Top Cybersecurity Jobs in Boston, MA

Implements and monitors cybersecurity controls across Linux, Kubernetes, database, and model-serving environments. Builds monitoring, detection, vulnerability scanning, hardening automation, secrets management, network policy, access control, and evidence collection. Supports AI security tooling, documentation, testing, security reviews, continuous monitoring reports, and federal authorization activities. This early-career role includes hands-on training, certification support, and collaboration with AI and systems administration leads.

Leads FedRAMP 20X advisory engagements, performing gap analyses, designing cloud security solutions mapped to Key Security Indicators, and developing client compliance documentation. Builds automated, code-based validation using scripts, APIs, and Infrastructure-as-Code; advises on vulnerability response, encryption, authorization boundaries, SIEM, and continuous compliance monitoring. Tracks regulatory changes, manages client relationships, leads project activities, mentors team members, and delivers high-quality services on schedule.

Architects and implements secure AWS-based CI/CD infrastructure, manages Kubernetes and container platforms, deploys infrastructure as code, and embeds security automation throughout the software development lifecycle. Responsibilities include vulnerability and secrets management, security scanning, compliance and hardening, IAM and network security, monitoring, audit logging, incident response, and collaboration with development and operations teams. The role also requires troubleshooting, documentation, stakeholder communication, and occasional travel or on-call support.

Assess and mitigate enterprise privacy risks across systems, cloud services, vendors, data-sharing arrangements, and AI technologies. Conduct PIAs and DPIAs, review DPAs and privacy contract terms, support incident investigations, apply global privacy laws, and contribute to responsible AI governance, risk assessments, vendor evaluations, policies, training, and documentation. Partner with Legal, Security, IT, Product, and business stakeholders.

Designs and deploys Pentera’s security validation platform in complex enterprise environments, leads penetration-testing and remediation deep dives, advises customers on threats and attack techniques, educates users, supports adoption and expansion, and relays customer feedback to Product, R&D, and Support teams.

Secure Virta’s cloud-native applications and platform by improving GCP and Kubernetes controls, integrating security into the software lifecycle, automating vulnerability detection and compliance, refining IAM and network security, developing security standards, supporting incident response, and promoting security awareness. The role requires hands-on application security, secure coding, vulnerability management, security testing, Terraform, and Go or Python development experience.

The Product Security Engineer partners with Engineering and Product teams to embed security throughout the development lifecycle. Responsibilities include threat modeling, architecture and security reviews, vulnerability validation, remediation planning, security-tool ownership, automation, secure coding guidance, incident response, and assessing risks in cloud and AI-enabled products. The role requires strong application security, identity, authentication, authorization, coding, communication, and cross-functional collaboration skills.

Support Galaxy’s Product Security team by developing and refining secure engineering standards covering authentication, authorization, API communication, web UI security, and secure coding. The intern may add implementation guidance and develop custom libraries, artifacts, or other resources that help software and production engineering teams apply security practices. The role is remote in the UK or US during the fall semester and includes hands-on work in cybersecurity, secure engineering, and product development.

Serves as the endpoint security subject-matter expert for support, Sales Engineering, and Customer Success. Diagnoses complex Windows and macOS endpoint issues, analyzes telemetry and logs, troubleshoots integrations with EDR, DLP, and MDM products, and provides prioritized customer recommendations. Partners with Engineering and QA on defect investigation and validation, maintains lab capabilities, and creates runbooks and documentation. The role also enables field teams to explain endpoint findings and improve customer outcomes.

Own Tribe’s corporate security, compliance, AI governance, and client-facing security programs. Lead SOC 2 and future certification efforts, enterprise security reviews, risk management, security controls, incident response, vendor risk, and Trust Center operations. Establish governance for AI agents, assistants, model providers, and subprocessors while partnering with engineering on architecture reviews, threat modeling, secure SDLC, data flows, and production readiness. Translate customer requirements into scalable security controls and operating processes.