Top Cybersecurity Jobs in Boston, MA

Optimize Microsoft security operations by tuning Sentinel detections, reducing false positives, designing alert and incident-response automation, integrating Defender products and third-party telemetry, improving SOC workflows, and developing investigation playbooks, runbooks, and documentation. This hands-on 3–4 month contract requires strong Sentinel and Defender expertise, advanced KQL, Logic Apps, SOAR automation, SIEM engineering, and security operations optimization experience.

Build and maintain cloud security improvements across AWS/GCP, Kubernetes, and CI/CD environments. Design detection and response capabilities using SIEM, EDR/MDR, cloud-native detections, and CNAPP tools. Investigate and respond to security incidents end to end, develop detection logic and playbooks, and create security tooling and automations using Python, Terraform, and infrastructure-as-code. The role also supports endpoint security and secure DevOps practices.

Monitor and investigate security alerts, logs, threats, vulnerabilities, and incidents. Conduct vulnerability assessments, support penetration testing and cloud security reviews, assist with incident response, recommend remediation, and prepare technical and executive reports. Collaborate with security consultants, engineers, red teamers, and client IT teams while supporting compliance, hardening, patch management, and security monitoring across cloud and enterprise environments.

Conduct vulnerability research and reverse engineering across diverse systems. Perform static and dynamic analysis using disassemblers, debuggers, and fuzzers; develop exploits; document and communicate findings; and mentor security researchers. The role requires expertise in C and assembly, Linux internals, exploitation techniques, Android and Chrome vulnerability research, and the ability to obtain and maintain a TS/SCI clearance.

Operate and improve cybersecurity tools and processes across cloud, endpoint, identity, application, email, network, data loss prevention, and vulnerability management environments. Respond to alerts and incidents, manage logging and SIEM telemetry, implement security controls aligned with HITRUST, NIST, CIS, HIPAA, and OWASP, support audits, and develop incident response procedures. Collaborate with a Senior Security Engineer and use AI tools to automate security operations.

Lead authentication fraud strategy to minimize ATO and scam losses while optimizing customer experience. Build data-driven detection, monitoring, graph analysis, and AI-integrated risk workflows. Partner with product, data, ops, and IT to implement analytics, alerts, and operational processes for authentication risk.

Own and mature Neumo’s Governance, Risk, and Compliance program, including SOC 1, SOC 2, and PCI DSS audits, risk registers, data governance, control automation, vendor assessments, and exception processes. Manage 1–2 direct reports, coordinate remediation, leverage AI/LLM tools, participate in incident management, and communicate compliance posture and risk trends to executives and the board.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Lead identification and remediation of security and compliance risks, build and run a Third Party Risk Management program, ensure device and contractor environment compliance, automate processes, and support enterprise negotiations to prevent security from blocking customer acquisition.

Serve as a senior technical cybersecurity expert for ICS/OT projects: advise project teams, plan and review tasks, perform risk assessments and QA, liaise with clients, support business development, contribute to proposals and marketing, and travel frequently to client sites to implement and oversee industrial cybersecurity and compliance activities.