Top Cybersecurity Jobs in Boston, MA

Design, develop, and support CIAM solutions using IBM Verify in hybrid on-premises and Azure environments. Implement authentication, federation, and access management capabilities; troubleshoot incidents; optimize platform performance; and collaborate with engineering and security teams to ensure scalable, compliant identity solutions.

A 10-week cybersecurity and technology risk internship supporting security monitoring, incident response, threat intelligence, web and network defense, application security, vulnerability management, governance, audits, and risk reduction. Interns will analyze threats, assist with investigations and alert triage, document controls, collaborate across security teams, and contribute to cybersecurity program maturity while developing professional skills through mentorship and hands-on projects.

Manage government compliance programs supporting FedRAMP and ITSG-33 authorizations. Create and maintain SSPs, SCTMs, POA&Ms, incident response plans, and audit evidence. Map NIST and CCCS controls to cloud operations, coordinate third-party assessments and government audits, track remediation, support continuous monitoring, conduct vendor risk and privacy reviews, and monitor regulatory updates. Collaborate with engineering, cloud, IT, security leadership, and external auditors.

Leads technology-focused internal audits and risk advisory engagements, including IT risk and SOX compliance assessments. Evaluates IT general controls, automated controls, key reports, and control effectiveness across ERP and enterprise applications. Identifies technology risks and control gaps, develops remediation recommendations, coordinates audit workstreams, coaches analysts, and prepares audit reports. Uses data analytics and audit technologies to improve testing and risk coverage while advancing audit methodologies and team capabilities.

Executes technology-focused internal audits and risk advisory engagements, including SOX compliance testing, IT control assessments, system implementation reviews, and technology risk assessments. Tests IT general controls, automated controls, and key reports across SAP, enterprise applications, infrastructure, and cloud environments. Reviews audit evidence and third-party SOC reports, documents deficiencies, prepares workpapers, recommends remediation, and validates corrective actions with management.

Own technical compliance domains and lead audit and certification activities across SOC 2, ISO 27001, PCI DSS, SOX ITGC, NIST, and related frameworks. Coordinate evidence collection, validate controls, assess risks, track remediation, and provide compliance reporting. Partner with Engineering, Security, Legal, Privacy, Internal Audit, and external auditors to translate requirements into practical controls. Improve GRC tooling, automation, evidence workflows, and repeatable compliance processes.

Organizes, installs, operates, and supports government LAN, WAN, server, virtualization, and security infrastructure. Performs daily network and systems operations, maintains O&M checklists, develops SOPs and TTPs, monitors SIEM tools, configures security alerts and reports, assesses cybersecurity risks, and supports incident response. Provides technical user support and helps evaluate infrastructure hardware and software upgrades within DoD Special Access Programs, including collateral, SCI, and SAP environments.

Designs, develops, integrates, deploys, and supports Saviynt EIC identity governance solutions. Responsibilities include JML lifecycle automation, access requests, provisioning, certifications, RBAC, SoD controls, application integrations, API and connector development, troubleshooting, production support, documentation, release management, and mentoring. The role partners with cybersecurity, architecture, application, infrastructure, HR, audit, and engineering teams to deliver scalable IGA capabilities.

Leads second-line technology and cyber risk oversight for Sun Life’s U.S. business. The role owns the risk oversight program, challenges policies and control assessments, monitors incidents and key risk indicators, delivers executive and board reporting, assesses risk-management effectiveness, and drives continuous improvement. It also establishes strategy for evolving regulatory and technology risks, strengthens regional risk capabilities, and influences senior technology, security, business, and risk stakeholders while leading direct and indirect resources.

Implements and maintains Microsoft Purview, SharePoint, and Microsoft 365 information protection controls. Translates governance requirements into labels, policies, permissions, retention rules, monitoring processes, and exception handling. Performs repository assessments, validates controls, investigates issues, supports remediation, audits, regulatory requests, and incident discovery. Develops technical documentation, evidence, dashboards, and reporting while recommending automation and control improvements.