Top Cybersecurity Jobs in Boston, MA

Lead design and customer engagements to make networks quantum-safe: inventory cryptography, design migration paths to PQC and hybrid key exchange, run proofs-of-concept (including QKD where relevant), produce reference architectures and playbooks, influence standards, and provide technical authority across sales, product, and engineering.

Leads RapidFort’s cybersecurity, risk, compliance, and assurance programs. Owns the ISO 27001 ISMS, SOC 2 Type 2, FedRAMP authorization, and CMMC Level 2 programs; directs security monitoring, incident response, vulnerability management, identity governance, penetration testing, vendor risk, and security architecture. Reports risk to executive leadership and the Audit Committee, manages customer security assurance, oversees a compliance specialist, and serves as incident commander for declared security events.

Leads AI governance and cybersecurity risk advisory engagements for large, regulated organizations. Advises C-suite executives and boards on AI threats, regulatory requirements, governance operating models, risk assessments, control frameworks, and cyber resilience. Owns complex engagement delivery, client relationships, team leadership, business development, proposals, engagement economics, and practice growth. Develops methodologies, thought leadership, and risk-management solutions covering AI governance, cloud security, identity management, data protection, incident response, and third-party risk.

Owns the FedRAMP-authorized AWS GovCloud environment, ensuring reliability, security, compliance, patching, vulnerability remediation, continuous monitoring, deployments, hardening, audits, incident response, and on-call support. The role requires hands-on Kubernetes, AWS, infrastructure-as-code, CI/CD, vulnerability management, automation, and regulated-environment experience, while collaborating with SRE and security teams.

Designs, implements, and operates Azure-native security controls for identity, networking, and workloads. Manages Defender for Cloud and Microsoft Sentinel, implements Conditional Access, MFA, and Zero Trust patterns, embeds security into Infrastructure-as-Code pipelines, monitors cloud posture, supports incident response, drives remediation, and maintains compliance documentation and metrics. Partners with cloud and infrastructure security teams to ensure secure, resilient, and compliant Azure environments.

Leads Carina’s cloud infrastructure, internal IT, cybersecurity, risk management, compliance, and business continuity programs. Oversees AWS platform operations, infrastructure as code, deployment reliability, observability, incident response, disaster recovery, employee technology, identity systems, vendors, budgets, and governance. Advises executives on technology strategy, security posture, operational risk, and investments while partnering with Engineering and Data to provide a secure, reliable technology foundation.

Lead SOC 2 and IT compliance engagements, including ITGC and application control testing, walkthroughs, documentation, control-gap analysis, and remediation recommendations. Review junior team members’ work, manage client communication, provide progress updates, and escalate issues. The role requires 3–4 years of IT audit experience, SOC 2 knowledge, bilingual English and Japanese communication, and a relevant bachelor’s degree. Experience with GRC tools, cloud environments, and professional certifications is preferred.

Manages enterprise information security governance, risk, and compliance initiatives. Develops security policies and frameworks, leads data classification and threat modeling, conducts risk assessments, oversees vulnerability remediation, evaluates security controls, supports audits, and prepares risk metrics and executive reports. Partners with technical teams to embed security requirements and promotes governance best practices across the organization.

Investigate fraud and insider-threat cases from initial signal through resolution. Gather and analyze logs, transactions, behavioral signals, and other evidence; triage alerts; reconstruct events; document findings objectively; maintain evidence chain of custody; and collaborate with Detection & Response, Legal, and HR. The role also contributes to investigation playbooks, detection improvements, and fraud and insider-risk prevention.

Leads and matures the information security assurance program across governance, control frameworks, audits, regulatory response, PCI DSS, third-party risk, policy governance, security awareness, automation, and executive reporting. Manages a multidisciplinary team, oversees GRC platform operations, improves control testing and evidence collection, and partners with business, technology, regulators, auditors, and senior leadership to strengthen security posture and compliance.