Top Cybersecurity Jobs in Boston, MA

Supports cybersecurity risk management and authorization for the VA.gov Platform. Assesses NIST security controls, performs gap and risk analyses, maintains SSPs, POA&Ms, and authorization evidence, and translates deficiencies into engineering remediation. The role supports ATO/cATO readiness, OSCAL automation, threat modeling, secure design reviews, stakeholder coordination, incident response, and continuous synchronization between technical changes and security documentation.

Maintains security infrastructure, firewalls, PKI, access controls, vulnerability management, incident response, compliance documentation, and threat detection systems. Uses AI-powered SIEM, EDR, UEBA, and SOAR tools to automate security operations and identify emerging threats. Develops policies based on NIST, FISMA, PCI, PII, and CJIS requirements; performs risk assessments, system hardening, and security training. Collaborates with IT teams and evaluates AI/ML security, privacy, and supply chain risks.

Provides RMF, ISSM, cloud security, application security, and compliance support for DHA medical devices and systems. Responsibilities include developing and maintaining SSPs, ATO packages, SCAs, and POA&Ms; conducting continuous monitoring and vulnerability analysis; applying NIST, DoD, and DISA requirements; securing cloud, container, IAM, CI/CD, and DDIL environments; and advising technical and government stakeholders.

Own the day-to-day security and compliance program for a HIPAA-regulated AI healthcare platform. Responsibilities include managing risk assessments, penetration-test remediation, vendor and BAA reviews, policies, device compliance, incident response, access-management initiatives, compliance automation, AI security guardrails, and board reporting. The role partners with the CPO, contractor CISO, IT administrator, and MSP while building readiness for SOC 2 or HITRUST certification.

Build and operate infrastructure security platforms centered on workload identity, service-to-service authentication, authorization, and short-lived credentials. Replace static secrets with identity-based systems, develop identity-authenticated proxies and APIs, and unify authorization policy management. Partner with platform and application teams to drive adoption, migrate legacy systems, and ensure reliable production infrastructure with strong developer experience.

Analyze and reverse engineer Android applications and SDKs using static and dynamic techniques. Identify security risks, malicious code, data leakage, device and user threats, and vulnerabilities. Use tools such as Jadx, Ghidra, Frida, IDA Pro, and Burp for APK and binary analysis. Conduct threat intelligence research, develop SQL and YARA signatures, analyze network traffic, and collaborate with security researchers and developers on security recommendations.

Build and own the company’s enterprise risk management and information security functions. Lead SOC 2 and ISO 27001 compliance, security policies, ISMS development, incident response, business continuity and disaster recovery exercises, vendor and audit management, partner security due diligence, and security awareness training. Collaborate with engineering, product, legal, business development, and operations to maintain an audit-ready security posture.

Debug and improve software across diverse codebases, identify and remediate vulnerabilities, conduct security audits and penetration testing, refactor legacy systems, optimize backend applications, and document technical findings. The role contributes cybersecurity and software engineering expertise to AI training datasets while working independently on project-defined tasks.

Partners with Account Executives to support strategic application security sales. Delivers technical presentations, tailored demonstrations, and proof-of-value engagements for technical and executive audiences. Explains application security risks, including SAST, SCA, DAST, API security, secrets detection, and AI-generated code risks. Requires strong communication, knowledge of software development and DevSecOps practices, and familiarity with AI coding tools and security implications.

Leads client-facing ServiceNow Security Operations and cybersecurity consulting engagements from discovery through implementation and adoption. Advises executives on security operations, vulnerability and exposure management, threat intelligence, governance, automation, integrations, and responsible AI use. Oversees engagement quality, budgets, risks, schedules, and client satisfaction while leading consulting teams. Supports recruiting, practice development, business development, proposals, and account growth.