Top Cybersecurity Jobs in Boston, MA

Support a global 24x7x365 security operations team by monitoring systems and networks, investigating threats and incidents, responding to phishing, malware, breaches, and cyberattacks, deploying countermeasures, analyzing post-event activity, assessing vulnerabilities, and improving security protocols. The role requires familiarity with cloud security controls, network protocols, operating systems, scripting, web technologies, penetration testing tools, and threat intelligence.

Secure, harden, and scale AWS and Kubernetes production infrastructure. Build Terraform-based infrastructure as code, maintain Linux and Windows systems, improve IAM and CI/CD security, remediate vulnerabilities, support compliance audits, and administer security controls. The role also involves incident response, troubleshooting, documentation, operational runbooks, and collaboration with platform, engineering, and security teams supporting regulated and government environments.

Leads enterprise IT and cybersecurity strategy, teams, budgets, service delivery, infrastructure reliability, security governance, incident response, compliance, audits, vendor relationships, and operational resilience. Advises executives and boards on technology risk, investments, material incidents, and risk acceptance while establishing standards, metrics, roadmaps, and continuous improvement practices.

Deploys and optimizes Microsoft Purview data security and compliance solutions for customers. Responsibilities include designing architectures, configuring classification, information protection, DLP and insider risk controls, developing policies and automation, producing compliance reports, integrating Microsoft 365 tools, supporting managed services, assisting pre-sales, and providing technical client delivery, documentation, and knowledge sharing.

Owns security operations and compliance for a multi-tenant GPUaaS platform. Maintains SOC 2 and SOC 3 programs, coordinates audits and penetration tests, manages IAM and security tooling, leads vulnerability management and incident response, supports customer security reviews and contracts, maintains policies, and drives security awareness and phishing programs.

Leads Ferguson’s network security program, managing a team of up to six and overseeing firewalls, IDS/IPS, VPN, URL filtering, endpoint, cloud, and perimeter security. Develops strategic roadmaps, manages budgets and vendors, oversees solution design and deployments, supports major projects, and ensures operational documentation and training. The role also evaluates emerging technologies, partners with architecture and engineering teams, and provides cybersecurity domain expertise across Zero Trust, SASE, and network security.

Monitor and analyze SIEM alerts, respond to security incidents and client tickets, troubleshoot vulnerabilities and malware, and provide recommendations to strengthen client security postures. Maintain application, web, and infrastructure security controls; collaborate with clients, vendors, and IT professionals; monitor vulnerability intelligence; and produce technical status reports and contract deliverables.

Participate in a paid remote research interview about integrating vulnerability verification into CI/CD pipelines. Explain a recent project involving full-stack development, secure deployments, application security practices, and production pipeline challenges. Review conceptual secure application workflows and provide practical feedback. Candidates should have professional experience in full-stack engineering, DevSecOps, or security-focused backend development, with hands-on CI/CD configuration and vulnerability verification experience.

Lead technical sales engagements for enterprise cybersecurity accounts across the Northeast. Partner with sales teams, conduct discovery, design scalable security architectures, deliver technical demonstrations, and lead evaluations, pilots, workshops, and proof-of-value engagements. Advise CISOs and security leaders on modernizing SIEM and security data environments across cloud platforms. Document opportunities in Salesforce, provide customer-driven product feedback, and travel regionally for strategic account engagement.

Build and operate security-critical backend systems in Python, including encryption, key management, sensitive-data controls, credential protection, tenant isolation, authentication, signing, and token handling. Own projects end to end from investigation and architecture through implementation, migration, staged rollout, observability, and recovery. The role requires applied cryptography, strong trust-boundary judgment, and experience safely evolving systems handling sensitive or regulated data across cloud, VPC, and on-premises deployments.