Top Cybersecurity Jobs in Boston, MA

The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.

Own and modernize the companys governance, risk, and compliance program across federal and commercial markets. Lead certification and surveillance cycles, run risk and third-party vendor programs, apply GRC engineering and AI for automation and continuous controls monitoring, coordinate external audits, manage customer security assurance, and grow a scalable GRC team.

Join Druva's talent community by submitting your resume for future opportunities that match your skills and interests at the company.

Lead security initiatives by establishing secure development practices, conducting security reviews, as well as managing threat modeling and security assessments.

Sell SecurityScorecard's cybersecurity ratings to net-new enterprise accounts (5,000+ employees or $750M+ revenue). Own a $1.75M net-new ARR quota, drive MEDDPIC-led discovery, navigate complex buying committees and channel-assisted deals, and maintain accurate pipeline and forecasts.

Leads cybersecurity assurance across medical device product lifecycles, including threat modeling, vulnerability assessments, security architecture, SBOMs, security testing, risk management, and regulatory compliance. Partners with engineering, quality, regulatory, and security teams to ensure controls, requirements, testing, and audit readiness align. Supports audits, CAPA, supplier processes, and continuous improvement while mentoring cybersecurity engineers. Requires extensive medical-device cybersecurity experience and expertise in embedded and connected technologies.

Designs, implements, and maintains identity and access management solutions, with a focus on Saviynt implementations. Develops IAM policies and standards, integrates access controls with enterprise systems, conducts risk assessments and security audits, advises stakeholders, evaluates IAM technologies, and leads implementation projects. Serves as an IAM subject matter expert while supporting compliance, identity governance, authentication, authorization, and access management initiatives.

Own technical strategy for mid-market and enterprise sales opportunities from discovery through technical close. Lead architecture discussions, demonstrations, workshops, proof-of-value exercises, integrations, security reviews, and production-readiness evaluations. Design DataDome deployments across web, mobile, API, CDN, cloud, and hybrid environments; analyze traffic and logs; address technical objections; provide customer feedback to product and engineering; create enablement content; and mentor Solutions Engineers.

Designs, implements, and administers Microsoft Entra ID and enterprise IAM solutions across cloud and hybrid environments. Manages identity lifecycle processes, RBAC, access governance, SSO, MFA, Conditional Access, federation, and Active Directory synchronization. Performs identity security assessments, access reviews, tenant hardening, monitoring, troubleshooting, and policy enforcement. Collaborates with security, cloud, infrastructure, and application teams while supporting Zero Trust and federal cybersecurity initiatives. Maintains IAM documentation and operational standards.

Lead cybersecurity incident response, digital forensics, and threat hunting activities. Analyze security events, investigate root causes, contain and mitigate threats, coordinate cross-functional response efforts, and develop remediation strategies. Conduct forensic analysis of endpoint and network artifacts, volatile memory, malicious files, and scripts while preserving electronic evidence. Enhance detection capabilities using threat intelligence, security frameworks, and industry best practices.