ZipRecruiter

Log In

1

Virtual Security Jobs in Massachusetts (NOW HIRING)

Thrivent

Virtual Financial Advisor - Boston, MA

Boston, MA · On-site +1

$25.96 - $28.85/hr

Virtual Financial Advisor - Remote Boston, Massachusetts Bring your skills to a deeply purposeful ... Eligibility to be securities registered and insurance licensed in all 50 states. * Satisfactory ...

MANTECH

Security Engineer

Springfield, MA

MANTECH seeks a motivated, career and customer-oriented Security Engineer to join our team in ... and virtual environments are provisioned securely. * Deploying and managing automated scanning ...

United Security, Inc.

Armed Detention Officer -

Worcester, MA · On-site

$17.50 - $22.25/hr

Please apply to the posting and our USI Recruitment Team will reach out to set up a virtual interview. We service our clients best when we serve our employees first United Security Inc. is one of the ...

next page

Showing results 1-20

All JobsSecurity JobsVirtual Security JobsVirtual Security Jobs in Massachusetts

Virtual Security information

See Massachusetts salary details

$12

$26

$37

How much do virtual security jobs pay per hour?

As of Aug 23, 2026, the average hourly pay for virtual security in Massachusetts is $26.65, according to ZipRecruiter salary data. Most workers in this role earn between $22.31 and $29.95 per hour, depending on experience, location, and employer.

What is a virtual security job?

Virtual security jobs involve protecting digital systems, networks, and data from cyber threats, often through remote work. Professionals in virtual security analyze vulnerabilities, monitor for suspicious activity, and implement security measures to prevent breaches. Roles can include cybersecurity analysts, penetration testers, security engineers, and incident responders. These positions are essential for organizations to safeguard sensitive information and maintain compliance with security regulations.

What are the most common challenges faced by professionals in virtual security roles, and how can they prepare for them?

Professionals in Virtual Security often face challenges such as rapidly evolving cyber threats, maintaining up-to-date knowledge of the latest security technologies, and effectively communicating risks to non-technical stakeholders. They may also encounter difficulties in managing remote or hybrid security operations and ensuring compliance with various regulations. To succeed, candidates should be proactive in continuous learning, develop strong collaboration and communication skills, and stay informed about emerging security trends and tools.

What are the key skills and qualifications needed to thrive as a virtual security specialist, and why are they important?

To thrive as a Virtual Security Specialist, you need expertise in network security, threat analysis, and incident response, typically supported by a degree in cybersecurity or information technology and relevant certifications like CISSP or CEH. Proficiency with security information and event management (SIEM) systems, firewalls, intrusion detection/prevention systems, and encryption tools is essential. Strong analytical thinking, attention to detail, and effective communication skills help professionals identify threats and collaborate with teams. These skills and qualities are vital for proactively safeguarding digital assets and ensuring organizational resilience against evolving cyber threats.

What is the difference between Virtual Security vs Cyber Security?

AspectVirtual SecurityCyber Security
CertificationsCompTIA Security+, CISSP, CEHCompTIA Security+, CISSP, CEH
Work EnvironmentRemote, virtual platforms, cloud-basedBoth remote and on-site, network-focused
Industry UsageIT firms, cybersecurity companies, remote security servicesAll industries, including finance, healthcare, government
Search & ComparisonOften compared for remote security rolesBroader, includes physical and network security

Virtual Security primarily focuses on protecting digital assets and systems remotely, often involving cloud and virtual environments. Cyber Security encompasses a wider range of security measures, including physical, network, and digital protection across various industries. While Virtual Security is a subset of Cyber Security, both roles require similar certifications and often overlap in remote work settings.

What are the most commonly searched types of Security jobs in Massachusetts?

The most popular types of Security jobs in Massachusetts are:

What are popular job titles related to Virtual Security jobs in Massachusetts?

For Virtual Security jobs in Massachusetts, the most frequently searched job titles are:

What job categories do people searching Virtual Security jobs in Massachusetts look for?

The top searched job categories for Virtual Security jobs in Massachusetts are:

What cities in Massachusetts are hiring for Virtual Security jobs?

Cities in Massachusetts with the most Virtual Security job openings:

Virtual Security jobs near you
Infographic showing various Virtual Security job openings in Massachusetts as of August 2026, with employment types broken down into 89% Full Time, 9% Part Time, and 2% Contract. Highlights an 92% Physical, 3% Hybrid, and 5% Remote job distribution, with an average salary of $55,424 per year, or $26.6 per hour.

Virtual Chief Information Security Officer (vCISO)

iCorps Technologies

Woburn, MA • On-site, Remote

Full-time

This job post has expired 2 days ago. Applications are no longer accepted.

Job description

Virtual Chief Information Security Officer (vCISO)
Woburn/Hybrid
About iCorps and the Role
iCorps Technologies has delivered IT consulting and managed services to mid-market clients since 1994. We specialize in cloud computing, cybersecurity, IT governance, and outsourced IT support. We are a Microsoft Solutions Partner and Cloud Service Provider, and a Microsoft US Partner Award Winner for Security and Compliance.
The virtual Chief Information Security Officer is a client-facing role. You are the security leader iCorps puts in front of its clients, bringing the experience and operational discipline of a seasoned CISO to organizations that cannot retain one full time. We expect security to be treated as an operational discipline, with clear priorities, measurable outcomes, realistic sequencing, and honest conversations when something is not working.
Scope of the Role
The work spans three connected responsibilities, and a successful vCISO moves between them across a single engagement and across a portfolio.
1. Active Security Advisor. Provide hands-on advisory guidance on day-to-day security decisions: architecture choices, control implementation, vendor selection, configuration questions, incident calls, and the steady stream of judgment calls a maturing program generates. This pillar covers identity-first security and zero trust adoption, cloud posture across Microsoft 365, Azure, AWS, and Google Cloud, endpoint and detection strategy, MDR and XDR partnerships, ransomware resilience and tested recovery, third-party and supply chain risk, and the secure adoption of generative AI.
2. vCISO Alignment of Business, Governance, and Technical Control. Set and run the security program so the client is aligned to the frameworks that apply: NIST CSF 2.0, ISO 27001:2022, CMMC 2.0 (meaningful given our DoD-adjacent client base), SOC 2, HIPAA, PCI DSS 4.0, US state privacy laws led by CCPA, SEC cyber disclosure where applicable, and cyber insurance attestations. Translate executive intent into governance structure, governance into policy, policy into control, and control state into board-ready reporting. Stand up and run a recurring security committee at each client. Own AI governance specifically: the policies, review processes, and committee structure that let a client adopt AI tooling without losing control of their data.
3. Gap Analysis and Assessment. Run baseline assessments at engagement kickoff, periodic reassessments on an agreed cadence, and targeted assessments tied to events such as acquisitions, regulatory change, new product lines, or CMMC certification cycles. Produce remediation roadmaps with sequencing, ownership, and effort the client can fund and execute. Run post-incident assessments to verify whether controls performed the way the program described.
What You Will Do
  • Own the security program for each assigned client, with a written strategy, roadmap, and reporting cadence with the executive sponsor and, where applicable, the board or audit committee.
  • Lead identity-first security: conditional access, PIM and PAM, least privilege, identity threat detection, and joiner-mover-leaver discipline.
  • Drive cloud posture across Microsoft 365, Azure, AWS, and Google Cloud, including CSPM and SSPM findings, hybrid work controls, and SaaS-to-SaaS risk.
  • Set the direction for detection and response, treating incident readiness (tabletops, runbooks, escalation paths, retainer relationships) with the same weight as incident response itself.
  • Guide ransomware resilience: immutable backups, tested recovery objectives, recovery drills, and tabletop cadence at the executive level.
  • Own third-party and supply chain risk, including vendor due diligence, SBOM awareness, and fourth-party exposure.
  • Lead AI governance and the secure adoption of AI tooling across policy, technical configuration, and ongoing monitoring for shadow AI.
  • Guide incident response when an event occurs, coordinating with legal, forensics, insurance, and law enforcement, and lead the post-incident review so lessons land in policy and controls.
  • Partner with iCorps delivery teams so recommendations are implementable in the environments we manage.
What You Bring
  • At least ten years in information security, with meaningful time in a leadership role. Prior CISO or deputy CISO experience is strongly preferred.
  • Demonstrated experience running gap analyses against more than one major framework and translating findings into roadmaps clients funded and executed.
  • Direct experience aligning a business to NIST CSF, ISO 27001, SOC 2, HIPAA, or CMMC, with enough range to pick up the others. CMMC 2.0 working knowledge is a meaningful advantage.
  • A point of view on AI governance and the secure adoption of generative AI in a business setting.
  • Fluency with modern identity, endpoint, cloud, and detection tooling, with enough depth to tell a good implementation from a bad one.
  • Judgment on where to invest, where to defer, and where to accept risk, and the communication skills to explain that judgment to a CFO, general counsel, or board member.
  • A bachelor's degree in computer science, information systems, cybersecurity, or a related field, or equivalent experience.
Certifications
Required at hire or within a reasonable onboarding window: CISSP or CISM.
Preferred: CCSP for cloud-heavy engagements, CRISC for governance and risk, CISA for audit, CMMC CCP or CCA for clients pursuing CMMC certification, and relevant GIAC certifications (GSLC, GCIH, GPCS) where they match the engagement focus.
Certifications are useful shorthand for baseline knowledge, not a substitute for the operational judgment the role demands.
How the Role Runs
Client-facing advisory work delivered as a service. You manage a portfolio of clients with different risk profiles, maturity levels, and budgets. Cadence per client typically runs monthly operating reviews, quarterly executive reviews, and annual strategy refreshes, with formal gap analyses at kickoff and at least annually thereafter. Travel is occasional. Most work is remote, with onsite presence when it materially improves the engagement. The vCISO is part of iCorps� managed security practice, with peer review on major client deliverables and a consistent point of view across the practice.
If you want to do real security work with clients who need it, in an environment that takes the craft seriously, we would like to hear from you.

Apply