Top Cybersecurity Jobs in Boston, MA

Build AI-enabled automations for governance, risk, and compliance workflows, including evidence collection, control validation, audit preparation, third-party reviews, vulnerability management, POA&M tracking, and reporting. Evaluate AI solutions for security, privacy, regulatory compliance, and auditability. Partner with cross-functional teams to document processes, develop dashboards and metrics, and support compliance across frameworks including FedRAMP, CJIS, ISO 27001, SOC 2, PCI, HIPAA, and FISMA.

Assesses and mitigates security risks across AI, machine learning, and Generative AI systems. Responsibilities include threat modeling, vulnerability assessment, security monitoring, incident response, governance, compliance, access controls, policy development, audit support, and advising engineering and business teams on secure AI development and responsible adoption.

A 12-week penetration testing internship supporting application, infrastructure, cloud, wireless, and API security assessments. Responsibilities include vulnerability analysis, emerging-threat research, remediation validation, security automation, playbook development, reporting, and collaboration with cybersecurity and business teams. The associate will also complete an independent cybersecurity capstone project.

Leads Varonis cloud security deployments for customers, troubleshooting complex integration issues and guiding architectural decisions. Develops deployment standards, documentation, reference architectures, and onboarding resources. Partners with Product Management and Engineering to improve deployment capabilities, facilitates knowledge-sharing, and delivers technical enablement on cloud technologies, security concepts, and deployment methodologies.

Own Playlist's technical GRC architecture across multiple compliance frameworks. Build and maintain a unified Master Control List, framework crosswalks, evidence workflows, and control lifecycle processes. Automate compliance evidence collection and develop AI-powered GRC tools for risk quantification, vendor assessments, and monitoring. Partner with engineering, legal, finance, auditors, and product teams to translate requirements into actionable controls and harmonize compliance across multiple brands and acquisitions.

Supports Department of Veterans Affairs cybersecurity authorization and risk management activities across the full NIST RMF and ATO lifecycle. Develops security artifacts, assesses risks and vulnerabilities, implements controls, manages POA&Ms, and coordinates remediation with technical and business stakeholders. The role also supports cloud security, FedRAMP, continuous monitoring, compliance assessments, security documentation, and briefings.

Leads Alkami’s enterprise and technology risk management program, including risk assessments, control evaluations, mitigation, monitoring, reporting, and escalation. Owns AI, machine learning, and generative AI governance, translating regulatory and risk expectations into practical policies, controls, and review processes. Partners with cross-functional risk owners and supports compliance initiatives involving business continuity, disaster recovery, regulatory management, and incidents. Reports to the Chief Compliance Officer in a fully remote role.

Deliver cybersecurity assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance for enterprise clients. Assess on-premises, cloud, hybrid, identity, OT, and ICS environments; identify risks and security gaps; produce reports; and present recommendations to technical and executive stakeholders. Support incident response and post-incident improvements, collaborate with engagement managers and specialists, contribute to consulting methodologies, and stay current on threats and security best practices. Travel is approximately 20%.

Lead cybersecurity risk strategy for frontier AI auditing. Design secure audit systems and privacy-enhancing technologies, evaluate AI-related cybersecurity risks, develop code and data tools, and strengthen internal IT infrastructure. Responsibilities include access controls, data protection, device management, incident response readiness, and communicating threat models, cryptography, and risk to technical and non-technical stakeholders.

Remote, VA-approved cybersecurity job-readiness training for U.S. military veterans. The program provides hands-on instruction in incident response, risk management, threat hunting, product security, and network security, along with simulated job tasks, projects, enterprise systems, certifications, career coaching, and employer connections. Participants complete a counselor assessment, one-way interview, acceptance process, and City University of Seattle registration.