Top Cybersecurity Jobs in Boston, MA

Serves as the lead legal advisor on cybersecurity for financial services operations. Advises on cyber incidents, materiality assessments, regulatory notifications, breach and privacy laws, crisis management, cyber governance, third-party security, and regulatory examinations. Drafts cybersecurity policies and incident response playbooks, supports tabletop exercises and remediation, evaluates security controls, and partners with information security, technology, compliance, risk, and executive teams.

Lead application security strategy and DevSecOps implementation across engineering teams. Own application security capabilities, including SAST, SCA, DAST, API security testing, vulnerability management, and CI/CD controls. Lead API security discovery, testing, onboarding, findings routing, and operational readiness. Partner with product, engineering, DevOps, infrastructure, IAM, and enterprise security teams to identify architectural weaknesses, improve SDLC adoption, automate abuse-case coverage, and operate hardened platforms.

Own OT security engineering for laboratory instruments, automation, and building systems. Translate OT security architecture into controls (segmentation, identity, PAM, PKI), build detection and response, validate vendor integrations, run vulnerability and lifecycle management, and mentor engineers while partnering with SOC, OT engineering, and lab operations.

Executes complex, risk-based IT audits and evaluates technology control design and operating effectiveness across applications, infrastructure, systems, and cloud environments. Reviews evidence, identifies control deficiencies and cybersecurity risks, documents testing, follows up on corrective actions, and drafts recommendations. Supervises and coaches junior auditors, reviews their workpapers, collaborates with stakeholders, and ensures compliance with audit methodologies and professional standards.

Build and improve security across applications, cloud infrastructure, internal systems, and products. Responsibilities include identifying and remediating risks, developing security tooling and automation, conducting architecture reviews and threat modeling, integrating security into the software development lifecycle, strengthening identity and access controls, and developing monitoring, vulnerability management, detection, and incident response capabilities.

Build secure, scalable software products and infrastructure with an emphasis on application security, access control, threat modeling, audits, monitoring, CI/CD security, cloud infrastructure, and secure development processes. Develop Python web services, APIs, dashboards, distributed ML systems, and infrastructure using Kubernetes, Helm, and Terraform. Collaborate autonomously across the business, drive complex projects end to end, and establish security-by-default engineering practices.

Drives application security initiatives for complex desktop CAD software, including secure SDLC controls, threat modeling, architecture reviews, vulnerability remediation, and security requirements. Leads SOC 2 readiness, annual assessments, audits, DevSecOps and CI/CD security integration, and rollout of SAST, DAST, and SCA tools. Partners with engineering, security, compliance, and external stakeholders to address AI security, cloud-connected components, open-source risks, incident response, and product security standards.

Oversee the security of firm applications, networks, systems, hardware, and mobile devices throughout their lifecycles. Develop security requirements and architecture, manage controls and configurations, perform certification and accreditation, maintain asset inventories, and ensure secure development and acquisition practices. Collaborate across departments and mentor team members while serving as a primary technical security contact. The role requires independent judgment, strong analytical ability, knowledge of security frameworks and technologies, and at least seven years of related experience.

Lead second-line cybersecurity and technology risk assessments for financial services clients, advise on regulatory readiness and frameworks, improve governance and reporting, and guide remediation, IAM, cloud security, incident response, third-party risk, and AI risk initiatives while mentoring junior staff and communicating findings to executives and boards.

Leads Medtronic’s enterprise Security Culture function, developing cybersecurity awareness, communications, engagement, ambassador, and behavior-change programs. Establishes the function’s strategy, maturity roadmap, operating model, metrics, and reporting. Manages and develops cybersecurity specialists while partnering with HR, Communications, IT, Legal, Compliance, business leaders, and security stakeholders. The role reduces human-related cyber risk through education, role-based learning, campaigns, analytics, automation, and global employee engagement initiatives.