Top Cybersecurity Jobs in Boston, MA

Lead fraud strategy and influence business, product, and operational decisions across a rapidly growing identity and risk company. Responsibilities may include advising on fraud trends and attack patterns, translating insights into strategic recommendations, improving fraud prevention operations, partnering cross-functionally, engaging executive stakeholders, representing the company through industry thought leadership, and defining best practices for fraud, identity, and risk management.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Own technology compliance and security operations across AI governance, SOC 2, risk assessments, incident response, business continuity, vulnerability management, access reviews, and penetration testing. Manage client security questionnaires, vendor assessments, third-party risk, and audit coordination while monitoring security tools and coordinating remediation with engineering. Advise clients, auditors, regulators, legal teams, and compliance stakeholders on technical security matters.

Supports IT solution design and implementation, analyzes cybersecurity protocols and recommends improvements, and collaborates with data science teams to analyze data and generate actionable insights. The internship provides hands-on experience, mentorship, professional development, and exposure to aerospace technology. Candidates must be enrolled in a relevant bachelor's or higher degree program, maintain a 3.0 GPA, and graduate in December 2027 or later.

Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.

Lead Zeta’s AI-native Application Security function by defining strategy, building the team, embedding security agents and policy-as-code into IDEs, pull requests, CI/CD, and AI/ML pipelines, and overseeing continuous threat modeling and validation. Own security for AI systems, models, prompts, and agents, including adversarial testing for prompt injection, model abuse, and data leakage. Mentor engineers and promote automated, secure software development practices.

Lead security engineering across AI systems, cloud infrastructure, product security, GRC automation, GitHub controls, and compliance workflows. Develop AI-specific threat models and guardrails, automate security checks and evidence collection, strengthen AWS and GCP environments, manage CSPM tooling, and secure software supply chains. Partner with Engineering, Product, Legal, IT, and GRC to establish security programs and practical controls for Jasper’s AI platforms.

Develop and maintain enterprise cybersecurity policies and standards aligned with ISO 27001, PCI-DSS, and SOC 2. Conduct vendor security and privacy risk assessments, track remediation, support audits and client questionnaires, evaluate security controls and evidence, and recommend corrective actions. Partner with IT, Engineering, vendors, and business units on security architecture, data security implementations, compliance, risk management, and organization-wide security awareness.

Manage and maintain compliance with security and privacy frameworks (ISO 27001, SOC 2, HIPAA, PCI DSS). Coordinate audits, drive remediation, improve controls and evidence management, support security questionnaires for deal cycles, and design compliance training while partnering across teams to integrate controls into the SDLC.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.