Top Cybersecurity Jobs in Boston, MA

Supports federal cybersecurity risk management and authorization activities using the NIST RMF. Responsibilities include system categorization, security control documentation, SSP and POA&M management, control assessments, vulnerability remediation, continuous monitoring, ATO preparation, incident response coordination, and FISMA compliance. The role requires collaboration with stakeholders, cloud security experience, cybersecurity governance tool use, Security+ certification, and eligibility for a Public Trust.

Design and implement AI-powered security agents and tooling across CI/CD, perform threat modeling and manual assessments, find and drive remediation of vulnerabilities, embed security into development workflows, connect telemetry to detection systems, and shape product security strategy and incident response.

Designs, implements, maintains, and supports security infrastructure, including firewalls, networks, cloud workloads, authentication, monitoring, threat hunting, vulnerability assessments, incident response, and security controls. The role maintains federal compliance, supports system hardening and access control, automates administration, contributes to cloud migration, documents technical processes, and participates in project and on-call support activities.

Advise clients on cybersecurity strategy, governance, risk, and compliance across long-term engagements. Develop security roadmaps, translate technical risks for executives and boards, align programs with major frameworks, and guide policy, architecture, and tooling decisions. Manage client relationships, support incident readiness and tabletop exercises, validate remediation with technical teams, mentor junior staff, and improve advisory methodologies. Travel may reach 65%.

Owns configuration, tuning, health, and operational effectiveness of enterprise security platforms across multiple client environments. Responsibilities include detection engineering, SIEM onboarding, vulnerability remediation, incident leadership, cloud and Microsoft security administration, AI system controls, automation, vendor management, root cause analysis, documentation, client reporting, and mentoring junior engineers.

Designs and maintains secure DevOps platforms supporting Navy software development and infrastructure. Responsibilities include GitLab CI/CD, Terraform infrastructure as code, Kubernetes automation, cloud networking, base-image hardening, risk assessments, security control validation, infrastructure testing, troubleshooting, documentation, and Agile collaboration. The role requires cloud and DevSecOps experience, Security+ certification, U.S. citizenship, quarterly and ad hoc travel, and an active interim Secret clearance.

Hands-on Information Security Engineer responsible for SOC 2 Type 2 compliance, vulnerability management, Azure and endpoint security, security tooling, governance, customer security questionnaires, vendor risk, secure SDLC practices, incident response, and security awareness. The role partners across Engineering, IT, Legal, and Product to improve the company’s SaaS security posture.

Designs and assesses enterprise security architectures across Zero Trust, cloud, hybrid, and on-premises environments. Develops security roadmaps, reference patterns, requirements, transition plans, architecture diagrams, and executive briefings. Evaluates system designs, integrations, data flows, identity patterns, and control dependencies for security and interoperability risks. Advises technical teams and leaders on architecture decisions, tradeoffs, and remediation priorities in large enterprise or government environments.

Conduct cyber threat intelligence collection and analysis across open, deep, and dark web sources. Monitor threat actors, malware, vulnerabilities, and cybercrime; correlate indicators; and produce actionable reports, alerts, assessments, and briefings. Support customer intelligence requirements, investigations, threat hunting, onboarding, demos, business reviews, and product feedback. The role also involves troubleshooting Linux, Unix, and Windows Server environments, Kubernetes, virtualization, LAN equipment, and intelligence platforms.

Protect internal and client environments through security operations, incident response, vulnerability management, risk assessments, security monitoring, audits, and continuous improvement. The role investigates alerts and incidents, maintains security controls, supports firewall and cloud security, manages awareness training, develops documentation, and communicates risks and mitigation strategies to stakeholders. This fully remote position supports healthcare organizations in strengthening their cybersecurity posture.