Top Cybersecurity Jobs in Boston, MA

Build and operate reliable, scalable, secure cloud services for authentication systems. Develop Go and Python applications across AWS and GCP, using services such as Kinesis, DynamoDB, and S3. Own projects from design through production, participate in code and design reviews, troubleshoot operational issues, improve observability and deployments, and contribute to microservices, infrastructure, security, and engineering best practices. Participate in an on-call rotation and collaborate with engineering, research, testing, and product teams.

Leads the organization’s cybersecurity program, including security operations, incident response, vulnerability management, GRC, compliance, third-party risk, security architecture, automation, and AI adoption. Manages security staff, vendors, MDR providers, projects, policies, audits, and operational improvements while reporting risks and performance to senior leadership. The role also drives security awareness, cross-functional collaboration, incident preparedness, and team development.

Manage and secure client Windows Server, cloud, virtualization, Active Directory, and Microsoft 365 environments. Administer tenant hardening, migrations, identity integrations, backups, disaster recovery, patching, and compliance controls. Lead P1/P2 incident response, root-cause remediation, change management, documentation, and infrastructure improvement initiatives. Partner with service desk, engineering, and security teams, advise clients on modernization and security enhancements, maintain operational runbooks, and mentor junior technicians.

Lead the vision, roadmap, backlog, and release strategy for RangeOS, a cyber range orchestration platform. Translate mission and customer needs into requirements and user stories, prioritize features, coordinate with engineering and multi-vendor partners, support deployments and integrations, validate capabilities through testing, and maintain product documentation. The role requires collaboration across cyber operations, training environments, cloud and hybrid deployments, with responsibility for ensuring the platform meets operational cyber training objectives.

Lead client cybersecurity incidents from triage through containment and reporting. Serve as incident commander, coordinate SOC and technical teams, communicate with executives and external counsel or DFIR firms, and determine escalation boundaries. Build incident response playbooks, severity models, escalation processes, client reports, and tabletop exercises. Mentor analysts and improve detection practices. The role requires hands-on investigation across cloud, identity, endpoint, server, and network environments, plus on-call availability.

Leads DevSecOps, cloud platform operations, and security engineering across AWS, Azure, and classified environments. Owns infrastructure and compliance automation, cloud security, CI/CD security, incident escalation, reliability, authorization-to-operate readiness, CMMC alignment, and operational KPIs. Builds and manages technical teams, plans capacity, supports proposals and pricing, provides architecture and control mappings, and briefs executives on risks, staffing, roadmaps, and mission outcomes.

Establish and enforce security controls across Google Cloud and Oracle Cloud environments for a federal health customer. Manage IAM federation, least-privilege access, centralized monitoring, vulnerability remediation, and cloud security tooling. Validate deployments against FedRAMP High, FISMA, and NIST 800-53 requirements, support zero-trust architecture, and collaborate with governance, audit, security, and engineering teams. The role also provides technical leadership and develops cloud security standards.

Own identity and endpoint security across the company, including SSO, MFA, access provisioning, access reviews, MDM, EDR, device security baselines, and IT workflows. Respond to identity and endpoint incidents, assess vendor and SaaS integration risks, support secure AI tool adoption, automate security processes, and help develop scalable security policies and controls.

Supports enterprise identity and access management operations, including access controls, role-based policies, user lifecycle management, security solution configuration, monitoring, incident investigation, vulnerability assessments, audits, and access request processing. The role works with application owners and leadership to remediate vulnerabilities, maintain IAM standards and baselines, support cloud and directory technologies, and provide end-user assistance while protecting company systems and data.

Own Clerk’s SOC 2 Type II, HIPAA, and future compliance frameworks. Design controls, manage evidence and audits, lead vendor reviews, maintain risk assessments, and oversee security questionnaires and trust center workflows. Build integrations, automations, policy-as-code checks, configuration drift detection, and control-failure pipelines across cloud, SaaS, and internal systems. Embed compliance into software development and change management while reducing manual audit work.