Senior Information Security Analyst - Attack Surface Management Lead
Somerville, Massachusetts, United States
$94k-$137k/yrHybridFull Time
Mass General Brigham: Provides integrated medical care, research, and clinical training services.
5+ YOERequires 5–7 years of relevant cybersecurity experience, an associate's or bachelor's degree or equivalent experience, strong cybersecurity expertise, communication, leadership, project management, and decision-making skills.
WHOOP: Wearable technology for personalized health and performance tracking.
3+ YOE3+ years in security operations/incident response; experience with endpoint, identity, cloud, or SaaS investigations; familiarity with SIEM, EDR, MITRE ATT&CK; automation/scripting experience; strong analytical and communication skills; security certs are a plus.
Planet FitnessNYSE: PLNT: Operates a global network of low-cost fitness centers.
3+ YOEBachelor's degree and 3+ years in information security; familiarity with SIEM, IDS/IPS, EDR/XDR, cloud monitoring, SOAR, incident response, threat hunting, and relevant certifications preferred.
Center for Health Information and Analysis: Analyzes health care data to improve system transparency and affordability.
1+ YOE1+ year IT security experience (Level I) or 2+ years (Level II); knowledge of Azure and Microsoft technologies; experience with network/firewall tech; strong written and verbal English; perform risk/vulnerability assessments and incident response.
Active Directory, Microsoft 365, Microsoft Azure, Cisco, Palo Alto
Boston University: Private research university providing higher education degree programs.
2+ YOERequires 2+ years of cybersecurity experience, familiarity with security tools, network protocols, operating systems, security technologies, and regulatory requirements. ServiceNow, ITIL, and security certifications are preferred.
SS&C TechnologiesNasdaq: SSNC: Provides software and technology for financial and healthcare sectors.
5+ YOEBachelor’s in Information Security or Computer Science; 5+ years in cybersecurity; knowledge of NIST CSF, ISO 27001, SOC 2, CIS Controls; experience with firewalls, IDS/IPS, WAF, cloud security (AWS/Azure); scripting (Python/PowerShell/Bash), IaC security (Terraform/CloudFormation); CISSP/CISM/CCSP/GSEC or equivalent.
DigitalOceanNew York Stock Exchange: DOCN: Simplifies cloud infrastructure for developers, startups, and SMBs.
6+ YOE6+ years in detection & response, insider risk, or security engineering; hands-on UEBA/SIEM/DLP/UAM/SOAR; scripting with Python/Go/Bash; familiarity with macOS, Windows, Linux, Kubernetes and cloud; knowledge of MITRE ATT&CK and NIST.
Boston or Austin or Washington or Seattle or San Francisco
$120k-$155k/yrRemoteFull Time
HackerOne: Connecting organizations with ethical hackers to find security vulnerabilities.
3+ YOE3+ years security testing/vulnerability research on web/mobile apps, strong OWASP Top 10 knowledge, experience with Burp Suite and CVSS, ability to reproduce/validate findings and communicate technical impact in English.
Burp Suite, Common Vulnerability Scoring System (CVSS)
DynatraceNYSE: DT: Provides an AI-powered observability platform for cloud monitoring.
2+ YOE2+ years IT/application security experience; evaluate AI risks, design security controls, and ensure compliance (FedRAMP/ISO27001/SOC2). Familiarity with SaaS platforms, IAM, data protection, and cloud security.
AWS, Okta, Azure AD, NetSuite, SAP SuccessFactors, Salesforce, ServiceNow, FedRAMP, ISO 27001, SOC 2
SOC Vulnerability Management Program Security Analyst
Chelsea, Massachusetts, United States
$83k-$123k/yrHybridFull Time
Commonwealth of Massachusetts: Providing public services and governance to the people of Massachusetts.
2+ YOEMinimum 2 years IT/security experience, knowledge of vulnerability management, networking, Windows/Linux, cloud security (AWS/Azure), experience with Tenable/Veracode, scripting (Python/PowerShell/JavaScript/PHP/Ruby), and strong communication and analytical skills.
Tenable One, Veracode, Active Directory, AWS, Microsoft Azure, Python, PowerShell, JavaScript, PHP, Ruby, Common Vulnerability Scoring System (CVSS), Security Orchestration, Automation, and Response (SOAR)
Conga: Sells software for managing revenue cycles and business contracts.
Bachelor's in a related field, hands-on security or cloud experience (internships/projects), familiarity with AI agents, scripting (Python/Bash), Linux, networking, Git, and vulnerability management.
Lendbuzz: AI-powered platform providing auto loans to underserved borrowers.
3+ YOEBachelor's in CS/IT,3+ years cybersecurity experience; hands-on incident response, security ops, and policy enforcement; experience with firewalls, IDS/IPS,SIEM,EDR,IAM,CSPM and cloud (AWS/Azure/GCP); familiarity with NIST/CIS/ISO 27001; strong communication.
Seven AI: Provides autonomous AI agents for enterprise security operations.
2+ YOERequires 2+ years in cybersecurity operations, alert investigation across endpoint, network, identity, email, and cloud sources, SIEM querying, incident triage, malware analysis, and strong analytical and interpersonal skills.
IPG PhotonicsNASDAQ: IPGP: Develops and manufactures high-performance fiber lasers and systems.
3+ YOE3 years IT/Cyber experience, hands-on with EDR (CrowdStrike Falcon and/or Microsoft Defender), knowledge of NIST/ISO, OS/software technical experience, documentation skills, and network infrastructure familiarity.
CrowdStrike Falcon, Microsoft Defender, Microsoft 365, NIST, ISO, CMMC
PPLNYSE: PPL: Provides electricity and natural gas to millions of customers.
5+ YOEBachelor's degree and 5+ years experience; deep hands-on firewall (Cisco ASA, Palo Alto) and Panorama experience; familiarity with SIEM, NIDS/NIPS, HIDS/HIPS; incident investigation and risk analysis skills.