Open Boston Cybersecurity jobs

Summary

Identity and access management administration inside Bank of America Global Information Security, granting logical access day to day for hundreds of proprietary applications across different technology models and platforms. This is an individual contributor position calling for a strong analytical mindset, root cause identification, and collaboration across organizational units at multiple levels. Working hours are fixed at 10:00 AM to 7:00 PM Monday through Friday, and the bank sets clear in-office expectations.

Summary

Identity and access management position inside Bank of America Global Information Security, the discipline responsible for ensuring the right individuals reach the right resources at the right time across increasingly heterogeneous technology environments and rigorous compliance requirements. A typical day runs through the IAM book of work alongside other team members, in close participation with line of business teams and second and third line of defense partners, with frequent interaction with senior management and key stakeholders. Client services experience is called out as required, and the bank sets clear in-office expectations.

Summary

Delivers cybersecurity and risk consulting to financial-services clients, leading risk assessments and designing security programs covering identity and access management, cloud security across Azure/AWS/GCP, and data protection. Evaluates IT and application security controls against frameworks such as NIST CSF and NIST 800-53, and advises on emerging technologies including AI security. CISSP or CRISC credentials are relevant to the role.

Summary

Senior staff-level Identity and Access Management architect defining enterprise IAM reference architectures, RBAC/ABAC models, and privileged-access designs such as just-in-time access and credential vaulting across UKG's cloud, infrastructure, and application environments. Performs security architecture reviews and threat modeling for identity initiatives and supports SOC, ISO 27001, and PCI compliance.

Summary

Senior identity and access management consulting inside Global Information Security, defining and steering IAM standards, governance models, controls, and effectiveness measures for public cloud, SaaS, generative AI, machine learning, and agentic AI environments. The role leads comparative assessments of IAM and identity-security capabilities across AWS, Microsoft Azure, Google Cloud Platform, and emerging AI platforms, weighing strategic alignment, control coverage, integration complexity, and implementation effort, and evaluates cloud-native, enterprise, and vendor IAM solutions against regulatory expectations, target-state architecture, and existing investments. The bank sets clear in-office expectations for the position.

Summary

Enterprise access control and entitlement work within Global Information Security, defining, operationalizing, and modernizing access control capabilities across traditional and cloud-native environments. The role drives the evolution of role-based, attribute-based, policy-based, and segregation of duties access models while establishing cloud entitlement management practices that reduce risk and simplify access administration, partnering with Architecture, Engineering, Cloud Security, the IAM Service Catalogue, and line of business stakeholders. Cloud security experience is a stated requirement and the position reports to the Access Controls and Segregation of Duties leader.

Summary

Identity and access management administration inside Global Information Security, the security discipline that governs which individuals reach which resources across the bank's varied technology platforms and compliance regimes. Daily work runs the IAM book of work with the wider team, in close participation with all line of business teams plus second and third line of defense partners, and is highly visible with frequent senior management contact. RACF mainframe security experience is flagged as strongly preferred, and the bank sets clear in-office expectations.

Summary

Identity and access management administration within Bank of America Global Information Security, ensuring appropriate access to resources across heterogeneous technology platforms under strict compliance requirements. The work proceeds through the IAM book of work with other team members, in close participation with line of business teams and second and third line of defense partners, and carries frequent interaction with senior management and key stakeholders. RACF mainframe security experience is flagged as strongly preferred, and the bank sets clear in-office expectations.

Summary

Analyst seat in the Threat Intelligence Data and Engineering function of State Street's Cyber Threat Intelligence team, turning disparate internal and external data sets into dashboards, visualizations, and metrics that inform leadership of a global cyber security organization. The work involves automating data collection and processing, scripting calls to API endpoints with Python, REST, and JSON, interrogating data for anomalies and testing root-cause hypotheses, and supporting empirical assessments of program maturity and impact. State Street requires prior work where analyzing cybersecurity data was at least 75 percent of the job, plus familiarity with SIEM, threat intelligence, and SOAR platforms.

Summary

Bank network security operations role focused on firewall policy hygiene: rule recertification and cleanup, identifying and remediating policies that violate standards, reviewing and implementing security change requests, and responding to audit findings. Built around next-generation firewall platforms (Fortinet, Check Point, Palo Alto) and policy analyzer tooling such as AlgoSec, Tufin or FireMon, with scripting only at a familiarity level. The posting states an ability to work off hours and weekends is required.

Summary

Lead engineer and primary technical owner of a Saviynt-based identity governance and administration platform, responsible for platform architecture, configuration and production readiness, joiner-mover-leaver lifecycle processes, access requests, certifications, provisioning logic and SaaS connectors and integrations. The role designs and enforces security controls including Conditional Access, Zero Trust principles and periodic access reviews, drives root-cause analysis and post-go-live stabilization, mentors junior engineers and shapes the long-term IGA roadmap. Seven or more years of IT experience with identity governance depth is required; candidates must be a US citizen or green card holder intending to naturalize, and must work full time on site within 50 miles of the employing Reserve Bank.

Summary

A client-facing IT risk advisory role inside an accounting and consulting firm's Risk Advisory practice, covering IT audit, cybersecurity and technology risk engagements for external clients rather than running an in-house security program. At director level the work centers on leading client service delivery across risk, governance, internal audit and compliance. The posting directs candidates to discuss work location arrangements with the recruiter rather than stating them.

Summary

Consulting-side IT risk work rather than an internal security job: Baker Tilly's Risk Advisory practice serves external clients on IT audit, cybersecurity and technology risk engagements. At senior consultant level the emphasis is hands-on client service delivery within risk, governance, internal audit and compliance. Work location arrangements are left to be discussed with the recruiter rather than stated in the posting.

Summary

A second senior consultant opening in the same Baker Tilly Risk Advisory practice, serving external clients on IT audit, cybersecurity and technology risk engagements rather than defending an internal environment. The role delivers client service across risk, governance, internal audit and compliance. As with the companion req, work location arrangements are left to be discussed with the recruiter.

Summary

Senior cryptographic services engineering role owning the design and modernization of enterprise PKI, certificate lifecycle management and machine identity across on-premises, hybrid and cloud environments. The work is heavily automation-led - certificate issuance, renewal, deployment and governance workflows built with PowerShell, Python and REST APIs, plus integrations with ServiceNow, SailPoint, CyberArk, Splunk, Azure and AWS - and extends to crypto agility and post-quantum readiness. Seven or more years in PKI, cybersecurity or infrastructure engineering is expected, with Keyfactor, DigiCert, ADCS or Venafi experience and knowledge of HSMs, OCSP, CRL and code signing.

Summary

Hands-on enterprise PKI and certificate lifecycle management role working under senior PKI engineering leadership: automating certificate issuance, renewal, reporting and remediation, and building integrations across ServiceNow, cloud platforms, monitoring tools and enterprise security systems. Also covers certificate discovery and ownership mapping, machine identity management, runbook documentation, and audit, compliance and risk evidence requests. Expects working knowledge of TLS, certificate authorities and basic cryptography plus PowerShell or Python scripting, with Keyfactor, DigiCert or Microsoft ADCS preferred.

Summary

Hands-on engineering support for State Street's enterprise PKI and certificate lifecycle management platforms, developing automation for certificate issuance, renewal, reporting, and remediation under the direction of senior PKI engineering leadership. Also covers integrations with ServiceNow, cloud platforms, monitoring tools and enterprise security systems, certificate discovery and ownership mapping, machine identity management, and audit, compliance, and risk evidence requests. Requires 3+ years in PKI, security engineering, or infrastructure automation plus scripting in PowerShell, Python, or APIs; Keyfactor, DigiCert, or Microsoft ADCS experience is preferred.

Summary

A red-team lead engineering role in State Street cybersecurity. The work plans and executes adversary-emulation exercises, threat-informed testing, controlled offensive operations, and assessments of enterprise applications, cloud services, critical infrastructure, detection, prevention, and incident-response capabilities.

Summary

Medtronic is hiring a senior manager to lead operational technology cybersecurity for its manufacturing and distribution environments, translating enterprise security objectives into operational plans and standards across multiple sites. The scope spans OT network security, incident response, risk management and regulatory compliance for production and distribution systems that touch patient-impacting processes, and the role leads teams and drives alignment with engineering and manufacturing operations. It can be based at one of several US Medtronic facilities, with Mounds View, Minnesota preferred, or worked remotely within the US.

Summary

This role leads the Medtronic Security Culture function, running enterprise-wide cybersecurity awareness, communications and engagement programs aimed at reducing human-related cyber risk. It is program leadership centered on education and behavior change rather than hands-on technical security work, setting the strategic direction, maturity roadmap and operating model and aligning them with enterprise risk and business priorities. Medtronic expects four days a week onsite at one of several US sites, with a strong preference for Mounds View, Minnesota.

Summary

Offensive security leadership role at a health insurer, driving development of AI-driven offensive tooling and autonomous agents that extend penetration testing and red team operations. The posting pairs conventional red team and threat simulation work with AI security testing, listing prompt injection and jailbreak testing, adversarial testing of LLM applications, MITRE ATLAS, PyRIT and Garak, plus EDR and XDR evasion testing and malware development. It expects production-grade software engineering in Python, cloud fluency across AWS, GCP and Azure, and mentoring plus stakeholder management responsibilities.

Summary

Hands-on enterprise PKI and certificate lifecycle management role working under senior PKI engineering leadership: automating certificate issuance, renewal, reporting and remediation, and building integrations across ServiceNow, cloud platforms, monitoring tools and enterprise security systems. Also covers certificate discovery and ownership mapping, machine identity management, runbook documentation, and audit, compliance and risk evidence requests. Expects working knowledge of TLS, certificate authorities and basic cryptography plus PowerShell or Python scripting, with Keyfactor, DigiCert or Microsoft ADCS preferred.

Summary

Backend engineering role modernizing a health insurer's internal enterprise security platform, building scalable services and improving deployment automation rather than performing security analysis. The listed stack is .NET and C# on Azure with Terraform, GitHub Actions and Azure DevOps, PostgreSQL and MongoDB, JFrog Artifactory, HashiCorp Vault and Splunk, plus application security testing tools including Checkmarx, AppScan and Cycode. It is framed as a combined senior backend developer and DevSecOps position.

Summary

Builds identity and access management software inside UKG's Global Security organization, covering identity governance, privileged access management, authentication and authorization across enterprise and cloud environments. The work is service, automation and tooling development in Go, C# and Python, plus integrations between applications, cloud platforms and identity providers using SAML 2.0, OAuth 2.0, OIDC, LDAP and Active Directory, with Saviynt and infrastructure-as-code for IAM services across GCP and AWS. Requires 5+ years across software engineering, security engineering or identity and access management.

Summary

Leads the design and implementation of enterprise data-at-rest discovery, classification, and risk reduction across on-premises, cloud, SaaS, and AI platforms, reporting to the leads of Data and AI Security Engineering. The architecture work centers on data security posture management platforms such as Varonis, BigID, and Microsoft Purview, and on defining onboarding, scanning, classification, and monitoring strategies that reveal where sensitive data sits and who owns it. Requires 7+ years in information security, data security, or security architecture and 3+ years designing enterprise data discovery, classification, or DSPM programs.

Summary

Hands-on engineering management for identity and access on Tulip's manufacturing operations platform, owning SSO and SAML/OIDC federation, SCIM provisioning, multi-tenant account structures and the authorization layer across a multi-cloud AWS and Azure footprint, for human users and increasingly for AI agents acting on their behalf. Requires spec-level depth in OAuth 2.0, SAML 2.0, OIDC and SCIM, experience with multi-tenant systems where tenant isolation is a hard requirement, and 3+ years managing engineering teams in B2B SaaS while staying close to the code. Hybrid out of Somerville with 3+ days a week onsite.

Summary

Platform engineering for State Street's Cyber Data and Analytics team, writing software for cloud and hybrid infrastructure management and building an internal platform with deployment, monitoring, alerting, and operations automation tooling that other teams consume. A defined part of the work is implementing and managing security event routing and SIEM platforms across a hybrid multi-cloud environment using CloudFormation and Terraform, and designing petabyte-scale data systems for the CISO organization's detection and response, governance, and risk teams. Requires 5+ years of production engineering with DevOps tooling, 5+ years writing production code in a language such as Python, Go, Ruby, or JavaScript, and 3+ years of large-scale cloud infrastructure work.

Summary

Corporate security engineering role protecting Bitsight's own company and employee data, deploying and managing SIEM, EDR and cloud security technologies to monitor and respond to incidents. Covers security incident handling and response including SOC operations and DFIR, enforcing least-privilege access and secure network architecture, and AI governance work such as evaluating AI security risks, contributing to usage policies and implementing controls for AI tools used across the organization. Requires 4+ years in dedicated information security roles, hands-on SIEM and EDR experience, and solid TCP/IP and AWS understanding.

Summary

A data-security architecture role in State Street's Data and AI Security organization, leading enterprise data-at-rest discovery, classification, and risk reduction across cloud, SaaS, and structured/unstructured repositories. Centers on DSPM (Data Security Posture Management) platforms such as Varonis, BigID, and Microsoft Purview, plus governance frameworks for sensitive-data protection and AI adoption. Requires 7+ years in information/data security; certifications like CISSP or CCSP are preferred.

Summary

A security-architecture role on State Street's information-security team, focused on data protection across data at rest, in motion, and in use within a heavily regulated environment. The work centers on cryptographic solutions, data-protection frameworks, and technologies like DSPM, CASB, and SSPM, plus regulatory compliance (GDPR, HIPAA, PCI-DSS) and incident-response collaboration. This is cybersecurity architecture rather than software development.

Summary

A customer-facing delivery role owning the technical success of engagements on SimSpace's cyber-range platform, acting as the interface between customers and the Professional Services teams. The work is coordinating cyber-range environments where customers train and test against realistic adversary behaviors, attack progressions, and SOC decision points — cybersecurity-domain project management rather than hands-on engineering. Involves up to 25% national and international travel.

Summary

A distinguished-level offensive cybersecurity engineering role at a defense R&D nonprofit — assessing hardware, firmware, and software for vulnerabilities and developing custom software and tooling to exploit and alter system behavior for red-team and cross-domain efforts. Deep vulnerability-research and exploit-development work as a subject-matter expert. On-site in Cambridge, MA; the role requires obtaining and maintaining a U.S. government security clearance.

Summary

A customer-facing cybersecurity architect role at a security services firm, blending pre-sales solution design with genuine security advisory — running risk-and-gap discovery, shaping solution direction, and supporting RFPs, workshops, and executive briefings across the sales lifecycle. It also develops GRC opportunities (NIST, CIS, ISO, SOC, third-party risk) and advises CISOs and security teams. Hybrid in Canton, MA.

Summary

A product-security role securing a fleet of autonomous vessels and the remote-connected infrastructure linking them to shore. It combines network-security architecture — VPN/mesh networks, segmentation, firewalls — with hardening AWS cloud, integrating SAST/SCA into CI/CD, and building security monitoring and incident response. The role genuinely blends hands-on software and DevOps work with core security engineering.

Summary

The job-description body is a placeholder (marked TBD) with only benefits boilerplate, so this read leans on the title: a senior security data-engineering role within Moderna's vulnerability risk-management program, covering the data engineering behind identifying and tracking security vulnerabilities. It can be performed remotely in the US or from Cambridge, MA.

Summary

A senior technical program manager coordinating cybersecurity remediation across Moderna — turning findings from scans, pen tests, audits, incidents, and monitoring into prioritized, tracked remediation programs with SLAs, governance, and executive- and board-level reporting. This is cross-functional program management and coordination rather than hands-on security engineering.

Summary

A senior security engineering role at iRobot securing the company's cloud services and consumer mobile apps (iOS and Android). It blends security assessment — threat-modeling new designs, triaging field vulnerabilities, and applying OWASP, SAST, and DAST practices — with hands-on building of centralized secure cloud services and automated security test frameworks for CI/CD pipelines, using Python and Node/JavaScript. Deep AWS IAM/SSO/OAuth expertise is expected.

Summary

Security engineering delivered primarily as code across a simulation company's web application, AWS environment and on-premises HPC systems. The work covers building security features and controls into the product and internal admin platforms, implementing IAM, encryption, logging and alerting in AWS, running vulnerability scanning and triaging findings with developers, remediating penetration test results, and hardening HPC infrastructure. Compliance automation for NIST 800-171 and 800-53 supports a move into regulated industries, and candidates must be a US citizen or green card holder.

Summary

A staff-level cloud security engineering role owning Xometry's cloud security posture and runtime threat detection across a SaaS-first AWS environment. The individual contributor is primary owner of the CrowdStrike Falcon platform, partners with MDR providers on alert tuning and escalation, secures Kubernetes workloads, evaluates a cloud SIEM, and enforces infrastructure-as-code security with Terraform plus Python automation. Framed as a hands-on detect-and-fix role rather than dashboard-watching.

Summary

A senior, hands-on security governance and risk role on Klaviyo's Security Trust and Risk team, operating as a second line of defense — running the technology and third-party risk register, leading AI risk governance and ISO 42001 readiness, and building automation that quantifies risk posture. It blends GRC policy work with engineering rather than security operations or monitoring.

Summary

A cybersecurity engineering role within State Street's Global Cyber Security organization, owning the strategy, architecture, and engineering of perimeter defenses that protect internet-facing services, networks, and remote access. Works with next-generation firewalls, WAF, DDoS protection, secure web gateways, ZTNA/SASE, and integrations with SIEM, SOAR, and threat intelligence, using platforms like Zscaler, Palo Alto, Cloudflare, and F5. This is defensive security engineering, not application development.

Summary

A defensive-cybersecurity engineering and architecture role owning State Street's enterprise email-security strategy, protecting against phishing, business email compromise, account takeover, and malware. The work involves evaluating and deploying email-security platforms such as Defender for Office 365 and Proofpoint, designing controls around SPF, DKIM, and DMARC, and integrating with SIEM, SOAR, and threat-intelligence systems alongside the Cyber Defense Center. This is email-security architecture within Global Cyber Security rather than software development.

Summary

A client-facing IT audit and cybersecurity risk advisory role at a consulting and accounting firm, delivering risk, governance, internal audit, and compliance services with a HITRUST focus. The role sits within a Risk Advisory practice serving external clients rather than an internal security team. Work location arrangements are discussed per opportunity across several U.S. offices.

Summary

A security-engineering role on a small IT, Security and Compliance team at a quantum-computing company, hardening on-prem and multi-cloud (AWS/Azure) environments. The work spans vulnerability triage and remediation, IAM and access-policy review, cloud misconfiguration monitoring, and gathering evidence for SOC 2 and ISO 27001 audits. It also touches incident triage and endpoint and log monitoring, with up to 15% travel.

Summary

Senior data-security architect responsible for designing and governing security architectures that protect the firm's data across cloud, on-premises, SaaS, analytics, and hybrid environments. The role centers on data classification, encryption, tokenization, masking, and cryptographic architecture — KMS, HSMs, PKI, secrets and certificate management — plus security-architecture reviews for data lakes, warehouses, and analytics platforms.

Summary

Defines and governs cloud security architecture across public cloud, private cloud, and SaaS environments for a global bank. The architect sets security standards and reference patterns, leads security reviews of cloud-native applications, containers, and Kubernetes platforms, and governs controls for identity, network security, data protection, encryption, logging, and automation. The work centers on embedding Zero Trust and secure-by-design principles with cloud engineering and application teams while keeping cloud adoption aligned with regulatory requirements.

Summary

Designs and governs security architecture for enterprise integrations, including APIs, messaging and event-streaming platforms, managed file transfer, and third-party connectivity. The architect runs security reviews of integration solutions across cloud, SaaS, and on-premises environments, sets requirements for API gateways, service-to-service communication, and machine identities, and provides expertise on authentication, encryption, tokenization, secrets management, and secure integration patterns.

Summary

Owns the enterprise identity and access management strategy, architecture, and governance across hybrid cloud, SaaS, and on-premises systems at a global bank. The architect designs identity services spanning governance, privileged access, authentication, federation, and directory services, and builds reference patterns for workforce, customer, third-party, and machine identities. Much of the role is partnering with engineering and cybersecurity teams to embed least-privilege, strong authentication, and Zero Trust controls into enterprise platforms.

Summary

A strategic cyber threat intelligence role on State Street's CTI program, performing all-source analysis of nation-state activity, cybercrime, and geopolitical and emerging-technology developments affecting the financial sector. The emphasis is on producing intelligence products and delivering briefings to technical and executive audiences rather than hands-on defense, though it participates in incident-response exercises and real incidents as needed.

Summary

An identity-and-access-management operations role (Information Security Administrator) processing user access add, modify and delete requests, validating approvals and entitlements, and supporting access reviews and orphaned-account remediation under strict controls. Requires PowerShell and scripting to automate recurring access-administration and reporting tasks; a controls-and-service-focused IAM operations role. Boston.

Summary

An application security architect who designs and reviews secure architectures and runs threat modeling for enterprise apps, APIs, and cloud-native platforms, with a strong, distinctive focus on AI/ML security: LLM and agentic-AI risks, prompt injection, model misuse, and AI supply chain. The role sets appsec and AI-security standards and drives secure-by-design and DevSecOps across engineering teams.

Summary

An offensive-security red-team role at a financial-services firm: running authorized adversary-emulation and penetration testing across applications, infrastructure, cloud, and enterprise systems, and running purple-team exercises to improve detection and response. Grounded in MITRE ATT&CK and strict safe-testing and authorization protocols, with audit-ready reporting. Aimed at a relatively early-career profile — 2 to 4 years in penetration testing or red-teaming.

Summary

A hands-on information-security engineering role conducting network, application and system security assessments and designing mitigating controls, with documentation aligned to NIST 800-53 and 800-171. Involves FedRAMP and CMMC environments, malware and vulnerability identification, and scripting and tooling; requires 5+ years and reports to the Director of Security Engineering. Boston.

Summary

A security analyst role at an auto-lending fintech, monitoring logs and alerts, investigating and responding to incidents, running vulnerability scans and risk assessments, and maintaining core defenses such as firewalls, IDS/IPS, EDR, IAM, and CSPM. This is a hands-on SOC-style role rather than governance or architecture.

Summary

This is a cybersecurity architecture role focused specifically on network security at State Street -- designing and reviewing secure network architectures across data centers, cloud, and third-party connections, and setting standards for segmentation, Zero Trust, firewalls, DDoS protection, and secure remote access. It involves architecture reviews for cloud migrations and network modernization projects rather than day-to-day network operations.

Summary

This is a cybersecurity architecture role defining and governing cloud security standards and controls across State Street's public, private, and SaaS cloud environments, including identity and access management, encryption, monitoring, and driving Zero Trust adoption. It leads security architecture reviews for cloud-native and container/Kubernetes initiatives and prefers 14+ years of experience with at least 8 years specifically in cybersecurity.

Summary

This is a hands-on SaaS security engineering role within State Street's Global Cyber Security team, leading deployment and integration of SaaS Security Posture Management (SSPM) and CASB tools like Obsidian Security to monitor and govern the company's SaaS application ecosystem. It focuses on identity-based and SaaS-to-SaaS threats (OAuth abuse, account takeover) and prefers 8+ years of information security experience, including 5+ years specifically with SSPM/CASB platforms, plus certifications such as CISSP or CCSP.

Summary

A hands-on offensive-security role at Moderna running full-spectrum red-team operations — including reconnaissance, exploitation and post-exploitation — against corporate, lab, manufacturing/OT and AI infrastructure, and building custom C2 tooling and exploits in Python/PowerShell. Requires 4+ years in red teaming or offensive security; preferred certifications include OSCP, OSEP, OSED or CRTO; based in Boston.

Summary

A Cybersecurity Incident Response role at Moderna dedicated to Operational Technology (OT) environments supporting manufacturing — triaging, containing and investigating security incidents on industrial/manufacturing systems using Splunk SIEM, Nozomi and CrowdStrike Falcon. Requires 6+ years in cybersecurity, software engineering or IT and a Bachelor's or Master's degree; based in Boston.

Summary

An individual-contributor DevSecOps engineering role at Moderna building and maintaining developer-platform automation and tooling (Python/TypeScript, GitHub Actions, Pulumi, Docker, AWS, JFrog), migrating teams onto standardized CI/CD and remote-workspace infrastructure, and enabling AI-assisted developer workflows. Requires 5+ years in software engineering, platform engineering or DevOps; based in Boston.

Summary

A cybersecurity engineering role at Moderna focused specifically on API security — improving authentication, authorization, rate limiting and monitoring across enterprise APIs and AI-enabled platforms including an internal AI Gateway, and shaping security models for machine-to-machine and AI-agent access. Requires 5+ years of cybersecurity, application-security or platform-security experience; based in Boston.

Summary

A staff-level software engineer serving as the technical authority for identity, authentication, and authorization across SimSpace's cyber-range platform, owning IAM architecture and identity-provider development and setting authn/authz standards across teams. The emphasis is software-engineering leadership on the services that underpin IAM rather than operations, and the role is remote or office-based.

Summary

A cyber-defense engineer focused on the endpoint layer — designing and maintaining endpoint hardening standards (CIS benchmarks), reducing attack surface by disabling unnecessary services and protocols, and engineering execution-control mechanisms such as application and script control. The role partners with network-security and data-security teams on Zero Trust enforcement and endpoint data protection across large-scale, multi-region enterprise environments. It contributes to security-architecture standards and roadmaps for endpoint and defense platforms.

Summary

A regional sales-leadership role at Optiv, a cybersecurity solutions provider, leading a team that sells multi-year security engagements across the Northeast — building pipeline, forecasting, and coaching sales reps against quota (Force Management / MEDDICC). It is go-to-market leadership and partner-relationship management, not a hands-on security practitioner role, so it fits an experienced security-technology sales manager. Remote, Northeast region.

Summary

A product-security engineering role centered on federal compliance, leading DataRobot's FedRAMP High and DoD IL5 authorization work and translating NIST 800-53 controls into engineering requirements. It blends hands-on security automation in Python or Go, container and CI/CD security, and SAST/DAST/SCA tooling with customer-facing duties answering security and CVE questions from federal and commercial clients. Deep FedRAMP and NIST fluency plus diplomatic customer communication are core expectations.

Summary

Bridges intelligence tradecraft and technical engineering: building tools and automated workflows in Python or C/C++ to sift large datasets, writing custom query logic across intelligence databases, and turning circuit diagrams, schematics, source code and reverse-engineered components into system models. The role applies COMINT, SIGINT and network analysis to hard target problems, works in multi-disciplinary teams on cybersecurity solutions, and briefs findings to technical and non-technical audiences. Work must be performed onsite and requires an active Top Secret clearance with a CI polygraph or willingness to obtain one, plus frequent travel to or extended time at a customer location in Maryland.

Summary

The first dedicated security hire at a clinical research technology company, building the security program from the ground up rather than joining an existing one. Scope covers AWS cloud security including IAM, logging, encryption and access controls, identity across Okta, Entra ID, Microsoft 365 and Google Workspace, endpoint and SaaS security, and the policies, standards, runbooks and control documentation behind the company's compliance frameworks. Sensitive clinical and patient data is in scope, and the role works with the IT director to set priorities and a risk reduction roadmap.

Summary

DevSecOps engineering role designing secure, automated GitLab CI/CD pipelines for mission-critical embedded and flight software in constrained and air-gapped defense environments. Combines toolchain and infrastructure-as-code work with policy-as-code, software supply-chain security (SAST/DAST/SCA, SBOMs, artifact signing), and compliance to defense standards such as DO-178C, NIST 800-53, RMF, and STIGs.

Summary

Secures cardiac ablation medical devices at the embedded and firmware level, joining Medtronic's R&D organization to build cybersecurity into real-time and embedded systems. The posting explicitly notes this is product security, not IT security, compliance, or GRC. Requires partnering closely with device engineering teams and working onsite a minimum of four days a week.

Summary

Privileged access management engineering centered on ownership of the CyberArk platform — administration, optimization, integration assessments, onboarding privileged accounts, and producing architecture and training documentation across cloud and on-premises environments at a pharmaceutical company. The posting text also references the company's international business services hub in Warsaw, so candidates should confirm where the role actually sits. For a deep CyberArk specialist who wants to be the engineering SME for a global PAM program.

Summary

A principal product-security architecture role owning end-to-end security for CMT's telematics products — mobile SDKs, backend services, APIs, and data pipelines. The work is engineering-grounded: threat modeling, secure-SDLC guardrails, application-security strategy, and protecting sensitive driver and location data plus AI/ML features, driven largely through influence. On-site in Cambridge, MA.

Summary

A principal product- and application-security architecture role owning end-to-end security across CMT's telematics products — mobile SDKs, backend services, APIs, and data pipelines. Engineering-grounded work covering threat modeling, secure SDLC, AppSec strategy (secure coding, secrets, supply chain), and protecting sensitive personal data and AI-powered features. On-site in Cambridge, MA.

Summary

Executive leadership of an entire security-architecture organization at a global custody bank — reporting to the Deputy CISO, setting enterprise security baselines and design guardrails, standing up a Security Architecture Center of Excellence, and embedding secure-by-design and threat-modeling practices across cloud, application, data, and AI environments. An organizational strategy and governance mandate, not a hands-on engineering seat.

Summary

A network security engineering role designing, operating, and hardening defense-in-depth controls, including next-generation firewalls, IPS, WAF, DDoS protection, DLP, and Zero Trust Network Access, across cloud and on-prem environments, with active threat hunting and high-severity incident response. It is a hybrid role (onsite 3 days/week) and the employer states it cannot offer sponsorship.

Summary

Network architecture and engineering for corporate offices and datacenters across the United States and Europe, covering design, implementation, monitoring, maintenance and modernization of the enterprise network. Alongside routing, switching and wireless work, the role owns network security operations including firewall management, secure access technologies, web application protection and vulnerability management, and helps lead incident response. It is a senior practitioner and subject matter expert seat, hybrid in Boston, that also mentors junior engineers.

Summary

Principal information security architect role at HealthEdge designing, implementing, and maintaining enterprise security architecture including network security, application security, data protection, and identity/access management, spanning on-prem, hybrid, and cloud (EDR, SASE, DLP, vulnerability management, SIEM). Requires 10+ years in information security with a security-architecture focus; remote, full-time.

Summary

A CISO-track Director of Cybersecurity & GRC building and leading the security and IT governance/risk/compliance programs at a scaling energy-manufacturing company. You would set strategy, manage a small team (GRC Manager plus senior security engineers) and a managed SOC, mature an ISO 27001-aligned ISMS, and own the external-audit relationship; this is a hybrid role requiring 3+ days onsite, with relocation assistance available.

Summary

A security operations and governance role reporting to the Director of Information Security and Privacy, focused on protecting client data across SS&C's financial and healthcare products. Responsibilities include identifying risks, coordinating remediation, monitoring security policies and controls against standards, and supporting audit readiness. Offered hybrid from Waltham or Boston, or fully remote in several states.

Summary

Client-facing IT audit and cybersecurity risk advisory role at a national accounting and consulting firm, with a focus on HITRUST assessments. Work involves evaluating clients' IT and security controls and helping them meet compliance and risk-management requirements.

Summary

SIEM platform engineering — building, administering and scaling Splunk Enterprise and Enterprise Security multi-cluster architectures plus the Cribl LogStream data-routing layer across AWS, Azure and on-prem datacenters in support of cyber threat detection and analytics. Full-time telecommuting from within the U.S. is permitted, with up to 5% domestic travel to Massachusetts offices; requirements are framed rigidly as a Master's plus 6 years or a Bachelor's plus 9.

Summary

Despite the information-security label, this is user-access administration operations — creating and opening accounts across applications, monitoring user-ID reports, responding to help-desk inquiries, and maintaining audit documentation. Requirements are 2-3 years of administrative experience and an associate degree or equivalent; posted salary range is $52,000-$91,000.

Summary

A cybersecurity leadership role (VP) at a financial-services firm, owning the global detection-engineering strategy, the logging/monitoring standard, and governance of detection-rule development and continuous security monitoring. It is a people- and program-leadership seat (SIEM/EDR knowledge, adversary TTPs) serving as approval authority for detection changes, not hands-on development. Asks for 10+ years of cybersecurity management; Boston-routed.

Summary

Hands-on application penetration testing (web and API) plus design and oversight of third-party network pentests at a heavily regulated bank, with evidence-based, regulator-ready reporting expectations. The role also leads AI/LLM-enabled testing techniques and assurance testing of enterprise AI deployments — prompt injection, model abuse, and data exposure risks.

Summary

Privileged Access Management engineering — designing, integrating, and operating PAM tooling (CyberArk-class solutions) across Linux, Windows, network, and database estates, with scripting automation and infrastructure-as-code build-out. Telecommuting from within the United States is permitted; requires 5 years of experience administering PAM solutions.

Summary

A software-engineering role (a labor-certification posting) on a financial-services firm's global cybersecurity team, architecting a role-based access control (RBAC) and IAM framework in Java and managing/supervising junior engineers. It owns design through testing and maintenance of large-scale identity systems, asking for a CS degree plus 10 years of Java development including 5 in cybersecurity and 5 architecting large IAM systems. US-remote permitted; Boston-routed.

Summary

A senior individual-contributor seat on Bank of America's Global Information Security team applying agentic AI, custom ML models, and LLMs to cyber defense — AI-powered threat hunting, anomaly detection, and automated incident response — while also defending the bank's own AI usage against AI-equipped attackers. No people management: the job is technical innovation, prototyping, and advising leadership, within the bank's in-office work culture.

Summary

An entry-level Information System Security Officer role supporting continuous monitoring and authorization of multiple classified information systems under an ISSM. Duties mix technical and non-technical cybersecurity functions: ensuring systems run per the security authorization package, verifying user clearances and need-to-know, and coordinating configuration changes. Compliance-focused cybersecurity supporting classified systems, so a security-clearance context applies.

Summary

An entry-to-mid cybersecurity analyst role inside a managed-security-services practice, reviewing alerts, logs, and incidents through MDR tooling and supporting monthly security reviews for clients. Hands-on with the Microsoft security stack (Defender, Sentinel, Entra ID) and assisting penetration tests, all under Security Operations supervision. Hybrid in Canton, MA.

Summary

A Senior Security Compliance Engineer at Klaviyo (Boston) on the Security Trust & Risk team, designing and building automated solutions that streamline compliance operations and continuous control monitoring across SOC 2, ISO 27001/27017, PCI, and SOX ITGCs. It is hands-on GRC automation - scripting, API integrations, and scripted evidence collection - partnering with Engineering, IT, Legal, and Audit. A fit for a security/compliance engineer who automates audit and control workflows rather than a pure application developer.

Summary

An entry-level cybersecurity governance, risk, and compliance role centered on assembling audit evidence and assurance across SOC 2, ISO 27001, HITRUST, and FedRAMP, plus answering customer security questionnaires and supporting internal audits. The work is more documentation, coordination, and control-framework knowledge than hands-on security operations.

Summary

An identity and access management practice-lead role supporting a large client's IAM integration and migration effort, covering authentication and federation, authorization frameworks, secret management, identity governance (IGA), and privileged access management (PAM). Beyond hands-on solution architecture, the role carries significant pre-sales and business-development responsibility, including proposals, RFP responses, and effort estimation. It blends deep technical IAM delivery with client-facing sales support.

Summary

Leads Beacon's existing Site Reliability Engineering team of four engineers plus an IT specialist, and stands up the security engineering practice around a security-focused engineer already approved and joining soon. Scope runs from the Kubernetes clusters carrying large-scale distributed ML workloads to endpoint management and access controls for a globally distributed workforce, plus incident response, on-call structure and self-service IT tooling. Owns the compliance roadmap building on existing SOC 2 certification and an in-progress ISO 27001 audit toward HITRUST r2 in H1 2027, and is based in the Boston area.

Summary

A senior/principal Information Systems Security Engineer (ISSE) role, not general software: embedding cybersecurity into DoD system and security architectures across the SDLC, applying cyber-resiliency and risk-mitigation strategies, and interfacing with program managers and defense contractors. Based in Dayton, OH or Hanscom AFB, MA, up to 20% travel, supporting a Wright-Patterson AFB customer (clearance-level defense work).

Summary

A detection-engineering role (AVP) at a financial-services firm's cybersecurity team, drafting and delivering threat-detection use cases in Falcon Query Language and Splunk SPL, investigating threat reports, and presenting production-ready detections to governing boards. It blends security analytics (Python/SQL/RegEx) with detection-engineering process and documentation. Asks for ~2 years in detection engineering plus security certifications; Boston-routed.

Summary

A senior threat-hunting role on Bank of America's Cyber Threat Hunting, Intelligence and Defense team: analyze and correlate large data sets to surface novel attack techniques, develop and document new hunt hypotheses, and build detection analytics with data-science and cyber-defense teams. Requires 8+ years, includes mentoring junior hunters, and demands the ability to work onsite in the Boston office when required.

Summary

Lazarus AI is building Clearwing, an AI-native system for autonomous vulnerability discovery, exploit validation, pen testing and reverse engineering, and this role pairs hands-on offensive security with LLM agent development. Work includes designing agentic workflows for reconnaissance, static and dynamic analysis and exploit development, writing production Python around security tooling, running authorized live testing against networks and containers, and building evaluation harnesses for finding quality, false positives and exploitability. Requires 3+ years in vulnerability research, penetration testing, exploit development, reverse engineering or security engineering.

Summary

A senior privileged-access-management analyst reporting directly to the technology executive who owns PAM governance and operations at Bank of America. The work is enforcing and improving privileged-access controls bank-wide — deep Active Directory security consultation, new cloud PAM requirements, partnership with audit and regulators — weighted toward governance and strategy over hands-on tooling. In-office culture noted.

Summary

An identity and access management specialist role centered on access provisioning: designing and running least-privilege provisioning across Active Directory, Azure, AWS, mainframe, and database platforms inside Bank of America's Global Information Security organization. It is hands-on technical leadership rather than pure governance, with the stated mission of eliminating excessive permissions and integrating IAM processes across cloud services. The bank notes an in-office work culture.

Summary

An executive risk-oversight mandate, not an operational security job — leading second-line-of-defense review and challenge of the bank's cyber program, running cyber risk assessments on material projects, engaging regulators during exams, and advising the board and C-suite. Seeks a former CISO or deputy-CISO-caliber leader with 15+ years in financial services or technology.

Summary

Product development on InterSystems' data platform with a security-hardening focus, designing technical solutions with a small team, implementing product changes and automated tests, and following a workflow of source control, code review and documentation. The stack is C/C++, GoLang, YAML, ObjectScript, Docker, Kubernetes and InterSystems IRIS, supported across Ubuntu containers, Windows, AIX, RHEL and SUSE Linux Enterprise, with CI/CD on GitLab and some source still in Perforce. Calls for 5+ years hardening applications and backend systems, mastery of network security concepts, protocols and tools alongside Kubernetes, Helm and AWS, and 7+ years with Python, GoLang, Java or a similar language; collaboration spans cloud core and kernel development, security architecture engineering, managed services and HealthShare operations.

Summary

Executive security leadership at a cyber risk ratings vendor — owning internal enterprise defense across endpoints, IAM, cloud, and incident response while also serving as an outward-facing security voice with customers, partners, analysts, and media. The JD leans heavily on AI: governing secure enterprise AI adoption, defending against AI-assisted threats, and shaping the company's AI-powered risk perspective.

Summary

Senior hands-on ownership of enterprise network infrastructure across the company's corporate offices and datacenters in the United States and Europe, spanning design, implementation, monitoring, maintenance and modernization. The role pairs traditional network engineering with network security operations: firewall management, secure access technologies, web application protection, vulnerability management and incident response. It is positioned as a subject matter expert seat for both core network and network security infrastructure, with mentoring of junior engineers included.

Summary

A player-coach management role on HubSpot's Security GRC team, leading a team while remaining a hands-on individual contributor, shifting compliance engineering left so new product surfaces (usage-based billing, AI capabilities, scaling infrastructure) are secure by design and audit-ready. It blends people leadership with hands-on control design, technical walkthroughs, and control documentation.

Summary

A product-security engineering role at 7AI that embeds security into the software development lifecycle: defining secure architecture patterns, building developer guardrails and automation, operating SAST/SCA/CSPM tooling, and doing threat modeling and code review, with a distinctive focus on safely using AI-generated code and agentic workflows. It expects 6+ years and hands-on production code in at least two of Python, TypeScript or Rust; Boston.

Summary

A systems security engineering role designing and developing NSA-certified cybersecurity devices, including real-time multi-threaded embedded system architecture using Model-based Systems Engineering, and analyzing and maintaining system security requirements across the product lifecycle. Values NSA-approved cryptography experience and CISSP or INCOSE certifications. Fully on-site; defense/cyber product context that typically requires clearance.

Summary

Senior threat hunter and cybersecurity professional role at SimSpace, focused on mentoring and assessing global security (Blue) teams and developing methods to incorporate AI agents into cybersecurity workflows. Involves designing AI-agent experiments, teaching security concepts, and hands-on facilitation of Blue Team exercises using open-source and commercial security tools. Remote, US.

Summary

This is a combined helpdesk and security position at MORSE Corp: Tier 1 and Tier 2 ticket support across MacOS, Windows and Linux, onboarding new employees with account and hardware setup, and troubleshooting desktops, laptops, servers and networks. The other half is security work including vulnerability scanning, system audits, incident response with the IT and security team, reviewing audit records for signs of compromise, producing cyber threat intelligence, and tracking compliance controls. Requires Bash and Python scripting, US citizenship and the ability to obtain a US security clearance.

Summary

A principal security engineer role at 7AI leading AI-driven cyber defense: detection engineering, automated response, threat hunting and research, adversary emulation, and SOAR-based security automation, working directly with customers on their AI transformation. It is a very senior post requiring 15+ years across SOC, detection engineering, threat hunting or IR plus hands-on Python; Boston.

Summary

A product-security engineering role for Bose connected consumer electronics. The work embeds secure-development practices into product delivery, including ARM TrustZone applets, cryptographic device identity, root of trust, key management, firmware protection, security assessments, standards compliance, and product security testing.

Summary

A security-automation engineering role at 7AI blending blue-team and incident-response work with coding: defining IR workflows, building automated attack simulations, and researching incidents to sharpen the AI agents, working with SOAR platforms. It asks for 4+ years in SOC, Blue Team or IR roles plus Python automation, making it a hybrid of security operations and software. Boston.

Summary

Enterprise/corporate security engineering leadership role securing the internal systems Klaviyo runs on, spanning SaaS applications, identity and access management, endpoints, Zero Trust network architecture, and perimeter controls such as Cloudflare WAF. It is a hands-on role partnering across Engineering, IT, and Security, with deep expertise expected in at least one enterprise security domain.

Summary

Owns SimpliSafe's Okta environment and identity strategy as the internal expert on SSO, MFA, lifecycle management, and directory services, sitting on the IT side of the Information Security and Technology team under the CISO. Concrete work includes building Okta Workflows to automate provisioning, deprovisioning, and access reviews across SaaS, cloud, and on-prem systems, enforcing RBAC and least privilege, leading access certification programs with IT, Security, and HR, and wiring identity systems to HR platforms for joiner, mover, and leaver processes. Also supports SOC 2 and ISO 27001 evidence and mentors junior IT and security engineers; two days a week in the Boston office.

Summary

Owns and operates SimpliSafe's security tooling stack, including anti-malware, SIEM, network monitoring, and vulnerability management, and serves as primary escalation point for security incidents, leading analysis, containment, and remediation. The role sits on the Information Security and Technology team under the CISO, reporting to the Sr. Manager, IS&T, and works with managed services vendors to tune integrations, dashboards, and alert fidelity. Requires 4+ years in cybersecurity or security operations, with two days a week in the Boston or Richmond office.

Summary

A senior director role leading product, SaaS, and cloud security, embedding security into the SDLC/DevSecOps across AI, SaaS, and product lines while building and scaling a product-security organization. Notably includes joining customer and prospect sales calls as the security SME and reviewing contracts, DPAs, and security addendums with Legal and GRC.

Summary

A senior system security engineering role in Draper's High Availability Architecture Group, defining concepts, mission-system analysis, and security requirements for cyber-resilient technologies. It combines system security, cybersecurity, and cryptography expertise to design security architectures and key-management solutions meeting NIST, NSA, and DoD standards. Architecture- and requirements-focused security engineering supporting national-security systems, rather than day-to-day software coding.

Summary

Reverse engineers software and firmware - Windows and Linux binaries through embedded firmware on non-traditional architectures and operating systems - and develops automated binary analysis tooling to characterize protocols, interfaces and functionality of target systems. The role performs vulnerability weaponization, exploit development, payload development and exploit mitigation as part of offensive cyber work, using IDA Pro, Binary Ninja or Ghidra with C/C++ or Python and x86 or ARM assembly. Work must be performed onsite and requires the ability to obtain an active Top Secret clearance, meaning US citizenship, with at least 5 years of relevant experience.

Summary

Leads a team of product security engineers reporting directly to the CISO, responsible for embedding security into SimpliSafe's IoT devices, mobile apps, cloud services, and third-party integrations before and after launch. The work spans threat modeling, secure design and architecture review, security automation, a vulnerability management program covering firmware, mobile, APIs, and cloud, and oversight of penetration testing and red team exercises. The role also owns the product security roadmap with the CISO and recruits and grows the team.

Summary

A senior security role at Klaviyo on Klaviyo's customer-data, marketing-automation, AI, analytics, and commerce platform. The JD points to Python, data pipelines, CI/CD, security as the most visible technical signals. Listed for Boston, MA.

Summary

Reverse engineers software and firmware targets, from ordinary Windows and Linux binaries through embedded firmware running on non-traditional architectures, and builds automated binary analysis tooling that characterizes protocols, interfaces and functionality. The work includes vulnerability research, weaponization, exploit and payload development, plus leading multi-discipline teams, technical marketing to customers and proposal writing. It must be performed onsite and requires an active Top Secret clearance with roughly 15 years of relevant experience, using IDA Pro, Binary Ninja or Ghidra with C/C++, Python and x86 and ARM assembly.

Summary

A Splunk and SIEM engineering role at a security services firm, designing and operating Splunk Enterprise and Cloud deployments and onboarding diverse log sources. It combines observability platform work — SPL dashboards, alerts, capacity, and availability — with security use cases such as building detection content, threat-hunting workflows, and incident-response capabilities. Hybrid in Canton, MA.

Summary

A hands-on identity and data security architect (player-coach) at a security services firm, designing and enforcing controls that govern how human and non-human identities access sensitive data across cloud and SaaS. The work centers on DSPM data discovery, IAM/IGA platform configuration (Entra ID, Okta), DLP, and securing APIs and AI/LLM workloads — customer-facing security architecture rather than application development. Hybrid in Canton, MA.

Summary

Staff software engineer serving as the technical authority for identity, authentication, and authorization across the SimSpace platform. This is a software-engineering-led IAM role: architecting and building the identity provider on Keycloak, designing relationship-based access control (ReBAC) enforced via Topaz/OPA, and setting authn/authz standards across engineering teams; remote within the US.

Summary

A cyber threat intelligence role monitoring feeds and detection tooling to identify emerging tactics, techniques, and indicators, then turning raw data into actionable intelligence for stakeholders. Responsibilities also span alert triage across a 24/7 digital estate, risk-based vulnerability prioritization, and supporting the incident-response team during active breaches. The posting is open to a range of experience levels (3+ years) and favors threat-intelligence or penetration-testing certifications.

Summary

Security operations work triaging alerts by impact and severity, acting as incident owner through the response lifecycle, and verifying that policies hold through vulnerability, patch and configuration management. It also covers refining SOC standard operating procedures, analytic rules and playbooks, and keeping detailed documentation of incidents and findings. Expects professional scripting in Python or PowerShell, working knowledge of SIEM, firewalls and Active Directory, and participation in an on-call rotation for incident response.

Summary

A Tier-3 security analyst role at 7AI, an agentic-security-platform startup, serving as the technical escalation point that validates the AI agents' investigations for accuracy: correlating endpoint, cloud, identity and network data, threat hunting in customer environments, and mentoring junior analysts. It expects at least five years of security-operations experience and doubles as a feedback loop that tunes the AI product; Boston.

Summary

A principal system security engineering role in the Secure Solutions Group engineering, integrating, and deploying trustworthy platforms that resist cyber, reverse-engineering, and supply-chain threats. It spans secure systems architecture, hardware and software resilience, system validation and accreditation, and cryptography, deriving system-level requirements and acting as a subject-matter expert alongside hardware and software engineers.

Summary

A senior security engineering and architecture role defining security standards, patterns, and platform selection across cloud, datacenter, and SaaS environments. The emphasis is on standardizing core security tooling, including identity platforms like Microsoft Entra ID and Okta, secrets management with HashiCorp Vault, and Palo Alto network security, and driving zero-trust adoption, with escalation ownership for critical incidents. It calls for roughly a decade of security engineering experience and is a cybersecurity specialist role rather than general software development.

Summary

A privileged access management governance role in Bank of America's Global Information Security organization: verify PAM controls are enforced across platforms and applications, document requirements for the technology partners who build the PAM tooling, and drive long-term PAM modernization. The work leans toward controls, standards, and risk rather than hands-on engineering; the bank notes an in-office work culture.

Summary

Identity and access management engineering across enterprise and cloud platforms, standardizing on Entra ID, Okta and Active Directory and implementing authentication and authorization with SAML, OAuth2 and OpenID Connect. It also covers RBAC and ABAC models, access governance, secrets and privileged access management with tools such as HashiCorp Vault, and identity controls for AI applications, agents and machine identities. Asks for 7+ years in IAM or security engineering; certifications such as Microsoft Identity, Okta Certified or CISSP are encouraged.

Summary

Reverse engineers software and firmware targets, from standard Windows and Linux binaries to embedded firmware running on non-traditional computer architectures and operating systems, and develops automated binary analysis tooling to characterize protocols, interfaces and functionality. Vulnerability weaponization, exploit development, payload development and exploit mitigation are core duties, using IDA Pro, Binary Ninja or Ghidra with C/C++ or Python and x86 or ARM assembly. Work must be performed onsite and requires an active Top Secret clearance, which means US citizenship.

Summary

A principal-level cybersecurity specialist focused on identity and access management (IAM) at Fortune 100 insurer Liberty Mutual — a senior security role rather than software development. Hybrid with two onsite days across Portsmouth NH, Boston, Plano, Indianapolis or Columbus; no visa sponsorship now or in the future.

Summary

Cloud security architecture: designing and implementing cloud security strategies and policies, protecting cloud-hosted data and applications from unauthorized access and other threats, and running regular security assessments and audits with remediation plans drawn from application vulnerability monitoring tooling. The work is collaborative with network engineers, developers and operations teams to fold security controls into existing systems and processes. Requires more than 7 years of cloud security experience, knowledge of ISO 27001, the NIST Cybersecurity Framework and CIS Controls, and familiarity with Azure, AWS and GCP security platforms, with CCSP, CISSP or a cloud architect certification preferred; desirable depth includes IAM and identity providers, SSO, DevSecOps in CI/CD, secrets management, VPC and subnet design, and Kubernetes network policy.

Summary

A principal cloud security engineering role at Pega owning the implementation and automation of cloud security systems across multiple providers — secure configurations, vulnerability management, and security monitoring and incident response with tools like Splunk and CrowdStrike on AWS with Terraform. Notable: work in FedRAMP or DoD Impact Level-rated environments.