Top Tech Jobs & Startup Jobs in Boston, MA

Designs, implements, integrates, secures, and optimizes cybersecurity technologies across cloud, on-premises, hybrid, and multi-vendor environments. Leads security tool integration and automation using scripts, APIs, connectors, and orchestration workflows. Supports security architecture reviews, technology evaluations, incident response, security operations, troubleshooting, and continuous improvement. Collaborates with engineering, operations, development, administration, and customer stakeholders to improve cyber defense capabilities and resilience.

Monitors security events in a 24x7 SOC, triages alerts, investigates suspicious activity, analyzes logs and endpoint data, documents findings, creates incident tickets, collects initial evidence, and escalates confirmed threats. Requires cybersecurity fundamentals, familiarity with SIEM and EDR tools, strong written communication, and the ability to maintain focus during high alert volumes.

Leads advanced SOC investigations, incident response, threat hunting, detection engineering, and cyber defense efforts. Investigates sophisticated threats including nation-state activity, ransomware, and enterprise compromises across networks, endpoints, cloud, and identity systems. Develops investigative strategies, performs root-cause analysis, mentors junior analysts, coordinates major incident response, and improves SOC operations and detection capabilities.

Conducts advanced cybersecurity investigations and incident response within a Security Operations Center. Responsibilities include threat hunting, malware triage, forensic review, log analysis, threat intelligence correlation, and technical response coordination. The analyst leads moderate-severity incidents, guides Tier 1 analysts, and improves detection engineering through alert-rule refinement and monitoring-content development. The role requires expertise in SIEM, EDR, network and cloud security, attack frameworks, incident response, and digital evidence collection.