105 product security engineer jobs at 59 companies in Needham, MA
1mo
Save
Mark Applied
Hide
1mo
Senior Product Security Engineer
Boston, Massachusetts, United States
HybridFull Time
Seven AI: Provides autonomous AI agents for enterprise security operations.
6+ YOE6+ years in software/security engineering; strong secure application/system design knowledge; production coding in at least two of Python, TypeScript, or Rust; SAST/SCA/CSPM tooling experience; threat modeling and developer-tooling experience.
DataRobot: Provides an enterprise platform for building and governing AI.
8+ YOEMust be a U.S. citizen with 8+ years in information security/product security, federal compliance (FedRAMP/DoD) experience, proficiency with Python or Go, container/Kubernetes security knowledge, and strong communication skills.
Anduril Industries: Defense technology building autonomous military hardware and software.
Experience securing firmware, embedded and Linux systems; proficiency in C/C++, Golang, Rust or Python; strong security architecture, reverse engineering, and communication skills; eligible for U.S. Top Secret clearance.
ZooxNASDAQ: AMZN: Developing autonomous robotaxis for urban ride-hailing services.
5+ YOEMaster’s degree in computer science or related engineering, 5+ years’ experience, systems engineering and cybersecurity expertise, quantitative risk assessment, embedded-system security analysis, and technical writing.
EPSS, Monte Carlo simulations, ISO 21434, UNECE R155, NIST CSF, SOC2 Type2, UDS, JTAG, CAN/LIN, I2C, SPI, AI/LLM toolchains
MedtronicNYSE: MDT: Developing and manufacturing medical technologies and therapies globally.
4+ YOEBachelor's with 4+ years; or Master's with 2+ years; or PhD with 0 years in relevant field. Security experience and product security focus preferred.
Sea Machines Robotics: Autonomous control and navigation systems for marine vessels.
3+ YOE3+ years product security experience with strong networking, AWS, SAST/SCA, CI/CD integration, observability, incident response, and secure development practices.
Tailscale, SonarQube, Datadog, Jenkins, AWS, Python, Java, C++, Linux, Windows
Raynham or West Chester or Palm Beach Gardens or Warsaw or Raritan or Pune
$150k-$259k/yrHybridFull Time
Johnson & JohnsonNYSE: JNJ: Provides pharmaceutical products and medical technology healthcare solutions.
10+ YOEBachelor's in CS/Engineering/InfoSec required; 10+ years product security/cybersecurity leadership; experience securing connected products in regulated industries; knowledge of secure development, vulnerability management, and regulatory standards; executive communication skills.
Tines: No-code workflow automation for security and IT teams.
8+ YOE8+ years in product/application security, cloud-native security (AWS preferred), experience with AI/LLM-augmented tooling, vulnerability management, CI/CD security, SAST/DAST/SCA, incident response, and strong communication skills.
Bose: Designs and manufactures premium audio equipment and speakers.
6+ YOE6+ years firmware/security experience, Bachelor's in Computer Science or equivalent, strong C/C++ and Linux embedded experience, cryptography and secure boot/firmware protection expertise, ARM TrustZone and certificate/key management knowledge.
ARM TrustZone, Linux, C, C++, X.509, JWK, HSMs, EU CRA, ETSI EN 303 645, NIST, ISO 27001, IEC 62443
Aras: Develops low-code software for industrial product lifecycle management.
3+ YOEOperate a SOC for Azure environments: monitor, detect, investigate, and respond to threats; perform forensic investigations; develop detections and automation; experience with Azure GovCloud/GCC High, SIEM, Python/PowerShell, and relevant Azure security certifications.
Azure, Azure GovCloud, GCC High, SIEM, Python, PowerShell, Managed Detection and Response (MDR), AI/ML, LLM, Aras SaaS
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
8+ YOE8+ years in cybersecurity with 5+ years hands-on email security; experience with email platforms, email authentication (SPF/DKIM/DMARC), SIEM/SOAR integrations, scripting, and stakeholder communication; relevant security certs preferred.
Microsoft Defender for Office 365, Proofpoint, Abnormal Security, Mimecast, Cisco Secure Email, SPF, DKIM, DMARC, SMTP, SIEM, SOAR
Boston or New York City or Los Angeles or San Francisco
$230k-$330k/yrOnsiteFull Time
Suno: AI platform for creating full songs from text prompts.
6+ YOE6+ years in security engineering with hands-on application security, secure SDLC tooling, AWS experience, ability to write production code and threat-model AI/LLM surfaces.
Staff Security Engineer, Product Security And Architecture
Boston or New York City
$210k-$234k/yrOnsiteFull Time
CompassNYSE: COMP: Technology-enabled residential real estate brokerage and agent software platform.
3+ YOEBachelor's or equivalent experience plus 3+ years administering CI/CD, tuning SAST/DAST/SCA, scripting (Python/Bash), secure code reviews in Python/JS/TypeScript/Go/Java, IaC (Terraform), AWS, and AI-assisted security.
Werfen: Develops specialized diagnostic systems and reagents for clinical laboratories.
10+ YOE4+ Mgmt10+ years cybersecurity experience with 4+ years technical leadership; Bachelor's in CS/Computer Engineering/Business or equivalent; cybersecurity certifications preferred; knowledge of secure SDLC, privacy/regulatory standards, and product lifecycle.
Snyk: Developer security platform to find and fix software vulnerabilities
8+ YOE8+ years in security engineering, including 4+ in production-scale cloud security; expert AWS, strong GCP, IAM, CSPM/CNAPP, Terraform, Python or Go, Kubernetes security, AI security, enterprise identity, and cloud detection expertise.
Boston ImagingKorea Exchange: 005930: Sells and supports Samsung medical imaging and ultrasound equipment.
5+ YOEBachelor's degree and 5+ years security engineering experience; medical device cybersecurity, RMF, vulnerability management, standards knowledge, networking and Windows/Linux proficiency.
Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Microsoft Outlook, Windows, Linux, DoD Risk Management Framework (RMF), NIST cybersecurity frameworks, FIPS, SBOM, SAST, DAST, ANSI/AAMI TIR57, UL 2900, ISO 14971, IEC 62304, IEC 81001-5-1, IEC/TR 80001-2-2
Analog DevicesNASDAQ: ADI: Designs and manufactures semiconductors for signal processing and power management.
7+ YOE7+ years cybersecurity/product security experience supporting FDA-regulated medical devices or SaMD, Master's degree (Ph.D preferred), threat modeling, vulnerability management, and familiarity with FDA guidance and cybersecurity frameworks.