131 product security engineer jobs at 74 companies in Weymouth, MA
2mo
Save
Mark Applied
Hide
2mo
Senior Product Security Engineer
Boston, Massachusetts, United States
HybridFull Time
7AI: The Agentic Security Platform.
6+ YOE6+ years in software/security engineering; strong secure application/system design knowledge; production coding in at least two of Python, TypeScript, or Rust; SAST/SCA/CSPM tooling experience; threat modeling and developer-tooling experience.
DataRobot: Private enterprise AI platform helping global organizations build, operate, and govern predictive and generative AI.
8+ YOEMust be a U.S. citizen with 8+ years in information security/product security, federal compliance (FedRAMP/DoD) experience, proficiency with Python or Go, container/Kubernetes security knowledge, and strong communication skills.
Anduril Industries: Defense technology developing AI-powered autonomous military systems.
Experience securing firmware, embedded and Linux systems; proficiency in C/C++, Golang, Rust or Python; strong security architecture, reverse engineering, and communication skills; eligible for U.S. Top Secret clearance.
Zoox: Autonomous mobility developing a fully electric robotaxi fleet.
5+ YOEMaster’s degree in computer science or related engineering, 5+ years’ experience, systems engineering and cybersecurity expertise, quantitative risk assessment, embedded-system security analysis, and technical writing.
EPSS, Monte Carlo simulations, ISO 21434, UNECE R155, NIST CSF, SOC2 Type2, UDS, JTAG, CAN/LIN, I2C, SPI, AI/LLM toolchains
Affera, Inc.: Private cardiac medical-device developing mapping, navigation, and ablation technologies for patients with cardiac arrhythmias.
4+ YOEBachelor's with 4+ years; or Master's with 2+ years; or PhD with 0 years in relevant field. Security experience and product security focus preferred.
Sea Machines Robotics: Autonomous maritime technology building vessel software and systems for naval and commercial operators.
3+ YOE3+ years product security experience with strong networking, AWS, SAST/SCA, CI/CD integration, observability, incident response, and secure development practices.
Tailscale, SonarQube, Datadog, Jenkins, AWS, Python, Java, C++, Linux, Windows
DigitalOceanNYSE: DOCN: The AI-Native Cloud purpose-built for inference and agentic workloads.
3+ YOEExperience leading security vulnerability remediation and cross-team efforts; expertise in secure architecture, threat modeling, OWASP Top Ten, modern development concepts, and security communication. Three-plus years preferred.
OWASP Top Ten, Go, JavaScript, Rust, C, LinkedIn Learning
Bose: Private American premium audio manufacturer serving home, automotive, professional, aviation, and consumer markets.
6+ YOE6+ years firmware/security experience, Bachelor's in Computer Science or equivalent, strong C/C++ and Linux embedded experience, cryptography and secure boot/firmware protection expertise, ARM TrustZone and certificate/key management knowledge.
ARM TrustZone, Linux, C, C++, X.509, JWK, HSMs, EU CRA, ETSI EN 303 645, NIST, ISO 27001, IEC 62443
Aras: Aras is a privately held software providing low-code product lifecycle management and digital-thread solutions to manufacturers.
3+ YOEOperate a SOC for Azure environments: monitor, detect, investigate, and respond to threats; perform forensic investigations; develop detections and automation; experience with Azure GovCloud/GCC High, SIEM, Python/PowerShell, and relevant Azure security certifications.
Azure, Azure GovCloud, GCC High, SIEM, Python, PowerShell, Managed Detection and Response (MDR), AI/ML, LLM, Aras SaaS
Boston or Berwyn or Princeton or Clifton or Austin
$120k-$203k/yrHybridFull Time
State StreetNYSE: STT: Global financial services and bank holding.
8+ YOERequires 8+ years in cybersecurity, security engineering, or architecture; 5+ years with email security; enterprise architecture, integrations, automation, scripting, and communication skills. Bachelor's degree or equivalent preferred.
Microsoft Defender for Office 365, Proofpoint, Abnormal Security, Mimecast, Cisco Secure Email, SPF, DKIM, DMARC, SMTP, SIEM, SOAR
5+ YOERequires 5–8 years securing or operating cloud infrastructure, deep GCP and working AWS knowledge, GCP IAM, Kubernetes/GKE, Terraform, CI/CD, GitOps, DevSecOps, threat modeling, and AI coding-agent experience.
GCP, AWS, Claude Code, Terraform, Kubernetes, MCP, GKE, Artifact Registry, Binary Authorization, CI/CD, GitOps, EKS, CSPM, IAM, OWASP Top 10
Boston or New York City or Los Angeles or San Francisco
$230k-$330k/yrOnsiteFull Time
Suno: Private AI music platform that helps people create complete songs from text prompts.
6+ YOE6+ years in security engineering with hands-on application security, secure SDLC tooling, AWS experience, ability to write production code and threat-model AI/LLM surfaces.
Staff Security Engineer, Product Security And Architecture
Boston or New York City
$210k-$234k/yrOnsiteFull Time
Compass International Holdings: A technology building a large residential real estate software platform to support agents and property transactions.
3+ YOEBachelor's or equivalent experience plus 3+ years administering CI/CD, tuning SAST/DAST/SCA, scripting (Python/Bash), secure code reviews in Python/JS/TypeScript/Go/Java, IaC (Terraform), AWS, and AI-assisted security.
Werfen: Family-owned specialized diagnostics manufacturer and distributor serving hospitals and independent clinical laboratories worldwide.
10+ YOE4+ Mgmt10+ years cybersecurity experience with 4+ years technical leadership; Bachelor's in CS/Computer Engineering/Business or equivalent; cybersecurity certifications preferred; knowledge of secure SDLC, privacy/regulatory standards, and product lifecycle.
Samsung HME America: U.S. medical imaging division providing ultrasound, digital radiography, and mobile CT systems to healthcare providers.
5+ YOEBachelor's degree and 5+ years security engineering experience; medical device cybersecurity, RMF, vulnerability management, standards knowledge, networking and Windows/Linux proficiency.
Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Microsoft Outlook, Windows, Linux, DoD Risk Management Framework (RMF), NIST cybersecurity frameworks, FIPS, SBOM, SAST, DAST, ANSI/AAMI TIR57, UL 2900, ISO 14971, IEC 62304, IEC 81001-5-1, IEC/TR 80001-2-2
Analog DevicesNASDAQ: ADI: Global leader in analog and digital semiconductor technology.
7+ YOE7+ years cybersecurity/product security experience supporting FDA-regulated medical devices or SaMD, Master's degree (Ph.D preferred), threat modeling, vulnerability management, and familiarity with FDA guidance and cybersecurity frameworks.
Principal Product Configuration Management Engineer
Woburn, Massachusetts, United States
$108k-$205k/yrOnsiteFull Time
RTXNYSE: RTX: Aerospace and defense providing advanced technology solutions.
8+ YOEBS/BA in STEM and ~8+ years engineering experience; experience with version control, change management, DevSecOps and CI/CD tools; automation/shell scripting on Linux/Unix/Windows; ability to obtain interim Secret security clearance; U.S. citizenship required.