123 application security jobs at 68 companies in Framingham, MA
🚀PromotedHiringCafe
Founding Backend / Infra Engineer
Cupertino, CA, US
$160k-$300k/yrOn-SiteFull Time
HiringCafe: Building a 100× better job search engine to take on Indeed and LinkedIn.
Own the crawlers, pipelines, and infrastructure powering a real-time job search engine. Strong Node.js and Python fundamentals; bonus points for security and reverse-engineering chops.
HarbourVest: Manages global private equity, credit, and infrastructure investments.
3+ YOE3+ years experience in application security or secure software development; expertise in SAST/DAST/SCA, threat modeling, secure code review, cloud/containers/IaC, CI/CD and DevSecOps; proficiency in Java/Python/C#/JavaScript and AI-assisted coding tools; security certifications preferred.
New Balance: Designs and manufactures athletic footwear, apparel, and sports equipment.
5+ YOE5+ years in application/security engineering with SDLC and DevSecOps integration, security automation/SOAR, Azure/cloud security, threat modeling, and PCI DSS experience.
Quincy or Princeton or Berwyn or Clifton or Austin
$120k-$203k/yrHybridFull Time
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
14+ YOEDesign and review secure architectures for applications, APIs, cloud-native and AI systems; conduct threat modeling and risk assessments; embed secure-by-design, DevSecOps, and AI security practices.
Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), Kubernetes, CI/CD, DevSecOps, Infrastructure as Code (IaC), SAST, DAST, IAST, software composition analysis (SCA), OWASP Top 10
Quanata: Developing risk prediction and telematics software for insurance companies.
4+ YOEAssociate's degree (required); 4+ years software engineering experience with ≥2 years in application security; familiarity with OWASP/ASVS/MASVS, threat modeling (STRIDE/PASTA), cloud architectures, and strong communication skills.
DatadogNASDAQ: DDOG: Observability and security platform for cloud applications and infrastructure.
Software engineering background with hands-on code review; knowledge of OWASP Top 10, SAST/DAST, API security; able to mentor engineers and define secure-by-default solutions.
Go, Python, Rust, OWASP, SAST, DAST, API security, APM, CI/CD
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yrOnsiteFull Time
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Boston or Carmel or Chicago or Lambertville or New York City or San Francisco or United States
$60k-$80k/yrHybridFull Time
Real Chemistry: Provides marketing and communication services for healthcare companies.
5+ YOE5+ years cloud security experience (3+ in high-growth acceptable), including 2 years focused on application security; hands-on with AWS IAM, SAML/OIDC, GitHub security tooling, threat modeling, penetration testing, and familiarity with SOC 2/GDPR/HIPAA-adjacent controls.
Atlanta or Tampa or Charlotte or Austin or Chicago or Washington or Dallas or Los Angeles or Boston or Florham Park or New York or San Francisco or California or Philadelphia or Houston
$99k-$232k/yrOnsiteFull Time
PwC: Providing audit, tax, and management consulting services to businesses.
4+ YOEBachelor's degree, 4+ years of experience, strong Workday application security and compliance skills, analytical thinking, leadership and mentoring experience; SAP experience noted as a specialism.
Publicis GroupeEuronext Paris: PUB: Global communications, advertising, and digital transformation holding.
10+ YOEBS/MS in CS or similar,10+ years experience,software development and CI/CD experience,SAST/DAST/MAST/RAST/IAST and vulnerability management,OWASP/CWE knowledge,cloud and auth expertise,threat modeling and cryptography.
Sugino Corp: Manufacturer of precision industrial cleaning and machining equipment.
Provide field technical support for fire, security, and communications systems including programming, commissioning, troubleshooting, and maintaining manufacturer software; obtain required Massachusetts licensures; work in customer sites using diagnostic tools and laptop.
MACOMNASDAQ: MTSI: Designs and manufactures semiconductor products for communications infrastructure.
Proven background in security engineering or architecture across network, cloud, and application security; strong writing and cloud security design skills; ability to translate security concepts to non-security stakeholders; U.S. Persons due to ITAR requirements.
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
5+ YOE5+ years identifying security issues and developing mitigations, 4+ years troubleshooting and scripting, experience with application security, threat modeling, code review, and mentoring; strong communication skills.
Tarian Group: Provider of security guarding, technology, and risk solutions.
High school diploma/GED, able to obtain applicable security licenses/certifications, capable of standing/walking full shifts, valid vision, able to lift 25+ lbs, and comfortable working public-facing security duties.
Boston or Chicago or Los Angeles or New York or San Francisco or Toronto or Vancouver or Vancouver
$145k-$175k/yrRemoteFull Time
Later: Provides software for social media scheduling and influencer marketing.
5+ YOE5+ years security engineering experience; strong application, cloud, and infrastructure security; SOC 2 and compliance experience; vulnerability management, IaC and CI/CD security; strong communication and software engineering skills.
OWASP, NIST, CIS Controls, SOC 2, ISO 27001, AWS Security Hub, Azure Security Center, GCP Security Command Center, SIEM, SOAR, Terraform, CloudFormation, C#, CI/CD
8+ YOE8+ years relevant experience, Bachelor's or equivalent in Computer Science/Security, deep application/infrastructure/cloud-native security expertise, AI/ML security experience, experience defining security architecture and threat models, proficiency in Python or Go, compliance experience.
Allied Universal: Global security and facility services provider protecting people and property.
Proficiency with Windows and Microsoft Office, willingness to learn security applications, ability to perform audits and support technical security projects; security background beneficial but not required.
Windows, Microsoft Excel, Microsoft PowerPoint, Microsoft Teams, Microsoft Outlook, Microsoft Word, OnGuard Lenel Access Control, Genetec Video Management, ClickIt Video Management, Smartsheet
Tarian Group: Provides professional security guarding and protective services for critical infrastructure.
High school diploma/GED, ability to obtain and maintain applicable security licenses/certifications, ability to stand/walk entire shifts, lift up to 80 lbs., strong vision, public service experience preferred.