Top Cybersecurity Jobs in Boston, MA

Security Engineer responsible for application security, vulnerability and threat management, cloud and Kubernetes security, DevSecOps tooling, incident response, forensic analysis, and secure system architecture. The role integrates security testing into CI/CD pipelines, automates security tasks, supports IAM and cryptographic key management, and collaborates with engineering teams to strengthen security processes and tooling.

Own the full lifecycle of enterprise cybersecurity accounts, from deployment planning and integrations through adoption, renewal, and expansion. Serve as the primary technical contact for security, engineering, and IT stakeholders. Guide vulnerability management workflows, cloud and scanning-tool integrations, remediation prioritization, and compliance reporting. Translate customer feedback into product improvements and create scalable onboarding playbooks.

Provides cybersecurity and information assurance support for DISA enterprise software systems. Analyzes security requirements, resolves information security and workflow problems, and supports security engineering across system planning, design, development, testing, demonstration, and integration. Requires experience with Linux and Windows Server administration, scripting, SIEM tools, and incident response, along with an active Secret clearance.

Provides L1 technical support for enterprise customers using cloud email and SaaS security platforms. Resolves configuration, API, integration, false-positive, and threat investigation issues through troubleshooting and log analysis. Communicates root causes and recommendations, partners with Engineering and Product, supports onboarding, maintains knowledge documentation, and identifies recurring customer issues. Requires 4+ years of cybersecurity, SaaS, or enterprise technical support experience, strong email security and cloud ecosystem knowledge, API troubleshooting skills, and excellent communication.

Own FAR.AI’s internal IT and security function, including accounts, devices, identity and access management, onboarding, offboarding, office networking, support, endpoint hardening, data protection, governance, and vendor risk. The role will remediate security gaps using threat modeling, automate self-service infrastructure, partner across teams, communicate and manage change, and hire and lead an IT Coordinator.

Leads enterprise AI and data governance, including AI allowlist management, data classification, DSPM/DLP requirements and validation, data-flow tracking, privacy assessments, vendor risk reviews, and policy evolution. Partners with Legal, Security, and Engineering to implement privacy-by-design and align governance with GDPR, CCPA, NIST AI RMF, and the EU AI Act.

Owns BeyondTrust’s product vulnerability management program end to end, including FedRAMP 20x continuous monitoring, risk assessment, remediation, exception handling, metrics, evidence, and reporting. The role establishes processes for new products, automates triage and reporting, partners with Security Engineering on integrations, drives remediation across engineering teams, and leads response to actively exploited and zero-day vulnerabilities.

Own Flex’s IT and corporate security function as a hands-on senior individual contributor. Responsibilities include identity and access management, joiner-mover-leaver processes, Okta and Google Workspace administration, endpoint and MDM programs, SaaS governance, access reviews, security policies, awareness training, MSP management, and automation using scripts and internal tooling. The role partners with security, People, Finance, and Legal while maintaining corporate security posture across a distributed workforce.

Supports cybersecurity planning, assessments, implementation, compliance, and continuous monitoring for Air Force infrastructure modernization. Coordinates RMF activities, DISA STIG validation, NIST control analysis, vulnerability remediation, POA&M development, eMASS documentation, accreditation packages, and cybersecurity reviews. The role validates controls throughout deployment and operational transition, collaborates with ISSMs and engineering teams, and requires active Secret clearance, DoD IAM/IAT certification, and 35% travel.

Secure and accredit multi-tenant, multi-classification cloud environments across development, integration, and test enclaves. Implement JSIG, NIST, STIG, RMF, and ATO requirements; maintain SSPs, POA&Ms, and continuous-monitoring evidence; validate vulnerability, application-security, container, and infrastructure-as-code outputs; support secure cloud and DevSecOps design; and provide cybersecurity guidance for capability-provider artifacts and promotion decisions.