Top Cybersecurity Jobs in Boston, MA

Lead and grow the application security practice, embed security across the SDLC, champion DevSecOps, and review DAST/SAST/IAST findings. Align secure design and testing (OWASP/API Top 10) with development projects, shape strategy and policies, and influence risk mitigation for enterprise applications and APIs.

Lead enterprise sales for large public-sector and critical-infrastructure clients by building CxO relationships, driving consultative sales cycles, managing pipeline and forecasts, collaborating with partners and services to close complex, six-figure deals, and maintain expertise in cybersecurity products and market dynamics.

Validate, reproduce, and triage vulnerability reports for web and mobile applications; assess severity and impact using CVSS and security frameworks; communicate findings and remediation to customers and researchers; leverage automation/AI workflows; collaborate cross-functionally and improve triage processes. Weekend shifts required occasionally.

Provide legal counsel on information security, privacy, and compliance for software, AI/SaaS/cloud, and professional services contracts. Negotiate security/privacy terms, liaise with commercial, security, sales, and technical teams, ensure contractual alignment with internal controls and global regulations, and develop standard contract language and playbooks for telecom/ISP customers worldwide.

Lead cloud security engineering by designing and automating scalable controls, building safe-by-default tooling, conducting security assessments and threat modeling, responding to incidents, and partnering with engineering teams to remediate vulnerabilities and secure cloud infrastructure.

Secure autonomous vessels and supporting infrastructure via vulnerability assessments, penetration testing, network architecture/hardening (VPN/mesh, firewalls), AWS security, SAST/SCA integration into CI/CD, monitoring (Datadog), incident response, security tooling, documentation, and DevOps support to embed security into the SDLC.

Lead Workday security architecture and administration for HCM, Payroll, and Finance. Manage role-based access, security groups, integration security, audits, SOX/GLBA compliance, security testing for releases, and partner with HR/Finance/Identity teams to implement controls, trainings, and remediation.

Lead and manage a security team to design, implement, and improve enterprise DLP and DSPM programs across on‑prem, cloud, and SaaS. Oversee TPRM, enforce policies, coordinate incident response and forensic investigations, perform security architecture reviews, and ensure regulatory compliance (GDPR/CCPA).

Lead day-to-day cybersecurity operations and long-term security strategy. Manage MSSP/MSP relationships, drive cloud and application security (AWS/Azure), oversee detection/response (SIEM/EDR), tune alerts, conduct incident response, maintain policies, run awareness training, and report security posture to leadership.

Lead modernization of a global Third-Party Risk Management (TPRM) program by shifting from questionnaire-centric assessments to a data-driven model using technical validation, automation, continuous monitoring, and AI. Partner with Procurement, Legal, Privacy, and Supply Chain to standardize contracts and controls, maintain centralized third-party inventories, report risks to senior leadership, and build a high-performing TPRM team while overseeing advanced technical assessments for critical suppliers.