Top Cybersecurity Jobs in Boston, MA

Conduct ISO 27001 and information security management system audits for assigned clients, managing engagements from contracting and scheduling through planning, assessment, reporting, invoicing, and follow-up. Lead audit teams when needed, mentor junior auditors, maintain client records, coordinate travel, and ensure audits meet BSI, regulatory, scheme, cost, timing, and customer satisfaction requirements.

Owns company-wide security across product, infrastructure, corporate systems, and IT. Responsibilities include fixing authentication and authorization issues, managing keys and secrets, hardening internal tools, improving permissions, contributing to backend engineering, and leading security reviews, incident response, and security tooling. This hands-on role requires broad security expertise, strong software engineering ability, and comfort working in an ambiguous early-stage startup environment.

Build and operate automated security infrastructure across AWS and Kubernetes, including cryptographic-material lifecycles, security telemetry, compliance automation, policy-as-code, threat modeling, and CI/CD security controls. Develop agentic AI workflows using tools such as Claude Code and MCP integrations. Support incident response, review security architecture, automate evidence collection, and partner with engineering, audit, risk, vendors, and clients to improve security posture at scale.

Supports cybersecurity pre-sales engineering through customer demos and proof-of-concept engagements. Assists product marketing with technical datasheets, white papers, blogs, videos, and collateral. Researches compliance standards, security frameworks, emerging threats, and attack vectors. Participates in product testing as the voice of the customer. The role is remote and includes training in cloud platforms, Kubernetes, security tools, programming, and security research.

Leads the information security Governance, Risk, and Compliance program, including control frameworks, audits, third-party risk, regulatory compliance, risk assessments, security awareness, business continuity, crisis management, and executive reporting. Builds and manages the GRC team, oversees policy and standards, monitors risk metrics, supports customer security reviews, and guides AI-related security governance across the healthcare organization.

Implement and maintain enterprise PKI architecture for secure federal systems. Build CI/CD pipelines, automate Windows and Linux infrastructure provisioning, manage Docker and Kubernetes workloads, administer AWS infrastructure, operate Hardware Security Modules, and support certificate lifecycle management. The role requires collaboration across application development, cloud infrastructure, identity, security, and compliance domains in highly regulated environments.

Investigate connectivity issues between BeyondTrust EPM and Resideo/Honeywell Compass across Windows endpoints. Assess EPM policies, application controls, permissions, services, registry settings, dependencies, networking, security tools, and logs to isolate root cause. Compare functioning and affected workstations, perform controlled policy testing, coordinate with vendors, implement approved remediations, and document findings, configurations, and best practices.

Lead cybersecurity assessments for government and enterprise clients, focusing on FedRAMP, FISMA, and NIST RMF compliance. Conduct vulnerability scanning, analyze security architectures and controls, validate remediation, author assessment documentation, engage client stakeholders, mentor team members, and support secure cloud architecture and risk mitigation. The role is remote, requires U.S. citizenship and clearance eligibility, and involves up to 25–50% travel.

Conduct international audits against industry standards, regulations, and company policies. Assess information technology, manufacturing, physical and logical security, business continuity, networking, encryption, and related controls. Coordinate audits with global stakeholders, prepare detailed reports and risk assessments, present findings, and recommend improvements. The role requires extensive international travel and offers progression to Lead Auditor after training.

Lead architecture, scale, and reliability for a production malware-scanning platform. Build detection-quality pipelines, metrics, feedback loops, scan orchestration, verdict APIs, threat-analysis systems, customer policy services, and operational tooling. Partner with Product Security to productionize detections across software artifacts and ecosystems. Own performance, correctness, observability, incident response, and customer-facing enforcement and appeals capabilities while mentoring engineers and influencing cross-functional stakeholders.