Top Cybersecurity Jobs in Boston, MA

Lead and develop the Security team while owning the company-wide security and compliance program. Responsibilities include managing SOC 2, PCI DSS, GDPR/CCPA, audits, policies, vendor risk, security awareness, and customer security communications. The role also provides technical direction for security tooling, cloud security, identity and access management, application security, vulnerability management, architecture reviews, and threat modeling.

Operate and improve security across cloud, endpoint, identity, SaaS, and corporate environments. Responsibilities include 24/7 alert triage, incident investigation and containment, threat hunting, phishing and fraud analysis, vulnerability management, evidence collection, and incident reporting. The role also engineers security-tool integrations and SOAR automation, supports PCI DSS and SOC 2 audits, maintains security posture, and communicates risks and remediation guidance to technical and nontechnical stakeholders.

Own Tradeify’s cloud infrastructure, CI/CD pipelines, containerized deployments, observability, databases, vulnerability management, access controls, security monitoring, incident response, and compliance readiness. The role combines hands-on DevOps and security operations, including AWS administration, infrastructure as code, secure deployment practices, remediation tracking, runbook development, and security reviews. It partners closely with engineering to improve release reliability and maintain a secure, high-performance trading platform.

Leads enterprise data protection initiatives, including data classification, DLP policy management, eDiscovery support, insider threat investigations, and data governance. Uses behavioral analytics, audit logs, SIEM, UEBA, and forensic tools to identify misuse and leakage. Develops security controls, incident response playbooks, and compliance updates while collaborating with Legal, HR, and Compliance. Participates in threat-hunting and red, blue, and purple team exercises. Requires five-plus years of relevant experience and eligibility for a Top Secret clearance.

Lead AppViewX's agentic identity security strategy and technical pre-sales: evangelize externally, design/demo flagship AIS environments and POCs, enable and certify global SE teams, advise product roadmap, and drive high-stakes enterprise engagements with CISOs/CTOs and analysts.

Manage cybersecurity incident response projects from initiation through completion, coordinating DFIR, advisory, IT, legal, HR, clients, and vendors. Responsibilities include project planning, stakeholder communication, risk and issue management, resource allocation, budgets, incident response artifacts, compliance, post-incident reviews, and continuous improvement. The role also supports cybersecurity frameworks, tools, and after-hours rotational coverage for critical incidents.

Lead post-sales implementation of cybersecurity solutions, integrating Blumira with customer security tools and infrastructure. Provide technical discovery, security assessments, troubleshooting, implementation roadmaps, and guidance on improving cybersecurity maturity. Partner with Customer Success and Account Management to drive adoption, customer value, expansion, and retention. Maintain technical documentation, monitor customer health, support product feedback, and mentor teammates while staying current on cybersecurity threats and practices.

The Privacy Manager leads privacy-by-design initiatives for wearable technology, translating privacy laws and requirements into technical and operational controls. Responsibilities include conducting PIAs and DPIAs, maintaining privacy policies, coordinating risk remediation, supporting data governance and incident response, reviewing vendors, monitoring regulatory changes, and delivering privacy training. The role partners extensively with Legal, Product, Engineering, IT, Security, and external vendors to operationalize privacy compliance throughout product development.

Lead corporate security investigations and incident response across identity, endpoints, SaaS, email, and security platforms. Improve detection, response, Zero Trust controls, automation, and incident readiness. Conduct vendor security assessments, support customer security questionnaires, document risk decisions, and collaborate with Security, IT, Engineering, Legal, GRC, Procurement, Sales, and Customer Success teams.

Owns IT systems administration and security operations for a fully remote workforce. Responsibilities include managing Microsoft 365 and Google Workspace, endpoint and identity platforms, security tools, access controls, threat monitoring, incident response, vulnerability management, compliance evidence, disaster recovery, vendor relationships, reporting, and operational roadmaps.