141 application security jobs at 80 companies in Massachusetts

PromotedHiringCafe
Founding Backend / Infra Engineer
Cupertino, CA, US
$160k-$300k/yr On-SiteFull Time
HiringCafe
HiringCafe: Building a 100× better job search engine to take on Indeed and LinkedIn.
Own the crawlers, pipelines, and infrastructure powering a real-time job search engine. Strong Node.js and Python fundamentals; bonus points for security and reverse-engineering chops.
Node.js, Python, Elasticsearch, Redis
3mo
Save
Mark Applied
Hide
Application Security Engineer
Coral Gables or Florida or Texas or South Carolina or Pennsylvania or Massachusetts or Illinois or Georgia or North Carolina or Florida
$110k-$130k/yr HybridFull Time
Ryder
RyderNYSE: R: Provides commercial vehicle leasing, logistics, and supply chain solutions.
5+ YOE5+ years OWASP, SAST, DAST, SCA, RASP; 7+ years in application security or related field; strong web security knowledge; secure SDLC; Bachelor's in CS; CISSP/OSCP/CASE preferred.
SAST, DAST, OWASP, SCA, RASP, WAF, CI/CD, Azure DevOps, Terraform, Python, JavaScript, .NET
1mo
Save
Mark Applied
Hide
Application Security Engineer
Boston, Massachusetts, United States
$145k-$155k/yr HybridFull Time
HarbourVest
HarbourVest: Manages global private equity, credit, and infrastructure investments.
3+ YOE3+ years experience in application security or secure software development; expertise in SAST/DAST/SCA, threat modeling, secure code review, cloud/containers/IaC, CI/CD and DevSecOps; proficiency in Java/Python/C#/JavaScript and AI-assisted coding tools; security certifications preferred.
Cursor, GitHub Copilot, ChatGPT Codex, Java, Python, C#, JavaScript, OWASP Top 10, SAST, DAST, SCA, SSPM, CI/CD, DevSecOps, IaC
1d
Save
Mark Applied
Hide
Senior Application Security Engineer
Boston or Lawrence
$105k-$156k/yr HybridFull Time
New Balance: Designs and manufactures athletic footwear, apparel, and sports equipment.
5+ YOE5+ years in application/security engineering with SDLC and DevSecOps integration, security automation/SOAR, Azure/cloud security, threat modeling, and PCI DSS experience.
Python, JavaScript, .NET/C#, Azure, CI/CD, Akamai, Salesforce Commerce Cloud, Atlassian Stack, PKI, SOAR, SAST, SCA, DAST, API Security, Container Security, CNAPP/CSPM/CWPP, WAF
2w
Save
Mark Applied
Hide
Senior Application Security Architect
Quincy or Princeton or Berwyn or Clifton or Austin
$120k-$203k/yr HybridFull Time
State Street
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
14+ YOEDesign and review secure architectures for applications, APIs, cloud-native and AI systems; conduct threat modeling and risk assessments; embed secure-by-design, DevSecOps, and AI security practices.
Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), Kubernetes, CI/CD, DevSecOps, Infrastructure as Code (IaC), SAST, DAST, IAST, software composition analysis (SCA), OWASP Top 10
1mo
Save
Mark Applied
Hide
Senior Application Security Engineer
Seattle or Los Angeles or San Francisco or California or Colorado or Connecticut or Delaware or Hawaii or Illinois or Maine or Maryland or Massachusetts or Minnesota or Nevada or New Jersey or New York or Rhode Island or Virginia or Washington or Washington DC or United States
$141k-$259k/yr OnsiteFull Time
Nordstrom
Nordstrom: Operates luxury department stores and off-price retail outlets.
4+ YOE4+ years in application security or related field; experience shipping security tooling and automation; expert threat modeling, security design review, and manual code review; fluent reading/writing code in Java, Kotlin, C#, or Python; cloud-native and LLM/AI security knowledge.
Java, Kotlin, C#, Python, SAST, SCA, DAST, secrets scanning, GitHub Advanced Security, JFrog Artifactory, AWS, GCP, Azure, Kubernetes, LLM
4d
Save
Mark Applied
Hide
Senior Manager, Application Security
Irving or Chicago or Boston
$113k-$210k/yr OnsiteFull Time
Publicis Groupe
Publicis GroupeEuronext Paris: PUB: Global advertising and digital transformation agency holding.
10+ YOE10+ years experience in software security, BS/MS in CS, hands-on software development, CI/CD and application testing (SAST/DAST/IAST), vulnerability management, OWASP/CWE knowledge, cloud and cryptography expertise.
CI/CD, SAST, DAST, MAST, RAST, IAST, OWASP Top 10, WAF
2w
Save
Mark Applied
Hide
Senior Manager - Application Security Engineering
New York or Connecticut or Texas or Rhode Island or Massachusetts
$118k-$261k/yr RemoteFull Time
CVS Health
CVS HealthNYSE: CVS: Provides retail pharmacy, health insurance, and pharmacy benefit management services.
7+ YOE2+ Mgmt7+ years in enterprise security and security program leadership; experience with cloud-native architectures, application security, vulnerability management, SAST/SCA/SBOM, developer enablement, and security automation.
AWS, Azure, GCP, Kubernetes, SAST, SCA, CVA, SBOM, CI/CD, Infrastructure-as-Code (IaC), JFrog, Snyk, Veracode, Wiz, GitGuardian, Prisma Cloud, Claude, Claude Code, GitHub Copilot, Microsoft Copilot
3mo
Save
Mark Applied
Hide
Staff Application Security Engineer
Boston or New York
$234k-$300k/yr HybridFull Time
Datadog
DatadogNASDAQ: DDOG: Observability and security platform for cloud applications and infrastructure.
Software engineering background with hands-on code review; knowledge of OWASP Top 10, SAST/DAST, API security; able to mentor engineers and define secure-by-default solutions.
Go, Python, Rust, OWASP, SAST, DAST, API security, APM, CI/CD
5d
Save
Mark Applied
Hide
Senior Associate, Application Security, DevSecOps
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yr OnsiteFull Time
KPMG
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Java, C#, JavaScript, Python, SQL, CI/CD, SAST, DAST, Azure, OWASP
3w
Save
Mark Applied
Hide
Security Engineer — Application Security & Identity
Boston or Carmel or Chicago or Lambertville or New York City or San Francisco or United States
$60k-$80k/yr HybridFull Time
Real Chemistry
Real Chemistry: Provides marketing and communication services for healthcare companies.
5+ YOE5+ years cloud security experience (3+ in high-growth acceptable), including 2 years focused on application security; hands-on with AWS IAM, SAML/OIDC, GitHub security tooling, threat modeling, penetration testing, and familiarity with SOC 2/GDPR/HIPAA-adjacent controls.
AWS, AWS IAM, Microsoft Entra ID, SAML, OIDC, GitHub, GitHub OIDC, GitHub Advanced Security, CodeQL, SAST, Dependabot, Secret scanning, Semgrep, Snyk, Trivy, ECR scanning, OPA, Sentinel, tfsec, SIEM
1mo
Save
Mark Applied
Hide
Workday Application Security & Controls Manager
Atlanta or Tampa or Charlotte or Austin or Chicago or Washington or Dallas or Los Angeles or Boston or Florham Park or New York or San Francisco or California or Philadelphia or Houston
$99k-$232k/yr OnsiteFull Time
PwC
PwC: Providing audit, tax, and management consulting services to businesses.
4+ YOEBachelor's degree, 4+ years of experience, strong Workday application security and compliance skills, analytical thinking, leadership and mentoring experience; SAP experience noted as a specialism.
Workday, SAP
3d
Save
Mark Applied
Hide
Senior Manager, Application Security
Irving or Chicago or Boston
$113k-$210k/yr HybridFull Time
Publicis Groupe
Publicis GroupeEuronext Paris: PUB: Global communications, advertising, and digital transformation holding.
10+ YOEBS/MS in CS or similar,10+ years experience,software development and CI/CD experience,SAST/DAST/MAST/RAST/IAST and vulnerability management,OWASP/CWE knowledge,cloud and auth expertise,threat modeling and cryptography.
SAST, DAST, MAST, RAST, IAST, OWASP Top 10, CWE 25, WAF
3w
Save
Mark Applied
Hide
Principal Security Architect, Product & Application
Cambridge, Massachusetts, United States
OnsiteFull Time
Cambridge Mobile Telematics
Cambridge Mobile Telematics: Providing telematics and behavioral analytics for safer driving and insurance.
7+ YOE7+ years security experience with deep application/product security architecture expertise; strong knowledge of secure SDLC, threat modeling, OWASP, API/mobile security, AI/LLM security; excellent communication skills.
OWASP, LLM, DriveWell Fusion
1w
Save
Mark Applied
Hide
Fire and Security Application Engineer
West Bridgewater, Massachusetts, United States
$80k/yr FieldFull Time
Sugino Corp
Sugino Corp: Manufacturer of precision industrial cleaning and machining equipment.
Provide field technical support for fire, security, and communications systems including programming, commissioning, troubleshooting, and maintaining manufacturer software; obtain required Massachusetts licensures; work in customer sites using diagnostic tools and laptop.
2mo
Save
Mark Applied
Hide
Information Security Architect
Lowell, Massachusetts, United States
$83k-$136k/yr OnsiteFull Time
MACOM
MACOMNASDAQ: MTSI: Designs and manufactures semiconductor products for communications infrastructure.
Proven background in security engineering or architecture across network, cloud, and application security; strong writing and cloud security design skills; ability to translate security concepts to non-security stakeholders; U.S. Persons due to ITAR requirements.
Azure, AWS, Zero Trust, Cloud security
2mo
Save
Mark Applied
Hide
Senior AI Application Developer
Boston, Massachusetts, United States
$118k-$160k/yr OnsiteFull Time
Beth Israel Lahey Health
Beth Israel Lahey Health: Integrated regional healthcare provider operating hospitals and clinical centers.
3+ YOEDesign, develop, and maintain AI-enabled applications; lead cloud-native, AI-driven solutions; mentor peers; ensure secure, scalable software; 5+ yrs exp; 3–5 yrs dev; 1+ yrs technical leadership.
AWS, Azure, GCP, Java, .NET, APIs, Microservices, CI/CD, Cloud computing, Security
3mo
Save
Mark Applied
Hide
Software Application Specialist
Illinois or Kentucky or North Carolina or Washington or Massachusetts or Georgia or Pennsylvania or Virginia or Alabama or Oklahoma or Florida or New York or Arkansas or South Carolina or Texas
$60k-$80k/yr RemoteFull Time
Motorola Solutions
Motorola SolutionsNYSE: MSI: Provides mission-critical communications and public safety technology.
3+ YOE3+ years in Public Safety, Business Analysis, Field Service, CAD, Record Management Systems, or Jail Applications; US work authorization; ability to obtain government background clearance; CJIS security considerations; 25-50% travel.
Windows, SQL Server Reporting Services (SSRS), XML, Google Docs/Sheets
1mo
Save
Mark Applied
Hide
Lead Application Administrator, Public Safety Applications
Rhode Island or California or Colorado or Connecticut or Florida or Maryland or Massachusetts or New York or New Hampshire or New Jersey or North Carolina or District of Columbia
RemoteFull Time
Brown University
Brown University: Private research university offering undergraduate and graduate degree programs.
5+ YOE5+ years enterprise application support/administration, 1–2 years lead or supervisory experience, experience with public safety/security applications, SQL/SSRS, Active Directory, documentation and end-user training; CJIS and criminal background checks required.
CCure 9000, CCURE9000, Genetec Security Center, Genetec, Zetron Communication Solution, IMC, NICE 911 Voice & Radio Recording Suite, NICE 911 Recording Suite, RILETS (Rhode Island Law Enforcement Telecommunications System), SQL, SSRS (SQL Server Reporting Services), Active Directory, Group Policy, Wowza Media Service, TheoPlayer Cloud, Google Suite, Microsoft Excel, Word, Microsoft Office, TCP/IP
4d
Save
Mark Applied
Hide
Senior Security Engineer, Corporate Services Security
Boston or Seattle
$178k-$227k/yr OnsiteFull Time
Amazon
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
5+ YOE5+ years identifying security issues and developing mitigations, 4+ years troubleshooting and scripting, experience with application security, threat modeling, code review, and mentoring; strong communication skills.
AWS
1mo
Save
Mark Applied
Hide
Security Officer
Revere, Massachusetts, United States
$22/hr OnsitePart Time
Tarian Group
Tarian Group: Provider of security guarding, technology, and risk solutions.
High school diploma/GED, able to obtain applicable security licenses/certifications, capable of standing/walking full shifts, valid vision, able to lift 25+ lbs, and comfortable working public-facing security duties.
metal detecting devices