts architecture reviews, demos, proof-of-concepts, pilots, ROI/TCO analyses, and consultative engagements to promote Microsoft security solutions, Zero Trust adoption, and customer business outcomes.

Provides technical pre-sales leadership for data security solutions, including demos, proofs of concept, architecture workshops, and secure cloud or hybrid deployments. Advises customers on data security posture, Microsoft Purview, AI application security, and scalable architectures. Builds developer and platform-lead relationships, resolves technical blockers, develops technical win strategies, and collaborates with product engineering. Represents Microsoft in customer and developer communities.

Secures and governs cloud-native platforms, Kubernetes environments, CI/CD pipelines, identities, APIs, secrets, and AI workloads. The role implements vulnerability scanning, secure software supply chain controls, access governance, monitoring, threat detection, and incident response support. It partners with engineering and operations teams to establish security standards, remediate vulnerabilities, harden infrastructure, and advance secure-by-design practices across cloud and application environments.

Design, secure, administer, and improve on-premises, cloud, and hybrid infrastructure. Manage servers, networks, operating systems, virtualization, firewalls, endpoints, and monitoring tools. Strengthen security controls, investigate incidents with a third-party SOC, manage vulnerabilities and risks, maintain documentation, and lead infrastructure and security projects including upgrades, migrations, automation, and tool deployments.

Serves as a senior technical authority for Splunk security solutions across the Americas Service Provider market. Advises CISOs and technical leaders, designs SIEM and security operations architectures, leads complex technical sales engagements, supports competitive displacement, mentors field teams, and provides customer and market insights to product and engineering organizations.

Designs and implements secure architecture across cloud, on-premises, hybrid, application, infrastructure, and AI-enabled environments. Defines security controls, governance requirements, and enterprise guardrails; supports cloud transformation and emerging AI adoption. Leads architecture reviews, ensures regulatory and policy compliance, and collaborates with architecture, engineering, development, cybersecurity, compliance, risk, and operations teams to identify and mitigate security risks.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Conduct hardware, network, web, mobile, and application security assessments, including threat modeling, code review, penetration testing, firmware and binary analysis, and technical writing. Analyze embedded architectures, debug interfaces, firmware security mechanisms, proprietary protocols, IoT devices, and customer environments. Communicate findings and recommendations to customers while adapting quickly to unfamiliar technologies and delivering quality results on complex projects.