Top Cybersecurity Jobs in Boston, MA

Designs and maintains secure DevOps platforms supporting Navy software development and infrastructure. Responsibilities include GitLab CI/CD, Terraform infrastructure as code, Kubernetes automation, cloud networking, base-image hardening, risk assessments, security control validation, infrastructure testing, troubleshooting, documentation, and Agile collaboration. The role requires cloud and DevSecOps experience, Security+ certification, U.S. citizenship, quarterly and ad hoc travel, and an active interim Secret clearance.

Designs and assesses enterprise security architectures across Zero Trust, cloud, hybrid, and on-premises environments. Develops security roadmaps, reference patterns, requirements, transition plans, architecture diagrams, and executive briefings. Evaluates system designs, integrations, data flows, identity patterns, and control dependencies for security and interoperability risks. Advises technical teams and leaders on architecture decisions, tradeoffs, and remediation priorities in large enterprise or government environments.

Conduct cyber threat intelligence collection and analysis across open, deep, and dark web sources. Monitor threat actors, malware, vulnerabilities, and cybercrime; correlate indicators; and produce actionable reports, alerts, assessments, and briefings. Support customer intelligence requirements, investigations, threat hunting, onboarding, demos, business reviews, and product feedback. The role also involves troubleshooting Linux, Unix, and Windows Server environments, Kubernetes, virtualization, LAN equipment, and intelligence platforms.

Protect internal and client environments through security operations, incident response, vulnerability management, risk assessments, security monitoring, audits, and continuous improvement. The role investigates alerts and incidents, maintains security controls, supports firewall and cloud security, manages awareness training, develops documentation, and communicates risks and mitigation strategies to stakeholders. This fully remote position supports healthcare organizations in strengthening their cybersecurity posture.

Own client relationships and delivery for cyber resilience advisory accounts. Lead Active Directory reviews, identity gap analyses, risk assessments, tabletop exercises, threat intelligence briefings, resilience roadmaps, policy reviews, and implementation projects. Translate incident response findings into actionable security improvements, manage concurrent client engagements, oversee technical resources, support proposals, and build trusted relationships with technical and executive stakeholders.

Lead design and customer engagements to make networks quantum-safe: inventory cryptography, design migration paths to PQC and hybrid key exchange, run proofs-of-concept (including QKD where relevant), produce reference architectures and playbooks, influence standards, and provide technical authority across sales, product, and engineering.

Leads RapidFort’s cybersecurity, risk, compliance, and assurance programs. Owns the ISO 27001 ISMS, SOC 2 Type 2, FedRAMP authorization, and CMMC Level 2 programs; directs security monitoring, incident response, vulnerability management, identity governance, penetration testing, vendor risk, and security architecture. Reports risk to executive leadership and the Audit Committee, manages customer security assurance, oversees a compliance specialist, and serves as incident commander for declared security events.

Owns the FedRAMP-authorized AWS GovCloud environment, ensuring reliability, security, compliance, patching, vulnerability remediation, continuous monitoring, deployments, hardening, audits, incident response, and on-call support. The role requires hands-on Kubernetes, AWS, infrastructure-as-code, CI/CD, vulnerability management, automation, and regulated-environment experience, while collaborating with SRE and security teams.

Designs, implements, and operates Azure-native security controls for identity, networking, and workloads. Manages Defender for Cloud and Microsoft Sentinel, implements Conditional Access, MFA, and Zero Trust patterns, embeds security into Infrastructure-as-Code pipelines, monitors cloud posture, supports incident response, drives remediation, and maintains compliance documentation and metrics. Partners with cloud and infrastructure security teams to ensure secure, resilient, and compliant Azure environments.

Lead SOC 2 and IT compliance engagements, including ITGC and application control testing, walkthroughs, documentation, control-gap analysis, and remediation recommendations. Review junior team members’ work, manage client communication, provide progress updates, and escalate issues. The role requires 3–4 years of IT audit experience, SOC 2 knowledge, bilingual English and Japanese communication, and a relevant bachelor’s degree. Experience with GRC tools, cloud environments, and professional certifications is preferred.