Top Cybersecurity Jobs in Boston, MA

Designs, develops, deploys, and supports enterprise security automations, custom tools, integrations, and workflows. Responsibilities include Python-based application and API development, vulnerability enrichment, incident response automation, IAM administration, Linux and Docker platform support, and administration of SIEM, SOAR, endpoint, cloud, network, and other security technologies. The role also troubleshoots integrations, monitors operational health, supports security teams, and maintains resilient, secure configurations across enterprise systems.

Lead the vision, roadmap, backlog, and release strategy for RangeOS, a cyber range orchestration platform. Translate mission and customer needs into requirements and user stories, prioritize features, coordinate with engineering and multi-vendor partners, support deployments and integrations, validate capabilities through testing, and maintain product documentation. The role requires collaboration across cyber operations, training environments, cloud and hybrid deployments, with responsibility for ensuring the platform meets operational cyber training objectives.

Administer Axonius or comparable asset intelligence platforms, develop dashboards and queries, identify asset and log-coverage gaps, resolve data-correlation issues, onboard log sources, manage data exports, optimize configurations, document processes, and train internal teams.

Lead client cybersecurity incidents from triage through containment and reporting. Serve as incident commander, coordinate SOC and technical teams, communicate with executives and external counsel or DFIR firms, and determine escalation boundaries. Build incident response playbooks, severity models, escalation processes, client reports, and tabletop exercises. Mentor analysts and improve detection practices. The role requires hands-on investigation across cloud, identity, endpoint, server, and network environments, plus on-call availability.

Leads DevSecOps, cloud platform operations, and security engineering across AWS, Azure, and classified environments. Owns infrastructure and compliance automation, cloud security, CI/CD security, incident escalation, reliability, authorization-to-operate readiness, CMMC alignment, and operational KPIs. Builds and manages technical teams, plans capacity, supports proposals and pricing, provides architecture and control mappings, and briefs executives on risks, staffing, roadmaps, and mission outcomes.

Establish and enforce security controls across Google Cloud and Oracle Cloud environments for a federal health customer. Manage IAM federation, least-privilege access, centralized monitoring, vulnerability remediation, and cloud security tooling. Validate deployments against FedRAMP High, FISMA, and NIST 800-53 requirements, support zero-trust architecture, and collaborate with governance, audit, security, and engineering teams. The role also provides technical leadership and develops cloud security standards.

Provides pre-sales technical support and technical account management for Vectra’s cybersecurity platform. Leads customer discovery, product demonstrations, proofs of concept, technology reviews, integrations, and security architecture discussions. Builds technical relationships with customers and channel partners, supports sales teams, collaborates on deployments and product projects, and maintains expertise in security technologies, networking, cloud security, attacker progression, incident response, and competitive offerings. Regional travel is required as needed.

Lead and grow Enterprise sales in the US East region by building pipeline, managing and developing regional sales teams, driving forecasting, partnering cross-functionally, and executing strategic plans to meet revenue and profitability targets in the cybersecurity SaaS space. Responsible for hiring, coaching, territories, quotas, channel relationships, and ~50-60% travel.

Own identity and endpoint security across the company, including SSO, MFA, access provisioning, access reviews, MDM, EDR, device security baselines, and IT workflows. Respond to identity and endpoint incidents, assess vendor and SaaS integration risks, support secure AI tool adoption, automate security processes, and help develop scalable security policies and controls.

Supports enterprise identity and access management operations, including access controls, role-based policies, user lifecycle management, security solution configuration, monitoring, incident investigation, vulnerability assessments, audits, and access request processing. The role works with application owners and leadership to remediate vulnerabilities, maintain IAM standards and baselines, support cloud and directory technologies, and provide end-user assistance while protecting company systems and data.