Information Systems Security Manager (Issm) - SME AvintInformation Systems Security Manager (Issm) - SMEBedford, MA$165,000–$175,000 / yearIn this role, you’ll be part of a high-performing team responsible for implementing and overseeing all phases of the Risk Management Framework (RMF) while supporting day-to-day cybersecurity operations. Perform the Information System Security Engineer (ISSE) duties in an Information Assurance Workforce System Architecture and Engineering (IASAE) position as outlined in AFI 33-200, AFI 33-210 and AFMAN 33-285 for assigned systems.
Associate - Data Privacy Cyber Transactions (Mid-Level) Advocates Legal RecruitingAssociate - Data Privacy Cyber Transactions (Mid-Level)Boston, MassachusettsOffices available in Washington DC, Palo Alto, San Francisco, Austin, Boston, Century City, Los Angeles, New York, San Diego, or Seattle. You’ll be on the front lines of headline-making M&A deals, IPOs, and strategic tech transactions across industries like AI/ML, cloud computing, fintech, and enterprise software.
Senior Information System Security Engineer Odyssey Systems Consulting Group, Ltd.Senior Information System Security EngineerHanscom AFB, MassachusettsFull timePosition Summary: Odyssey Systems has an exciting opportunity for a Senior Information Systems Security Engineer (ISSE) supporting the AFLCMC/HNJ Communications and Networks Directorate Special Programs Division, located at Hanscom Air Force Base, MA. In this role, you will lead Authorization and Accreditation (A&A) documentation efforts and provide Systems Security Engineering (SSE) expertise across highly classified environments, ensuring cybersecurity protections are embedded into system architectures from concept through sustainment.
Cyber Defense & Engineering - Operational Technology (Ot) Consulting Manager PwCCyber Defense & Engineering - Operational Technology (Ot) Consulting ManagerBoston, MA$99,000–$232,000 / yearPwC does not intend to hire experienced or entry level job seekers who will need, now or in the future, PwC sponsorship through the H-1B lottery, except as set forth within the following policy: https://pwc.to/H-1B-Lottery-Policy . Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to: Analyse and identify the linkages and interactions between the component parts of an entire system.
Cyber Data Protection/Pki Specialist Senior Consultant DeloitteCyber Data Protection/Pki Specialist Senior ConsultantBoston, MA$118,700–$218,600 / yearAssist clients in designing, implementing and operating technology and process solutions to reduce data risks, developing and leading the implementation of encryption strategies to protect sensitive data across various environments, including cloud, on-premises, and hybrid infrastructures, to manage the deployment and lifecycle of PKI systems, ensuring robust and scalable certificate management processes, monitor and maintain the health of certificate infrastructures to prevent downtime and security breaches, and assist with developing requirements, evaluating vendor solutions, architecting, implementing and operating data protection solutions. 2+ years of professional experience managing and implementing various encryption technologies (e.g., database encryption, file encryption, Public Key Infrastructure (PKI), certificate lifecycle management (CLM), transport layer security (TLS)) and strong understanding of Cloud encryption concepts such as client-side encryption, bring your own key (BYOK), server-side encryption.
Information System Security Officer The Charles Stark Draper LaboratoryInformation System Security OfficerCambridge, MassachusettsDraper supports many programs to improve work-life balance including workplace flexibility, employee clubs ranging from photography to yoga, health and finance workshops, off site social events and discounts to local museums and cultural activities. • 1-3 years year relevant industry experience is required, • Preferred experience with RMF (NIST SP 800-53, JSIG, DAAG, ICD 503), IR, Vulnerability Management, SCAP, STIG, and Security-Relevant Tools.
Senior Consultant | Application Security | Vulnerability Management IMCS Group IncSenior Consultant | Application Security | Vulnerability ManagementBoston, MATechnical Skills: "Vulnerability Management Platforms: Deep hands-on experience managing and optimizing enterprise tools (e.g., Qualys, Wiz, Nessus, Rapid7), including platform configuration, performance tuning, and data quality management. "Tooling Integration & Engineering: Experience designing and implementing integrations between vulnerability platforms and enterprise systems (e.g., ServiceNow CMDB, SecOps, SIEM) to support automated workflows and governance processes.
Software Supply Chain Security Engineer State StreetSoftware Supply Chain Security EngineerQuincy, Massachusetts$120,000–$202,500 / yearProven technical solutioning experience with current and emerging technologies including, but not limited to: Agile Development, DevOps, Cloud Engineering, System Hardening, DevSecOps, Cybersecurity, Cloud Security. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most.
Application Security Engineer - Agentic Harness State StreetApplication Security Engineer - Agentic HarnessQuincy, MassachusettsProven technical solutioning experience with current and emerging technologies including, but not limited to: Agile Development, DevOps, Cloud Engineering, System Hardening, DevSecOps, Cybersecurity, Cloud Security. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most.
Senior Consultant | Application Security | Vulnerability Management Expedite Talent SolutionsSenior Consultant | Application Security | Vulnerability ManagementBoston, MARemoteDefine PoT scope, success criteria, and test plans for automated mobile vulnerability scanning (e.g., agent-based/agentless, MDM-integrated, API-driven). Translate requirements into enforceable policies (password/biometrics, encryption, OS update controls, app controls, certificate/profile constraints, VPN/Wi-Fi security, logging settings).
Principal System Security Engineer The Charles Stark Draper LaboratoryPrincipal System Security EngineerCambridge, MassachusettsThe Secure Solutions Group within the System’s Engineering Directorate is seeking a Principal System Security Engineer to support engineering, integrating, and deploying trustworthy secure platforms that resist cyber, reverse engineering, and supply chain threats. Draper supports many programs to improve work-life balance including workplace flexibility, employee clubs ranging from photography to yoga, health and finance workshops, off site social events and discounts to local museums and cultural activities.
Senior Information Security Analyst - Attack Surface Management Lead Mass General BrighamSenior Information Security Analyst - Attack Surface Management LeadSomerville, MassachusettsThis role will help lead the function into a risk-driven, validation-focused capability that identifies meaningful exposure, prioritizes remediation based on exploitability and business impact, and connects findings to detection engineering, threat hunting, threat intelligence, and broader Cyber Defense priorities. The Mass General Brigham Senior Information Security Analyst – Attack Surface Management Function Lead will be responsible for advancing and coordinating the MGB Attack Surface Management capability across vulnerability discovery, penetration testing, attack surface analysis, and attack simulation.
Professional Services Consultant Bit SightProfessional Services ConsultantBoston, MA$85,000–$105,000 / yearPreferred experience or knowledge in: Hands-on experience conducting or supporting vendor security assessments, security audits, or compliance evaluations (GRC, internal audit, risk management backgrounds welcome). This range reflects the minimum and maximum target for new hire salaries for the position across all US locations, is based on a full-time work schedule, and is Bitsight's good faith estimate as of the date of this posting.
Senior Information Systems Security Engineer (ISSE) Applied Research SolutionsSenior Information Systems Security Engineer (ISSE)Bedford, MassachusettsBA/BS Degree, and 15 years of Cyber-Security experience and 5 years DoD experience or; MA/MS Degree and 12-year experience, 5 years in DoD or; 20 years of directly related experience with proper certifications of which 8 years are in DoD. Applied Research Solutions (ARS) is respected as a world-class provider of technically integrated solutions as we deliver premier talent and technology across our focused markets for unparalleled, continuous mission support.
System Analysis Engineer The Charles Stark Draper LaboratorySystem Analysis EngineerCambridge, MassachusettsResponsibilities include the elucidation of mission needs, definition of use cases/CONOPS, functional system modeling, requirement tree development and flow-down, analysis-based requirement trades/balancing, simulation-based performance trades/analysis, simulation-based requirements verification, test strategy development, test design, and requirements management through product life-cycle. Draper supports many programs to improve work-life balance including workplace flexibility, employee clubs ranging from photography to yoga, health and finance workshops, off site social events and discounts to local museums and cultural activities.
Cyber Claim Counsel The Travelers CompaniesCyber Claim CounselBraintree, MA$111,600–$184,200 / yearTravelers' Cyber Claim Team is responsible for handling claims focusing on cyber privacy and security breach incident response, computer crime, infrastructure attacks and restoration, notification to affected parties and regulators, business interruption, consumer privacy liability, and identity fraud/theft. The First-Party Cyber Claim Team partners with and supports business units including Private-Non-Profit, Public Companies, Financial Institutions, Insurance Companies, Investment Advisors, and Professional Liability.
Senior Model-Based Systems Engineer The Charles Stark Draper LaboratorySenior Model-Based Systems EngineerCambridge, MassachusettsThe Systems Concepts Engineer (SMTS) is responsible for the elucidation of mission needs, mission engineering, architecture/design trade space exploration for integrated hardware/software systems, simulation-based performance analysis for complex systems and system-of-systems, architecture definition using digital engineering (DE) and/or model-based system engineering (MBSE) frameworks, briefing of results to leadership or government sponsors, and development of research and development (R&D) proposals. Draper supports many programs to improve work-life balance including workplace flexibility, employee clubs ranging from photography to yoga, health and finance workshops, off site social events and discounts to local museums and cultural activities.
Principal Optical Engineer The Charles Stark Draper LaboratoryPrincipal Optical EngineerCambridge, MassachusettsDraper supports many programs to improve work-life balance including workplace flexibility, employee clubs ranging from photography to yoga, health and finance workshops, off site social events and discounts to local museums and cultural activities. • Interacts with device, hardware and software design teams to develop optical systems; specifying, selecting and qualifying active and passive optical components, developing and benchmarking system performance models.
SIEM Data Engineer State StreetSIEM Data EngineerQuincy, MassachusettsThis role is focused on understanding diverse enterprise data sources, building and maintaining security telemetry pipelines, validating data quality, and ensuring reliable delivery of high-quality data into cyber data platforms such as Splunk, Databricks, and other SIEM or cyber analytics platforms. Relevant certifications are preferred, including Cribl certifications such as Cribl Certified Observability Engineer, Splunk certifications such as Splunk Certified Admin, Splunk Certified Architect, or Splunk Certified Consultant, or equivalent hands-on platform experience.
Product Security Engineer, Programs ANDURIL INDUSTRIESProduct Security Engineer, ProgramsQuincy, MA$156,000–$253,000 / yearWe're seeking a product security engineer to own security for assigned products in your technical domain, provide expert consultation on security architectures, guide implementation of security features, develop solutions engineering for complex security challenges, and ultimately secure our suite of advanced technologies including artificial intelligence systems, command and control platforms, aerospace vehicles, and long range sensors. This third-party service provider provides risk-intelligence services that may include analysis of sanctions and watchlists, adverse media, public-record information, and other lawful open-source or commercial data sources.