Top Cybersecurity Jobs in Boston, MA

Owns configuration, tuning, health, and operational effectiveness of enterprise security platforms across multiple client environments. Responsibilities include detection engineering, SIEM onboarding, vulnerability remediation, incident leadership, cloud and Microsoft security administration, AI system controls, automation, vendor management, root cause analysis, documentation, client reporting, and mentoring junior engineers.

Designs and maintains secure DevOps platforms supporting Navy software development and infrastructure. Responsibilities include GitLab CI/CD, Terraform infrastructure as code, Kubernetes automation, cloud networking, base-image hardening, risk assessments, security control validation, infrastructure testing, troubleshooting, documentation, and Agile collaboration. The role requires cloud and DevSecOps experience, Security+ certification, U.S. citizenship, quarterly and ad hoc travel, and an active interim Secret clearance.

Hands-on Information Security Engineer responsible for SOC 2 Type 2 compliance, vulnerability management, Azure and endpoint security, security tooling, governance, customer security questionnaires, vendor risk, secure SDLC practices, incident response, and security awareness. The role partners across Engineering, IT, Legal, and Product to improve the company’s SaaS security posture.

Designs and assesses enterprise security architectures across Zero Trust, cloud, hybrid, and on-premises environments. Develops security roadmaps, reference patterns, requirements, transition plans, architecture diagrams, and executive briefings. Evaluates system designs, integrations, data flows, identity patterns, and control dependencies for security and interoperability risks. Advises technical teams and leaders on architecture decisions, tradeoffs, and remediation priorities in large enterprise or government environments.

Conduct cyber threat intelligence collection and analysis across open, deep, and dark web sources. Monitor threat actors, malware, vulnerabilities, and cybercrime; correlate indicators; and produce actionable reports, alerts, assessments, and briefings. Support customer intelligence requirements, investigations, threat hunting, onboarding, demos, business reviews, and product feedback. The role also involves troubleshooting Linux, Unix, and Windows Server environments, Kubernetes, virtualization, LAN equipment, and intelligence platforms.

Protect internal and client environments through security operations, incident response, vulnerability management, risk assessments, security monitoring, audits, and continuous improvement. The role investigates alerts and incidents, maintains security controls, supports firewall and cloud security, manages awareness training, develops documentation, and communicates risks and mitigation strategies to stakeholders. This fully remote position supports healthcare organizations in strengthening their cybersecurity posture.

Own client relationships and delivery for cyber resilience advisory accounts. Lead Active Directory reviews, identity gap analyses, risk assessments, tabletop exercises, threat intelligence briefings, resilience roadmaps, policy reviews, and implementation projects. Translate incident response findings into actionable security improvements, manage concurrent client engagements, oversee technical resources, support proposals, and build trusted relationships with technical and executive stakeholders.

Lead design and customer engagements to make networks quantum-safe: inventory cryptography, design migration paths to PQC and hybrid key exchange, run proofs-of-concept (including QKD where relevant), produce reference architectures and playbooks, influence standards, and provide technical authority across sales, product, and engineering.

Leads RapidFort’s cybersecurity, risk, compliance, and assurance programs. Owns the ISO 27001 ISMS, SOC 2 Type 2, FedRAMP authorization, and CMMC Level 2 programs; directs security monitoring, incident response, vulnerability management, identity governance, penetration testing, vendor risk, and security architecture. Reports risk to executive leadership and the Audit Committee, manages customer security assurance, oversees a compliance specialist, and serves as incident commander for declared security events.

Owns the FedRAMP-authorized AWS GovCloud environment, ensuring reliability, security, compliance, patching, vulnerability remediation, continuous monitoring, deployments, hardening, audits, incident response, and on-call support. The role requires hands-on Kubernetes, AWS, infrastructure-as-code, CI/CD, vulnerability management, automation, and regulated-environment experience, while collaborating with SRE and security teams.