Top 243 Vulnerability management Jobs in Boston, Ma

Information Security Analyst
NEPC, LLC —Boston, MA
- $80,500 - $107,500 a year
- Mid-level
- 3 years
- Associate's degree
Quick Apply
7d
Red Hat Linux (RHEL) Admininstrator (Remote)
GlideFast Consulting —Waltham, MA
- $120,000 - $130,000 a year
- Full-time
- Remote
- Computer Science
- 5 years
- Analysis skills
- Health insurance
- Dental insurance
Sr. Security Data Engineer, Vulnerability Risk Management
Moderna, Inc. —Cambridge, MA
- $130,800 - $209,400 a year
- Full-time
- 5 years
- System design
- Office
- Paid time off
- Adoption assistance
Security Compliance Manager
OneStudyTeam —Boston, MA
- $140,000 - $170,000 a year
- Remote
- Azure
- Pass drug screening
- HIPAA
Quick Apply
IT Security & Compliance Engineer
Option One Technologies —Boston, MA
- From $70,000 a year
- Full-time
- Hybrid work
- Azure
- Mid-level
- AWS
- Health insurance
- Dental insurance
Quick Apply
Senior OCI Cyber Engineer
Leidos —Tewksbury, MA
- $107,900 - $195,050 a year
- Full-time
- Hybrid work
- Azure
- 6 years
- System design
BCG Platinion | Manager, Cybersecurity
Boston Consulting Group —Boston, MA
- $190,000 a year
- Full-time
- 6 years
- Bachelor of Science
- Urgent Care
- Profit sharing
- Paid parental leave
Senior Staff Product Security Engineer
Draeger Medical Systems, Inc. —Andover, MA
- $140,400 - $168,500 a year
- Hybrid work
- Computer Science
- Bachelor of Science
- System design
- Free parking
- Paid holidays
Principal Systems Security Engineer (Cyber) - P4 (Onsite)
Raytheon —Tewksbury, MA
- $107,500 - $204,500 a year
- Full-time
- Windows
- 8 years
- In-person
- Paid holidays
- Disability insurance
Information Systems Security Officer (ISSO) III
General Dynamics Information Technology —Bedford, MA
- $104,040 - $140,760 a year
- Travel
- Experience equivalent to degree accepted
- Senior level
Information Systems Security Officer (ISSO) III
General Dynamics Information Technology —Bedford, MA
- $104,040 - $140,760 a year
- Office
- Travel
- Experience equivalent to degree accepted
Cybersecurity - Privileged Access Management - Sr Associate
PRICE WATERHOUSE COOPERS —Boston, MA
- $77,000 - $202,000 a year
- Computer science
- Oracle
- Mid-level
- Paid holidays
- Health insurance
Information System Security Officer
The Charles Stark Draper Laboratory, Inc. —Cambridge, MA
- $75,000 - $156,000 a year
- Full-time
- Mid-level
- Bachelor's degree
- 1 year
Quick Apply
Director, Cybersecurity & GRC
Form Energy, Inc —Somerville, MA
- $199,950 - $293,835 a year
- Full-time
- Hybrid work
- 5 years
- Office
- Senior level
- Paid parental leave
- Health insurance
Quick Apply
Information Security Engineer
Re:Build Manufacturing —Boston, MA
- $112,000 - $168,000 a year
- Remote
- Azure
- 5 years
- System design
- Health insurance
- Dental insurance
Quick Apply
6d
IT Systems Administrator
HPR —Boston, MA
- $75,000 - $145,000 a year
- Azure
- Mid-level
- 3 years
Quick Apply
2d
Cloud and Storage Engineer
Contact Government Services, LLC —Boston, MA
- $100,949.33 - $137,002.66 a year
- Full-time
- Hybrid work
- Azure
- Computer Science
- Customer service
- Health insurance
- Dental insurance
Quick Apply
Desktop/Workstation Design Engineer
Contact Government Services, LLC —Boston, MA
- $116,480 - $158,080 a year
- Full-time
- Hybrid work
- Writing skills
- System design
- Mid-level
- Health insurance
- Dental insurance
Quick Apply
Information Security Architect
Ryder System —Boston, MA
- $140,000 - $150,000 a year
- Full-time
- 7 years
- Azure
- Computer Science
- Disability insurance
- Health insurance
2d
Cybersecurity - Identity and Access Management - Sr Manager
PRICE WATERHOUSE COOPERS —Boston, MA
- $124,000 - $280,000 a year
- Computer science
- 7 years
- Computer Science
- Paid holidays
- Health insurance

I want to receive the latest job alert for vulnerability management in boston, ma

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

vulnerability management jobs near boston, ma

Risk Manager jobs in Cambridge, MA

Staff Security Engineer jobs in Andover, MA

Storage Engineer jobs in Boston, MA

Desktop Support Technician jobs in Boston, MA

Systems Administrator jobs in Boston, MA

Information Systems Security Officer jobs in Cambridge, MA

Information Architect jobs in Boston, MA

Compliance Manager jobs in Boston, MA

Compliance Engineer jobs in Boston, MA

Information Security Analyst jobs in Boston, MA

Cybersecurity Manager jobs in Boston, MA

Office Manager jobs in Connecticut

Risk Manager jobs in Texas

Risk Manager jobs in San Antonio, TX

Risk Manager jobs in Virginia Beach, VA

Risk Manager jobs in Boston, MA

Information Systems Security Officer jobs in Austin, TX

Information Systems Security Officer jobs in Colorado Springs, CO

Transit Security jobs in Las Vegas, NV

Information Systems Security Officer jobs in Chelmsford, MA

Information Security Analyst

NEPC, LLC -
Boston, MA

Quick Apply

Job Details

$80,500 - $107,500 a year
7 days ago

Qualifications

Endpoint Security
IT governance
System administration
GSEC
Technical documentation
Incident report management
Operations coordination
Triage
Regulatory compliance
Vulnerability assessment tools
CompTIA CySA+
Vulnerability Remediation
Mid-level
Incident Escalation
Internal investigations
3 years
IT infrastructure
IT monitoring tools
Records management
Task prioritization
Incident management operations support
Security Event Management (security operations)
Log analysis tools
Compliance documentation
Customer support ticket management
Help desk systems
Security Governance (information security management)
Vulnerability management
Investigative reports
Cross-functional collaboration

Full Job Description

Level: 3-5+ years of related experience

Location: Flexible (East Coast preferred). Must reside in a state where we are registered.

Role Summary:

The Information Security Analyst is a role reporting to the Director of Information Security and focused primarily on security operations, investigations, and vulnerability follow-through, with secondary responsibility for governance and operational risk coordination. The analyst works across security tools and business processes to identify issues, investigate activity, document findings, and drive remediation with IT and other stakeholders.

This role is responsible for monitoring and investigating alerts and vulnerabilities, coordinating response and remediation efforts, maintaining clear documentation, and supporting core security governance activities such as the risk register, committee records, and audit evidence. Success in this role requires strong judgment, disciplined procedure-following, clear communication, and the ability to work independently while collaborating across technical and non-technical teams.

Core Responsibilities:

Monitor, investigate, and triage alerts, events, vulnerabilities, and escalated helpdesk tickets across the security stack; Understanding potential impact and distinguishing meaningful threats from false positives or low-risk activity.
Coordinate with IT, Business Analysts, process owners, and other stakeholders to drive remediation, containment, follow-up, and closure of security and operational risk issues.
Document investigative steps, evidence, decisions, remediation progress, and outcomes in a clear, consistent, and repeatable manner; identify recurring issues, process gaps, and broader trends, and escalate them appropriately.
Support vulnerability management activities, including scan coordination, review of findings, remediation tracking, follow-up on overdue items, and validation of progress against defined timelines.
Maintain the risk register, including risk descriptions, owners, mitigation plans, status updates, and supporting records, and work alongside Business Analysts and process owners to identify and document operational risks, control gaps, and dependencies revealed through incidents, investigations, or project work.
Assist with Operational Risk Council activities by preparing materials, tracking action items, and maintaining meeting records, and organize documentation and evidence needed for audits, regulatory requests, and internal reviews.
Partner with the Compliance team to support security and privacy requirements related to client contractual obligations, Regulation S-P, and emerging technology use cases.
Support security procedures, policy updates, and awareness efforts by helping keep documentation current and identifying useful communication or training opportunities based on trends and observed issues.

Required and Preferred Qualifications:

Experience and Background

Requires 3–5 years of working experience in information security, IT Infrastructure, systems administration, networking, and/or technical support; additional audit, compliance, or risk-related experience is helpful.
Relevant certifications may include Security+, CySA+, ISC2 entry-level certifications, GSEC, or similar information security, audit, or risk-related certifications.
Associate’s degree preferred but not required.

Skills and Knowledge

Working knowledge of and experience with security operations activities such as alert triage, vulnerability tracking, investigation workflows, escalation, and documentation.
Proficiency using security and IT tools such as endpoint protection, vulnerability management platforms, SIEM, ticketing systems, dashboards, and related technologies.
Strong written and verbal communication skills across teams with different technical and operational backgrounds.
Ability to follow procedures carefully, improve documentation where needed, and manage work with minimal supervision.
Sound judgment, attention to detail, and the ability to prioritize effectively when handling multiple issues.
Familiarity with CIS Controls, NIST, CISA publications, and related standards is helpful.

Compensation:

The base salary for this role is $80,500 - $107,500 per year with an additional annual performance bonus. Individual compensation is based on a variety of factors, including experience, education, certifications, location, responsibilities of the role, internal equity and alignment with market data.

Company Background:

NEPC, LLC is a full-service investment consulting firm based in Boston, Massachusetts. We were founded in 1986 and now have approximately 375 employees and over 400 clients. We help governments, institutions, families, and individuals preserve and grow their capital across different asset classes and market cycles. We provide a variety of consulting services such as asset allocation, performance measurement, policy formulation, investment manager research, and discretionary portfolio management. Our clients include defined benefit, defined contribution, endowments, foundations, trusts, public, corporate, Taft-Hartley, health & welfare, high net worth, insurance, and private plans.

Culture is important to us here at NEPC – our values include putting clients first, doing the right thing, bringing your whole self to work, building trust, embracing change, and having a “we before me” approach in our work. Advancing diversity and inclusion within our firm and industry is also a core initiative at NEPC. We are a strong advocate of promotion from within, so excellent potential exists for professional growth. We’re a fun (but demanding) company with excellent working conditions, a very supportive, team-oriented environment, and a full benefits program to support your life and well-being. We offer a competitive salary and bonuses (when applicable).

NEPC is an Affirmative Action/Equal Opportunity Employer (July 2026)

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights (https://www.eeoc.gov/poster) notice from the Department of Labor.

Quick Apply

Refine Your Search

vulnerability management jobs in boston, ma

Information Security Analyst

Red Hat Linux (RHEL) Admininstrator (Remote)

Sr. Security Data Engineer, Vulnerability Risk Management

Security Compliance Manager

IT Security & Compliance Engineer

Senior OCI Cyber Engineer

BCG Platinion | Manager, Cybersecurity

Senior Staff Product Security Engineer

Principal Systems Security Engineer (Cyber) - P4 (Onsite)

Information Systems Security Officer (ISSO) III

Information Systems Security Officer (ISSO) III

Cybersecurity - Privileged Access Management - Sr Associate

Information System Security Officer

Director, Cybersecurity & GRC

Information Security Engineer

IT Systems Administrator

Cloud and Storage Engineer

Desktop/Workstation Design Engineer

Information Security Architect

Cybersecurity - Identity and Access Management - Sr Manager

I want to receive the latest job alert for vulnerability management in boston, ma

Related Searches

Explore jobs in more locations

Job Seeker Tools

Employer Tools

Browse

Stay Connected