Top Cybersecurity Jobs in Boston, MA

Lead the creation and growth of a new OT/IoT cybersecurity practice, owning its P&L, offerings, pricing, partnerships, hiring, delivery quality, and go-to-market strategy. Serve as a senior technical SME and trusted advisor for client assessments, regulatory compliance, executive workshops, roadmaps, and security engagements. Shape and close consulting opportunities, develop methodologies and deliverables, manage teams, and advise organizations on ICS/SCADA, segmentation, monitoring, IT/OT convergence, and AI-related risks.

Lead advanced security operations investigations, serve as the escalation point for high-severity incidents, perform threat analysis and hunting, tune SIEM detections, develop automated response playbooks, and improve monitoring workflows. The role also documents incidents and procedures, supports compliance and disaster recovery exercises, integrates telemetry sources, collaborates on remediation, and mentors junior SNOC engineers.

Own complex client relationships and lead end-to-end cybersecurity compliance engagements across SOC 2, ISO 27001, NIST CSF, HIPAA, and related frameworks. Manage audits, risk assessments, evidence collection, policy development, escalations, and process optimization. Lead and mentor analyst pods while serving as the primary client contact and ensuring successful compliance outcomes.

Leads and coordinates security and operational incident response for infrastructure, platforms, hosting, and customer environments. Serves as incident commander, manages escalations and communications, facilitates bridge calls and post-mortems, analyzes incident trends, maintains response procedures, and tracks corrective actions. Partners with technical and leadership teams to improve incident management maturity, accountability, governance, reporting, and operational transparency during high-severity events.

Own and operate OpenRouter’s compliance and GRC program, including Drata administration, SafeBase management, audit readiness, evidence collection, personnel compliance, access reviews, penetration tests, risk assessments, and incident-response exercises. Partner with Engineering, HR, Legal, Customer Support, and Finance to implement controls across SOC 2, HIPAA, PCI DSS, GDPR, CCPA, BIPA, and the EU AI Act, while translating emerging AI regulations into practical controls.

Lead SailPoint identity engineering workstreams from architecture reviews and assessments through design, implementation, testing, and delivery. Build and maintain IdentityIQ and Identity Security Cloud solutions, connectors, workflows, rules, provisioning, certifications, and automation. Integrate enterprise systems, review code and designs, mentor engineers, advise clients, and improve operational efficiency. The role also supports platform migrations, tool evaluations, knowledge transfer, and emerging non-human identity initiatives.

Build and operate reliable, scalable, secure cloud services for authentication systems. Develop Go and Python applications across AWS and GCP, using services such as Kinesis, DynamoDB, and S3. Own projects from design through production, participate in code and design reviews, troubleshoot operational issues, improve observability and deployments, and contribute to microservices, infrastructure, security, and engineering best practices. Participate in an on-call rotation and collaborate with engineering, research, testing, and product teams.

Leads the organization’s cybersecurity program, including security operations, incident response, vulnerability management, GRC, compliance, third-party risk, security architecture, automation, and AI adoption. Manages security staff, vendors, MDR providers, projects, policies, audits, and operational improvements while reporting risks and performance to senior leadership. The role also drives security awareness, cross-functional collaboration, incident preparedness, and team development.

Create challenging coding tasks for AI systems, implement deterministic solution verifiers, and contribute backend expertise across feature development, bug fixing, refactoring, performance optimization, testing, and security reviews. The role requires strong programming and software engineering skills, with cybersecurity experience in secure coding, application security, penetration testing, vulnerability assessment, or security-focused code reviews preferred.

Manage and secure client Windows Server, cloud, virtualization, Active Directory, and Microsoft 365 environments. Administer tenant hardening, migrations, identity integrations, backups, disaster recovery, patching, and compliance controls. Lead P1/P2 incident response, root-cause remediation, change management, documentation, and infrastructure improvement initiatives. Partner with service desk, engineering, and security teams, advise clients on modernization and security enhancements, maintain operational runbooks, and mentor junior technicians.