Top Cybersecurity Jobs in Boston, MA

Secure and continuously improve cloud platform environments across classified and unclassified DoD systems. Responsibilities include vulnerability remediation, ATO and cATO support, security automation, DevSecOps integration, Zero Trust, IAM, PKI, network security, monitoring, and RMF documentation. The engineer will collaborate with software, platform, SRE, product, and government teams while troubleshooting access and security issues and supporting secure enterprise deployments.

Lead product strategy and execution for Arctic Wolf's XDR offering, unifying telemetry, detections, investigations, and response across endpoint, identity, network, cloud, and SaaS. Define roadmap, partner with engineering, data, AI, services, and GTM, operationalize proof‑of‑value metrics, and build a high‑performing product team to scale XDR as a platform supporting MDR and customer‑managed models.

Conduct web, mobile, API, network, and social engineering penetration tests; identify vulnerabilities, develop technical reports, recommend mitigations, and present findings to clients. Ensure assessments align with GDPR, PCI-DSS, SOC 2, and other standards while tracking emerging threats. The role is remote and contract-based, with cloud security, certifications, mobile testing, API security, and scripting experience preferred.

Leads data security governance across database monitoring, encryption, certificate and key management, HSM operations, data masking, and cryptographic asset inventory. Manages a security governance team, develops controls and procedures, supports audits and regulatory inquiries, partners cross-functionally, and drives post-quantum cryptography readiness, automation, metrics, service reliability, and operational maturity.

Leads security compliance for a FedRAMP-authorized cloud environment. Maintains the ATO, coordinates continuous monitoring, assessments, audits, penetration testing, risk reviews, POA&M remediation, security documentation, and NIST control implementation. Partners with engineering, DevOps, cloud operations, compliance, and government stakeholders to support incident response, secure system changes, cloud deployments, and audit readiness.

Manage identity and access management operations, including account provisioning, deprovisioning, access modifications, reviews, ticket queues, escalations, application onboarding, and regulatory evidence collection. Support leadership, coordinate global and offshore teams, oversee service quality and timeliness, update procedures, resolve incidents, and provide guidance to application administrators. The role requires IAM, information security, ticketing, access governance, and technology operations experience.

Designs, implements, and manages AWS cloud security policies, architecture, and technologies. The role oversees firewalls, DLP, vulnerability scanning, monitoring, logging, IAM, incident response, compliance, and remediation. It provides security guidance for AWS solutions, supports migrations of mission-critical applications, researches new technologies, documents standards, presents to varied audiences, and mentors less experienced engineers. The position requires strong AWS expertise, infrastructure-as-code proficiency, knowledge of regulated healthcare environments, and experience securing highly available cloud and serverless architectures.

Leads cybersecurity governance, risk, and compliance activities, including risk assessments, security policies, ISO 27001 and NIST alignment, ISMS management, audits, data protection, access reviews, security awareness, incident response testing, and business continuity/disaster recovery planning. Manages third-party security risks, supports GRC tools, and provides reporting to leadership and regulators.

Own the technical sales lifecycle for an offensive security platform, including enterprise evaluations, technical scoping, demos, security reviews, live evaluation support, and customer handoffs. Develop evidence, narratives, demo environments, playbooks, and reusable technical assets. Partner with sales, product, research, and delivery teams while providing product feedback. Resolve customer issues independently and communicate effectively with both technical and executive audiences.

Lead the RMF/ATO lifecycle for a DoD software modernization initiative, maintaining authorization packages, security documentation, risk assessments, POA&Ms, and continuous monitoring artifacts. Conduct vulnerability assessments and remediation using enterprise security tools, enforce NIST, DoD, cloud, and DISA STIG requirements, and support Agile/DevSecOps deployments. Provide secure architecture guidance, incident response, audit support, stakeholder reporting, and cybersecurity risk insights while collaborating with ISSMs, technical teams, government representatives, and Authorizing Officials.