Top Cybersecurity Jobs in Boston, MA

Designs and implements security controls across cloud platforms, operating systems, Kubernetes, networks, and CI/CD. Audits infrastructure for weaknesses, develops security and privacy improvements, performs threat modeling, and drives remediation. The role includes software development, infrastructure security, incident containment, and technical security analysis while collaborating with engineering teams in a distributed startup environment.

Conduct application security assessments, identify and validate vulnerabilities, perform dynamic testing and static code reviews, and recommend remediation strategies. Collaborate with development teams to improve application security, use tools such as Burp Suite, and stay current with application security methodologies, web vulnerabilities, and exploitation techniques.

Lead Wikimedia Foundation’s product security strategy, prioritize security and privacy engineering initiatives, develop platform interventions against threats, strengthen organizational security culture, and communicate with Wikimedia communities. The role partners with cross-functional and departmental leaders on information security, represents the Foundation to volunteers, and applies AI-based tools to security analysis, code review, and software engineering. Prior product management experience is not required, but strong technical, security, communication, and online-community experience are important.

Own the second-line technology and cyber risk function, including risk frameworks, registers, appetite metrics, quantitative risk modeling, and board reporting. Independently assess security controls, penetration tests, vulnerabilities, AI systems, vendors, and regulatory requirements. Partner with Engineering and Security to identify infrastructure, application, model, cryptographic, and emerging technology risks while overseeing AI governance and supporting regulatory and counterparty assessments.

Conduct background investigations and personnel risk analyses for the insider threat program. Use OSINT and commercial investigative tools to verify information, assess source credibility, quantify risk, and prepare clear reports and recommendations. Partner with HR, Legal, and Information Security to identify and mitigate personnel security risks, protect sensitive data, refine investigative methodologies, and ensure compliance with privacy laws, regulations, policies, and ethical standards.

The GRC and Privacy Analyst will administer compliance automation, maintain continuous control monitoring, support audits, and manage security and privacy programs. Responsibilities include mapping controls to SOC 2, ISO, HIPAA, HITRUST, NIST, and AI risk frameworks; conducting risk assessments; tracking remediation; documenting evidence; applying privacy regulations such as GDPR; coordinating cross-functional compliance projects; and using AI tools to improve compliance workflows.

Conduct threat hunting across network telemetry and PCAP to identify novel malicious activity, campaigns, and adversaries. Research, cluster, track, attribute, and disrupt cyber threats; integrate intelligence sources, tools, and tradecraft; develop detection rules; analyze binaries and reverse engineer threats; and produce actionable intelligence for customers and the public.

Coordinate delivery of a Federal cybersecurity and Zero Trust acceleration program for the Department of Veterans Affairs. Manage integrated schedules, dependencies, deliverables, implementation waves, risks, Government inputs, contractor reviews, and executive reporting. Support maturity assessments, enterprise architecture activities, engineering and test planning, and system implementation engagements while ensuring lessons learned inform future priorities.

Embed onsite with Microsoft as a senior engineer to design, build, deploy, and validate production-grade integrations and AI security capabilities on Zenity's platform. Lead technical deployments, run investigations, translate findings to engineering, and influence product roadmap while ensuring enterprise reliability, security, and performance.

Build and evaluate LLM-powered agentic systems for security operations: implement features, create evaluation frameworks, automated benchmarks and regression tests, investigate failures, experiment with prompting/retrieval/planning, build infrastructure for deployment and monitoring, and collaborate with customers and product teams to improve agent performance and reliability.