Top Cybersecurity Jobs in Boston, MA

Lead the RMF/ATO lifecycle for a DoD software modernization initiative, maintaining authorization packages, security documentation, risk assessments, POA&Ms, and continuous monitoring artifacts. Conduct vulnerability assessments and remediation using enterprise security tools, enforce NIST, DoD, cloud, and DISA STIG requirements, and support Agile/DevSecOps deployments. Provide secure architecture guidance, incident response, audit support, stakeholder reporting, and cybersecurity risk insights while collaborating with ISSMs, technical teams, government representatives, and Authorizing Officials.

Owns the end-to-end detection and response program for cloud infrastructure, Kubernetes, research environments, AI tooling, and products. Responsibilities include developing detections as code, leading incident investigations, automating triage and containment, monitoring AI agents, conducting threat hunts and tabletop exercises, improving security telemetry, supporting SOC 2 and ISO 27001 evidence collection, and participating in security incident on-call rotations.

Oversee application security scanning, vulnerability remediation, and security-related release readiness while developing and maintaining full-stack Java web applications. Coordinate with IRS personnel, create remediation milestones, lead technical meetings, troubleshoot environments, review code, perform testing, and document technical solutions. The role requires extensive J2EE development, security tooling, CI/CD, OpenShift, mainframe integration, and vulnerability management experience in a federal environment.

Leads cybersecurity architecture for software systems, cloud and on-premises infrastructure, and satellite ground-segment deployments. Develops security roadmaps, architectural blueprints, compliance solutions, and automated controls within Terraform and Helm. Assesses vulnerabilities, coordinates security implementation across engineering and infrastructure teams, documents systems, manages project risks, and translates regulatory requirements into engineering specifications. Requires extensive DevSecOps leadership, Kubernetes experience, security framework expertise, and eligibility for a U.S. security clearance.

Conduct threat intelligence analysis, vulnerability assessments, and incident response; develop security policies; maintain security systems; educate users on safe online behavior; monitor emerging threats; and collaborate with mental health professionals on cyberbullying and online harassment impacts.

Supports cloud security operations across Azure and AWS, including posture management, identity and access controls, architecture reviews, network security, DevSecOps, infrastructure-as-code reviews, data protection, monitoring, incident response, compliance assessments, and leadership reporting. Coordinates remediation with infrastructure, application development, and information security teams while maintaining cloud security policies, dashboards, documentation, and audit evidence.

Lead Ent’s internal security program across people, systems, infrastructure, product development, and company data. Set security strategy, manage risk, establish cloud and endpoint controls, lead incident response, embed security into software development, and oversee SOC 2, ISO 27001, FedRAMP, audits, and customer diligence. Build the security team and operating model while advising executives, the board, customers, and partners on security risks and priorities.

Own security partnerships for Netflix Marketing and Animation, advising leaders on risk, GenAI adoption, access controls, content protection, architecture, and remediation. Lead risk assessments, business risk profiles, metrics, and pre-release content security initiatives. Support technical security due diligence for acquisitions and subsidiaries while translating complex security concerns into actionable business guidance across application, cloud, identity, and data domains.

Implements and maintains security technologies across endpoint, network, cloud, server, and mobile environments. Monitors alerts, investigates incidents, performs vulnerability assessments, develops detection rules, hardens systems, supports identity and access controls, automates security tasks, and coordinates remediation. The role also supports audits, security reviews, documentation, reporting, and continuous improvement while collaborating with IT and security teams.

Own day-to-day GRC operations, including access reviews, security awareness, policy exceptions, risk assessments, third-party risk, internal audits, control monitoring, and audit evidence automation. Maintain policies, metrics, and audit readiness across SOC 2, HIPAA, ISO, NIST, GDPR, and CCPA frameworks. Partner with engineering, IT, legal, operations, and sales to operationalize controls and remediate findings, with opportunities to lead audits and mature the compliance program.