Top Cybersecurity Jobs in Boston, MA

Perform advanced OSINT investigations and threat monitoring to assess geopolitical, reputational, and security risks. Produce concise executive-level briefings, dashboards, and KPIs using tools like LifeRaft Navigator, Recorded Future, and Power BI. Support time-sensitive intelligence during fast-moving events, conduct attribution and narrative analysis across platforms, and collaborate with analysts and stakeholders to inform decision-making and measure program effectiveness.

Own and modernize the companys governance, risk, and compliance program across federal and commercial markets. Lead certification and surveillance cycles, run risk and third-party vendor programs, apply GRC engineering and AI for automation and continuous controls monitoring, coordinate external audits, manage customer security assurance, and grow a scalable GRC team.

Build and operate automated compliance and continuous control monitoring systems to support HIPAA, SOC 2, NIST and related frameworks. Automate evidence collection, integrate GRC and source systems, create dashboards and workflows, identify and remediate control gaps, and support audit readiness. Partner cross-functionally with Security, IT, Compliance, Legal and Engineering to embed controls and improve compliance automation and AI governance.

Lead and execute IT audit engagements across APAC, evaluating IT infrastructure, cybersecurity, applications, and controls. Use data analytics to design and perform data-driven audit procedures, validate remediation, prepare audit reports and working papers, support continuous auditing and automation, and collaborate with regional/global audit teams and governance forums.

Execute offensive security assessments across cloud and corporate environments, find vulnerabilities in software, systems, and networks, develop tooling and infrastructure to support Red Team engagements, set scope and metrics, communicate findings to stakeholders, and drive remediation.

Lead and operationalize the Identity & Access Management portfolio: translate strategy into programs, manage backlog and intake, drive delivery and audit-ready controls, coordinate cross-team priorities, build executive reporting and dashboards, and remove delivery blockers to ensure predictable, governed IAM onboarding (SailPoint/SSO/MFA) and regulatory compliance.

Lead day-to-day IT operations and the DLP program: monitor and tune DLP policies, investigate alerts, administer endpoint management (Jamf), remediate vulnerabilities (CrowdStrike), support Okta/SSO provisioning, assist onboarding/offboarding, and collaborate with Security and cross-functional teams to improve IT and security processes.

Lead a small AI and data team to design, build, and operationalize scalable data pipelines and ML/LLM models for offensive cybersecurity. Set technical roadmap, ensure secure multi-tenant architectures, drive MLOps/CI-CD, integrate generative AI (OpenAI/Bedrock/Anthropic), and partner across product, platform, and infrastructure teams while mentoring engineers.

Lead and coordinate enterprise-wide response to critical cybersecurity incidents and vulnerabilities. Triage incidents, make high-stakes remediation decisions, produce incident reports and executive updates, validate customer guidance, and drive cross-organizational remediation efforts to protect Microsoft and its customers.

Lead global partner/channel marketing: develop partner marketing strategies and annual plans, manage budgets, create partner enablement tools and campaigns, drive lead generation and revenue, measure ROI, collaborate cross-functionally with sales and regional teams, present at events, and scale joint GTM value propositions with strategic partners.