Top Cybersecurity Jobs in Boston, MA

Administer and maintain enterprise EDR platforms across endpoints and cloud workloads. Develop detection policies, translate threat intelligence into endpoint rules, maintain SIEM/SOAR integrations, and support incident response through containment, live response, data collection, and system restoration. Troubleshoot agent and operating system issues, support auxiliary security tools, and maintain documentation, SOPs, baselines, and change-management processes.

Leads an engineering team responsible for designing, building, and operating data security products and controls. Provides technical direction, hands-on engineering leadership, and delivery ownership across DLP policy, data discovery and classification, data access controls, policy-as-code workflows, automation, integrations, testing, deployment, reliability, and operational support. Translates data security requirements into scalable solutions while mentoring engineers and driving adoption of secure engineering practices.

Leads Nokia’s security research and standardization activities for 5G Advanced and 6G. Represents Nokia in 3GPP and other external forums, drives new security technology concepts, collaborates with patenting and business teams, builds industry and government relationships, and aligns security strategies with product roadmaps and Bell Labs research.

Lead product security architecture and offensive testing, including threat modeling, architecture reviews, penetration testing across web applications, APIs, mobile clients, and cloud infrastructure, secure design definition, code reviews, and remediation validation. Partner with engineering teams on authentication, authorization, data protection, trust boundaries, and cloud-native security while communicating risks and leading cross-functional security initiatives.

Own Tint’s cyber insurance vertical and P&L, scaling embedded distribution from a live pilot into a repeatable business. Responsibilities include sourcing and closing security-platform partnerships, managing carrier capacity and commercial terms, collaborating on embedded quoting and binding products, monitoring program performance, and developing data-driven cyber underwriting. The role requires deep cyber insurance expertise, security tooling fluency, partnership development, and 0-to-1 startup-building experience.

Leads product cybersecurity and regulatory compliance for regulated products. Responsibilities include threat modeling, security architecture reviews, risk assessments, secure SDLC guidance, vulnerability remediation, SBOM and supply-chain security, regulatory submission evidence, audits, and cross-functional cybersecurity workstream coordination.

Build security tooling and customer-facing transparency systems; oversee SBOM, vulnerability management, vulnerability disclosure, and bug bounty programs. Assess vulnerability severity and exploitability, publish security advisories and CVE records, coordinate disclosures, answer customer security inquiries, and collaborate with Engineering, Product, customers, partners, and security researchers. Apply AI to security workflows and use software engineering and automation practices to improve security processes.

Build and scale secure automated patching infrastructure for open-source vulnerabilities. Develop Rust and Unix-based CLI tools, package-manager integrations, APIs, testing tools, and developer-facing remediation workflows. Debug ecosystem-specific issues, contribute to JavaScript, React, and TypeScript frontends, and collaborate with security researchers to deliver certified packages and high-quality patches at scale.

Conduct ISO 27001 and information security management system audits for assigned clients, managing engagements from contracting and scheduling through planning, assessment, reporting, invoicing, and follow-up. Lead audit teams when needed, mentor junior auditors, maintain client records, coordinate travel, and ensure audits meet BSI, regulatory, scheme, cost, timing, and customer satisfaction requirements.

Owns company-wide security across product, infrastructure, corporate systems, and IT. Responsibilities include fixing authentication and authorization issues, managing keys and secrets, hardening internal tools, improving permissions, contributing to backend engineering, and leading security reviews, incident response, and security tooling. This hands-on role requires broad security expertise, strong software engineering ability, and comfort working in an ambiguous early-stage startup environment.