Top Cybersecurity Jobs in Boston, MA

Investigates and manages fraud incidents within a digital bank, records losses, conducts root-cause analysis, improves controls, monitors emerging threats, maintains industry intelligence, supports fraud risk infrastructure, and delivers awareness training to business and support teams.

Leads enterprise IAM strategy and operations across workforce, machine, cloud, and customer identities. Oversees identity providers, PAM, zero-trust architecture, SSO/MFA, RBAC, IaC, JIT access, automation, compliance, audits, and M&A integrations. Manages a globally distributed team of 5–7 direct reports, partners with technical and business stakeholders, and reports program health and risk to executives.

Lead development of security enforcement integrations that warn or block unsafe AI artifact installations, serve sanitized alternatives, and record audit events. Build reliable event-driven backend systems with queues, webhooks, idempotency, retries, back-pressure, approval flows, dry runs, audit logs, and rollback mechanisms. Integrate third-party security, infrastructure, and identity APIs, with potential future work on fleet-wide revocation controls and security platform integrations.

Leads information security architecture and program initiatives across IT and business projects. Provides security consulting, develops enterprise data, network, and application protection requirements, conducts threat analysis, vulnerability assessments, penetration testing, and remediation planning. Researches emerging threats and technologies, supports control testing and incident response, and guides security team members. Requires extensive information security leadership, application and network security expertise, secure architecture knowledge, and strong communication skills.

Leads engineering operations, security, DevOps, quality engineering, cloud infrastructure, corporate IT, data integrations, and customer-facing technical escalations. Owns security strategy and compliance, incident management, on-call practices, reliability metrics, CI/CD, infrastructure as code, and production operations. Develops managers and senior engineers, restructures inherited teams, establishes service-level agreements, and drives automation and operational efficiency across the organization.

Execute and support an agency-level cybersecurity program. Responsibilities include administering RSA Archer, architecting cybersecurity solutions, troubleshooting security issues, developing remediation recommendations, managing workstations and servers, analyzing security architectures, and advising on NIST, FISMA, information security, privacy, and cloud guidelines. The role also involves security documentation, stakeholder coordination, and security information and event management.

Manage, maintain, and troubleshoot enterprise security technologies while monitoring, detecting, investigating, and remediating security incidents. Perform digital forensics, threat hunting, vulnerability and risk assessments, audits, compliance checks, evidence preservation, and root cause analysis. Collaborate with internal teams and third parties, implement new security solutions, create security documentation, and support incident response during regular and on-call hours.

Performs application, network, wireless, and enclave penetration testing for a DoD client. Identifies cybersecurity vulnerabilities, develops mitigation strategies, coordinates testing with system owners, and prepares assessment reports and recommendations. The role requires extensive vulnerability assessment experience, knowledge of Windows, Linux, networking, OWASP, PCI DSS, scripting, and penetration testing tools. A DoD Secret clearance and eligibility for IT-I Critical Sensitive or Tier 5 clearance are required.

General application for CMMC cybersecurity professionals supporting Defense Industrial Base organizations. Responsibilities may include CUI boundary determination, CMMC gap analyses, compliance remediation, technical solution development, SSP creation, policy and procedure support, risk discussions, and security infrastructure administration. Typical roles include CCP, CCA, and LCCA assessors serving as consultants or certified assessment professionals. Positions are generally remote with occasional client travel.

Leads secure CI/CD, containerized deployments, and infrastructure automation for DoD case management systems in AWS GovCloud. Builds pipelines using Docker, Kubernetes, and Terraform or CloudFormation; integrates security scanning, monitoring, vulnerability management, and compliance checks aligned with RMF and DISA STIGs. Supports Zero Trust architecture, incident response, scalability, ATO documentation, and secure repository management while collaborating with engineering, development, cybersecurity, and systems administration teams.