105 product security engineer jobs at 59 companies in Needham, MA

1mo
Save
Mark Applied
Hide
Senior Product Security Engineer
Boston, Massachusetts, United States
HybridFull Time
Seven AI: Provides autonomous AI agents for enterprise security operations.
6+ YOE6+ years in software/security engineering; strong secure application/system design knowledge; production coding in at least two of Python, TypeScript, or Rust; SAST/SCA/CSPM tooling experience; threat modeling and developer-tooling experience.
Python, TypeScript, Rust, SAST, SCA, CSPM, CI/CD, AWS, GCP, Azure
1mo
Save
Mark Applied
Hide
Staff Product Security Engineer
Boston or Seattle or San Francisco
OnsiteFull Time
DataRobot
DataRobot: Provides an enterprise platform for building and governing AI.
8+ YOEMust be a U.S. citizen with 8+ years in information security/product security, federal compliance (FedRAMP/DoD) experience, proficiency with Python or Go, container/Kubernetes security knowledge, and strong communication skills.
Python, Go, Semgrep, Trivy, Burp Suite, Kubernetes
4w
Save
Mark Applied
Hide
Product Security Engineer, Programs
Quincy, Massachusetts, United States
$156k-$253k/yr OnsiteFull Time
Anduril Industries
Anduril Industries: Defense technology building autonomous military hardware and software.
Experience securing firmware, embedded and Linux systems; proficiency in C/C++, Golang, Rust or Python; strong security architecture, reverse engineering, and communication skills; eligible for U.S. Top Secret clearance.
C/C++, Golang, Rust, Python, Linux, Lattice OS
1d
Save
Mark Applied
Hide
Product Security Engineer - QRA
Foster City or Seattle or San Diego or Boston
$191k-$271k/yr HybridFull Time
Zoox
ZooxNASDAQ: AMZN: Developing autonomous robotaxis for urban ride-hailing services.
5+ YOEMaster’s degree in computer science or related engineering, 5+ years’ experience, systems engineering and cybersecurity expertise, quantitative risk assessment, embedded-system security analysis, and technical writing.
EPSS, Monte Carlo simulations, ISO 21434, UNECE R155, NIST CSF, SOC2 Type2, UDS, JTAG, CAN/LIN, I2C, SPI, AI/LLM toolchains
2mo
Save
Mark Applied
Hide
Sr. Product Security Engineer
Mounds View or Newton
$132k-$198k/yr OnsiteFull Time
Medtronic
MedtronicNYSE: MDT: Developing and manufacturing medical technologies and therapies globally.
4+ YOEBachelor's with 4+ years; or Master's with 2+ years; or PhD with 0 years in relevant field. Security experience and product security focus preferred.
3w
Save
Mark Applied
Hide
Product Security Engineer
Boston, Massachusetts, United States
OnsiteFull Time
Sea Machines Robotics
Sea Machines Robotics: Autonomous control and navigation systems for marine vessels.
3+ YOE3+ years product security experience with strong networking, AWS, SAST/SCA, CI/CD integration, observability, incident response, and secure development practices.
Tailscale, SonarQube, Datadog, Jenkins, AWS, Python, Java, C++, Linux, Windows
1w
Save
Mark Applied
Hide
Product Security Engineer
Boston, Massachusetts, United States
$135k-$175k/yr HybridFull Time
KKR
KKRNYSE: KKR: Global investment firm providing alternative asset management and insurance.
Bachelor's degree and proven application security experience; conduct assessments and penetration tests, secure SDLC, cloud and DevSecOps knowledge, familiarity with OWASP, IDS/IPS, NAC, and security tooling.
firewalls, VPN, IDS/IPS, NAC, OWASP Top Ten, CI/CD
4d
Save
Mark Applied
Hide
Director, Product Security
Raynham or West Chester or Palm Beach Gardens or Warsaw or Raritan or Pune
$150k-$259k/yr HybridFull Time
Johnson & Johnson
Johnson & JohnsonNYSE: JNJ: Provides pharmaceutical products and medical technology healthcare solutions.
10+ YOEBachelor's in CS/Engineering/InfoSec required; 10+ years product security/cybersecurity leadership; experience securing connected products in regulated industries; knowledge of secure development, vulnerability management, and regulatory standards; executive communication skills.
2mo
Save
Mark Applied
Hide
Senior Product Security Engineer
Dublin or Boston or United States
$218k-$235k/yr RemoteFull Time
Tines
Tines: No-code workflow automation for security and IT teams.
8+ YOE8+ years in product/application security, cloud-native security (AWS preferred), experience with AI/LLM-augmented tooling, vulnerability management, CI/CD security, SAST/DAST/SCA, incident response, and strong communication skills.
AWS, Docker, Kubernetes, Ruby, TypeScript, Rust, SAST, DAST, SCA, CI/CD, Tines, LLM, MITRE ATLAS, OWASP LLM Top 10
1w
Save
Mark Applied
Hide
Senior Product Security Engineer - Audio Tech
Framingham, Massachusetts, United States
$124k-$170k/yr OnsiteFull Time
Bose
Bose: Designs and manufactures premium audio equipment and speakers.
6+ YOE6+ years firmware/security experience, Bachelor's in Computer Science or equivalent, strong C/C++ and Linux embedded experience, cryptography and secure boot/firmware protection expertise, ARM TrustZone and certificate/key management knowledge.
ARM TrustZone, Linux, C, C++, X.509, JWK, HSMs, EU CRA, ETSI EN 303 645, NIST, ISO 27001, IEC 62443
2mo
Save
Mark Applied
Hide
Product Security Engineer
Andover, Massachusetts, United States
$100k-$125k/yr OnsiteFull Time
Aras
Aras: Develops low-code software for industrial product lifecycle management.
3+ YOEOperate a SOC for Azure environments: monitor, detect, investigate, and respond to threats; perform forensic investigations; develop detections and automation; experience with Azure GovCloud/GCC High, SIEM, Python/PowerShell, and relevant Azure security certifications.
Azure, Azure GovCloud, GCC High, SIEM, Python, PowerShell, Managed Detection and Response (MDR), AI/ML, LLM, Aras SaaS
1w
Save
Mark Applied
Hide
Director of Product Security
Boston, Massachusetts, United States
$220k-$270k/yr OnsiteFull Time
WHOOP
WHOOP: Wearable technology for personalized health and performance tracking.
Leadership experience scaling security engineering teams, deep product security expertise, developer security tooling experience, strong technical software background, and excellent communication and influence skills.
AWS, SAST, SCA, CI/CD
3w
Save
Mark Applied
Hide
Product Security Engineer / Architect – Email Security
Boston or Berwyn or Princeton or Clifton
$120k-$203k/yr HybridFull Time
State Street
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
8+ YOE8+ years in cybersecurity with 5+ years hands-on email security; experience with email platforms, email authentication (SPF/DKIM/DMARC), SIEM/SOAR integrations, scripting, and stakeholder communication; relevant security certs preferred.
Microsoft Defender for Office 365, Proofpoint, Abnormal Security, Mimecast, Cisco Secure Email, SPF, DKIM, DMARC, SMTP, SIEM, SOAR
2d
Save
Mark Applied
Hide
Senior / Staff Application Security Engineer
Boston or New York City or Los Angeles or San Francisco
$230k-$330k/yr OnsiteFull Time
Suno
Suno: AI platform for creating full songs from text prompts.
6+ YOE6+ years in security engineering with hands-on application security, secure SDLC tooling, AWS experience, ability to write production code and threat-model AI/LLM surfaces.
AWS, SAST, DAST
2mo
Save
Mark Applied
Hide
Sr. Product Security Engineer
Mounds View or Newton
$132k-$198k/yr OnsiteFull Time
Medtronic
MedtronicNew York Stock Exchange: MDT: Develops and manufactures medical devices and digital health solutions.
4+ YOEBachelor's or Master’s with required years of relevant experience; PhD with 0 years accepted.
NIST, OWASP, IEC 81001-5-1, Threat modeling, Vulnerability assessment
2w
Save
Mark Applied
Hide
Staff Security Engineer, Product Security And Architecture
Boston or New York City
$210k-$234k/yr OnsiteFull Time
Compass
CompassNYSE: COMP: Technology-enabled residential real estate brokerage and agent software platform.
3+ YOEBachelor's or equivalent experience plus 3+ years administering CI/CD, tuning SAST/DAST/SCA, scripting (Python/Bash), secure code reviews in Python/JS/TypeScript/Go/Java, IaC (Terraform), AWS, and AI-assisted security.
CI/CD, SAST, DAST, SCA, Python, Bash, JavaScript, TypeScript, Golang, Java, Terraform, AWS, Artificial Intelligence (AI), OAuth2, OIDC, Web Application Firewall (WAF), API Gateways
1mo
Save
Mark Applied
Hide
Product Security Officer
Bedford, Massachusetts, United States
$160k-$190k/yr OnsiteFull Time
Werfen
Werfen: Develops specialized diagnostic systems and reagents for clinical laboratories.
10+ YOE4+ Mgmt10+ years cybersecurity experience with 4+ years technical leadership; Bachelor's in CS/Computer Engineering/Business or equivalent; cybersecurity certifications preferred; knowledge of secure SDLC, privacy/regulatory standards, and product lifecycle.
Windows, Linux
1d
Save
Mark Applied
Hide
Staff Security Engineer
United States or Massachusetts or Texas or Boston
$170k-$205k/yr RemoteFull Time
Snyk
Snyk: Developer security platform to find and fix software vulnerabilities
8+ YOE8+ years in security engineering, including 4+ in production-scale cloud security; expert AWS, strong GCP, IAM, CSPM/CNAPP, Terraform, Python or Go, Kubernetes security, AI security, enterprise identity, and cloud detection expertise.
AWS, GCP, Terraform, Python, Go, Kubernetes, RBAC, MCP servers, LLM APIs, SIEM, WAF, DDoS
4w
Save
Mark Applied
Hide
Senior Product Cybersecurity Engineer
Danvers, Massachusetts, United States
OnsiteFull Time
Boston Imaging
Boston ImagingKorea Exchange: 005930: Sells and supports Samsung medical imaging and ultrasound equipment.
5+ YOEBachelor's degree and 5+ years security engineering experience; medical device cybersecurity, RMF, vulnerability management, standards knowledge, networking and Windows/Linux proficiency.
Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Microsoft Outlook, Windows, Linux, DoD Risk Management Framework (RMF), NIST cybersecurity frameworks, FIPS, SBOM, SAST, DAST, ANSI/AAMI TIR57, UL 2900, ISO 14971, IEC 62304, IEC 81001-5-1, IEC/TR 80001-2-2
2w
Save
Mark Applied
Hide
Product Cybersecurity Engineer (Medical Devices)
Wilmington, Massachusetts, United States
$135k-$202k/yr OnsiteFull Time
Analog Devices
Analog DevicesNASDAQ: ADI: Designs and manufactures semiconductors for signal processing and power management.
7+ YOE7+ years cybersecurity/product security experience supporting FDA-regulated medical devices or SaMD, Master's degree (Ph.D preferred), threat modeling, vulnerability management, and familiarity with FDA guidance and cybersecurity frameworks.
STRIDE, NIST Cybersecurity Framework, ISO 14971, IEC 62304, AAMI TIR57, OWASP, SBOM