Top Cybersecurity Jobs in Boston, MA

Design and maintain data pipelines, models, and transformation layers for analytics. Build data contracts, observability and lineage tooling, collaborate with product engineering, and optimize data structures for performance and scalability.

Lead strategy and execution for enterprise identity, access control, and governance features. Partner with go-to-market, engineering, and design to build scalable RBAC, audit, and compliance capabilities for large customers and evangelize principles across the product.

Lead architecture, integration, installation, upgrade, and enterprise implementation of Privileged Access Management tools (CyberArk, Entra, BeyondTrust). Design and code complex software solutions, align business strategy with technology, provide technical guidance, and lead problem-solving and documentation for PAM initiatives.

Design and operate Onebrief's GRC program across RMF, FedRAMP, CMMC and SOC 2. Build control environments, partner with engineering to implement technical controls (IAM, logging, encryption, segmentation), manage audits and evidence collection, and serve as the compliance lead for customer security reviews.

The Security Analyst II will enhance Garner's security posture by monitoring threats, conducting risk analysis, ensuring compliance, and communicating effectively with stakeholders.

The Senior IAM Engineer will design, implement, and operate secure identity services, focusing on Okta administration, compliance, and IAM strategy while collaborating with various teams to enhance security and operational efficiencies.

Lead policy and controls governance for cross-functional security risk and compliance programs. Own policy lifecycle, common controls framework, issue remediation, governance tooling (Jira/GRC), executive reporting, KPIs, and team development. Partner with Security, Engineering, Product, and Legal to ensure audit readiness, scalable controls, and continuous improvement of governance workflows.

Manage and maintain compliance with security and privacy frameworks (ISO 27001, SOC 2, HIPAA, PCI DSS). Coordinate audits, drive remediation, improve controls and evidence management, support security questionnaires for deal cycles, and design compliance training while partnering across teams to integrate controls into the SDLC.

Own and architect Forward's security technology stack across AppSec, SecOps, and GRC. Design integrations with Engineering/IT, lead tool evaluations and PoCs, automate controls with infrastructure-as-code and detection-as-code, build centralized logging/SIEM and identity governance, align architecture to security frameworks, mentor security engineers, and support incident response and remediation.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.