Top Cybersecurity Jobs in Boston, MA

Supports USDA cloud services by maintaining FedRAMP Agency ATO documentation, SSPs, control records, assessment evidence, inventories, and POA&Ms. Coordinates with control owners and 3PAOs, documents risks and controls, supports remediation of assessment findings, and provides guidance to the documentation team. Requires FedRAMP experience, active Public Trust clearance, technical writing, analytical skills, and Microsoft Office proficiency.

Secure Temporal’s development pipeline, product, and customer execution environments. Partner with engineering teams on secure architecture, threat modeling, risk assessments, code and software supply-chain security, vulnerability triage, Kubernetes hardening, multi-tenant isolation, and responsible AI security. Participate in on-call rotations and help establish actionable security policies and practices across the organization.

Build automation and data tooling for Sales Engineering, support customer Proofs of Value, integrate and validate security data, and analyze vulnerabilities, controls, and attack paths. Own threat intelligence for go-to-market teams by tracking CVEs and active exploitation. Present findings to customers, support technical sales conversations, and collaborate with Product, R&D, and Research to improve detection and mitigation logic.

Own and improve the enterprise GRC program through compliance automation, scalable workflows, control design, evidence collection, risk assessments, audits, remediation tracking, dashboards, and reporting. Support SOC 2 and ISO 27001 compliance while partnering with Security, IT, Engineering, Legal, Privacy, Finance, Audit, customers, and control owners. Lead GRC projects, translate regulatory requirements into actionable guidance, identify emerging risks, and mentor junior analysts.

Lead governance, risk, and compliance activities for an enterprise AI platform. Define and mature SOC 2 and ISO 27001 controls, collect evidence, track remediation gaps, prepare audits, and create customer-facing security documentation. Partner with engineering, security, product, auditors, and client stakeholders to embed practical, automated compliance practices covering data handling, retention, access control, privacy, AI governance, and customer assurance.

Engineer, deploy, maintain and optimize the organization's Splunk SIEM environment. Integrate data sources, develop apps/reports/alerts/dashboards, perform performance tuning, manage Linux on-prem servers, mentor Tier II staff, lead technical design, troubleshoot complex issues, and ensure Splunk Enterprise Security and RBA/CIM compliance for large-scale enterprise deployments.

Leads cloud infrastructure, platform operations, and security operations for a SaaS environment. Oversees reliability, scalability, incident response, compliance, disaster recovery, IAM, observability, automation, and secure cloud architecture. Drives AI-powered monitoring, anomaly detection, remediation, security analytics, and operational efficiency. Manages Cloud Architecture, Infrastructure, and Security Engineering teams, including hiring, mentoring, performance management, and strategic planning.

Conduct code audits and penetration tests across AWS cloud environments, infrastructure, backend applications, and blockchain ecosystem tools. Lead red-team exercises, collaborate with detection engineering and incident response teams, develop offensive security automation, support investigations, research emerging threats, and mentor junior staff. The role requires expertise in AWS attack techniques, binary exploitation, web application security, adversary frameworks, and offensive tooling, with Web3 and blockchain security experience preferred.

Leads Trace3’s Security Solutions practice, developing go-to-market strategy, security offerings, AI-enabled services, presales execution, partner relationships, and complex client engagements. Owns revenue, gross profit, forecasting, pipeline, and operating-plan performance. Advises executive leadership, supports assessments and proof-of-concepts, communicates with technical and executive audiences, and leads, coaches, and develops practice teams.

Implement, integrate, and modernize Ping Identity IAM solutions supporting SSO, MFA, adaptive authentication, authentication policies, and identity workflows. Automate administrative and operational tasks using Ping REST APIs, Python, and Bash. Integrate Joiner-Mover-Leaver processes with identity sources and service providers, and migrate legacy applications to OIDC, OAuth 2.0, SAML, and SCIM. Collaborate with infrastructure, cloud, application, and security teams to deliver reliable IAM orchestration at scale.