Product Security Engineer Jobs in Massachusetts
Product Security Engineer jobs in Massachusetts are in high demand, concentrated in the life sciences, financial technology, and defense technology sectors, with openings at every level from early-career to principal engineer. The heaviest hiring activity is in Boston, Cambridge, and Waltham, where established employers like Raytheon Technologies, Fidelity Investments, and MathWorks maintain large security engineering teams. The most sought-after specialties across Massachusetts right now are application security, embedded and IoT product security, and secure software development lifecycle integration. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 17+ Product Security Engineer jobs
Sr Product Security Engineer
- Business Unit: Draeger Medical Systems, Inc., Job-ID: 1352
- Location: Andover
- Function: R&D
- Work Location: Hybrid
- Employment Type: Permanent
The Job Responsibilities
We are hiring a Senior Product Security Engineer to work hybrid, 3 days a week, in our Andover, MA office.
The Senior Product Security engineer helps secure patient monitoring medical device solutions and connected health software throughout the product lifecycle. This role partners directly with systems, software, and test engineering teams to build security into product architectures, generate objective evidence for regulatory submissions, and maintain product cyber resilience after release.
The selected candidate will support the integration of advanced cybersecurity controls, identify and mitigate vulnerabilities, and contribute to initiatives that improve cyber resilience across the product lifecycle. This person will serve as a technical subject matter expert, collaborate across functions, and help drive long-term improvements in product security posture.
This is a product security engineering role; it is not focused on enterprise IT security.
Main Responsibilities:
- Product Security - Implement security requirements across the medical device development lifecycle by partnering with cross-functional teams and applying best practices from design through deployment.
- Perform threat modeling, attack-surface analysis, and product cybersecurity risk assessments. Define security requirements and risk controls, and integrate cybersecurity risks with product safety risk management.
- Support the design and delivery of secure medical devices through implementation of capabilities such as secure boot, secure communications, data protection, software update mechanisms, system integration protections, and access controls.
- Plan and review cybersecurity testing, including vulnerability scanning, software composition analysis, fuzzing, and penetration testing. Drive remediation and confirm closure through retesting.
- Maintain product SBOMs and assess reported vulnerabilities. Determine product impact, prioritize remediation, and support coordinated vulnerability disclosure and postmarket monitoring.
- Prepare and review cybersecurity documentation for FDA and other regulatory submissions. Respond to regulator and customer cybersecurity questions.
- Serve as a technical subject matter expert. Work with engineering, test, quality, regulatory, service, legal, and program management teams to resolve product security risks.
- Improve product security processes, tools, and reusable engineering practices based on emerging threats, standards, and regulatory expectations.
Your Qualifications
Education
Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, Electrical Engineering, Software Engineering, or a related technical field, or equivalent practical experience.
Required Qualifications
- 3 to 6 years of experience in product security, application security, embedded security, or security engineering in a product development environment
- Experience with threat modeling, cybersecurity risk assessment, secure design, vulnerability analysis, and security testing.
- Working knowledge of embedded, Linux, Windows, real-time, or network-connected systems, including common network security principles and protocols.
- Understanding of secure development lifecycle and security-by-design practices.
- Ability to communicate technical risks clearly, develop traceable documentation, and support multiple assignments in a cross-functional environment.
Preferred Qualifications
- Experience developing or securing medical devices, safety-critical products, or products in another regulated industry.
- Experience supporting FDA and other global medical device cybersecurity submissions and responding to regulatory questions or deficiencies.
- Familiarity with IEC 81001-5-1, AAMI TIR57, applicable FDA cybersecurity requirements and guidance, NIST publications.
- Hands-on experience with secure product implementation, security testing, SBOM or software composition analysis tools, and vulnerability remediation.
- Programming or scripting experience and relevant cybersecurity certifications such as CSSLP, GPEN, or Security+.
The targeted pay range for this position is typically between $115,000 - $127,000. We note that the base pay offered is based on market location and may vary further depending on individualized factors for job candidates, such as job-related knowledge, skills, experience, and other objective business considerations. This position is eligible for the following additional compensation: annual pay.
Dräger Benefits
- Medical, dental, and vision insurance
- Life, short- and long-term disability coverage
- 401(k) with company match
- Over 4 weeks of paid time off, plus holidays and parental leave
- Flexible spending accounts and employee assistance program
Who we are
Interested?
Please, apply directly through our career portal.
We look forward to receiving your application.
Sr Product Security Engineer
- Business Unit: Draeger Medical Systems, Inc., Job-ID: 1352
- Location: Andover
- Function: R&D
- Work Location: Hybrid
- Employment Type: Permanent
The Job Responsibilities
We are hiring a Senior Product Security Engineer to work hybrid, 3 days a week, in our Andover, MA office.
The Senior Product Security engineer helps secure patient monitoring medical device solutions and connected health software throughout the product lifecycle. This role partners directly with systems, software, and test engineering teams to build security into product architectures, generate objective evidence for regulatory submissions, and maintain product cyber resilience after release.
The selected candidate will support the integration of advanced cybersecurity controls, identify and mitigate vulnerabilities, and contribute to initiatives that improve cyber resilience across the product lifecycle. This person will serve as a technical subject matter expert, collaborate across functions, and help drive long-term improvements in product security posture.
This is a product security engineering role; it is not focused on enterprise IT security.
Main Responsibilities:
- Product Security - Implement security requirements across the medical device development lifecycle by partnering with cross-functional teams and applying best practices from design through deployment.
- Perform threat modeling, attack-surface analysis, and product cybersecurity risk assessments. Define security requirements and risk controls, and integrate cybersecurity risks with product safety risk management.
- Support the design and delivery of secure medical devices through implementation of capabilities such as secure boot, secure communications, data protection, software update mechanisms, system integration protections, and access controls.
- Plan and review cybersecurity testing, including vulnerability scanning, software composition analysis, fuzzing, and penetration testing. Drive remediation and confirm closure through retesting.
- Maintain product SBOMs and assess reported vulnerabilities. Determine product impact, prioritize remediation, and support coordinated vulnerability disclosure and postmarket monitoring.
- Prepare and review cybersecurity documentation for FDA and other regulatory submissions. Respond to regulator and customer cybersecurity questions.
- Serve as a technical subject matter expert. Work with engineering, test, quality, regulatory, service, legal, and program management teams to resolve product security risks.
- Improve product security processes, tools, and reusable engineering practices based on emerging threats, standards, and regulatory expectations.
Your Qualifications
Education
Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, Electrical Engineering, Software Engineering, or a related technical field, or equivalent practical experience.
Required Qualifications
- 3 to 6 years of experience in product security, application security, embedded security, or security engineering in a product development environment
- Experience with threat modeling, cybersecurity risk assessment, secure design, vulnerability analysis, and security testing.
- Working knowledge of embedded, Linux, Windows, real-time, or network-connected systems, including common network security principles and protocols.
- Understanding of secure development lifecycle and security-by-design practices.
- Ability to communicate technical risks clearly, develop traceable documentation, and support multiple assignments in a cross-functional environment.
Preferred Qualifications
- Experience developing or securing medical devices, safety-critical products, or products in another regulated industry.
- Experience supporting FDA and other global medical device cybersecurity submissions and responding to regulatory questions or deficiencies.
- Familiarity with IEC 81001-5-1, AAMI TIR57, applicable FDA cybersecurity requirements and guidance, NIST publications.
- Hands-on experience with secure product implementation, security testing, SBOM or software composition analysis tools, and vulnerability remediation.
- Programming or scripting experience and relevant cybersecurity certifications such as CSSLP, GPEN, or Security+.
The targeted pay range for this position is typically between $115,000 - $127,000. We note that the base pay offered is based on market location and may vary further depending on individualized factors for job candidates, such as job-related knowledge, skills, experience, and other objective business considerations. This position is eligible for the following additional compensation: annual pay.
Dräger Benefits
- Medical, dental, and vision insurance
- Life, short- and long-term disability coverage
- 401(k) with company match
- Over 4 weeks of paid time off, plus holidays and parental leave
- Flexible spending accounts and employee assistance program
Who we are
Interested?
Please, apply directly through our career portal.
We look forward to receiving your application.
See All 17 Product Security Engineer Jobs in Massachusetts
Find roles in Massachusetts that match your experience and apply in just a few clicks.
Find JobsProduct Security Engineer Jobs by City in Massachusetts
Where Massachusetts roles are concentrated, by current openings.
Product Security Engineer Job Market in Massachusetts
A snapshot from current Massachusetts openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Medical Devices
- Technology & Software
- Consulting & Professional Services
What Massachusetts Employers Look For
The qualifications that appear most often in product security engineer jobs across Massachusetts.
- Bachelor's degree in computer science, cybersecurity, or a closely related engineering field
- Hands-on experience with threat modeling, penetration testing, or secure code review
- Proficiency in one or more programming languages such as Python, C, C++, or Java
- Relevant certification such as CISSP, CEH, or OSCP recognized by Massachusetts employers
- Familiarity with security frameworks including NIST, ISO 27001, or IEC 62443 for product environments
- Experience working within agile or DevSecOps pipelines to integrate security into product development
Product Security Engineer Jobs in Massachusetts: Frequently Asked Questions
How do you become a product security engineer in Massachusetts?
A bachelor's degree in computer science, cybersecurity, or electrical engineering is the standard foundation Massachusetts employers expect. Massachusetts does not require a state-issued license specifically for product security engineers, but industry certifications like CISSP or OSCP carry significant weight with Boston-area and Route 128 corridor employers. Building a portfolio of security research or contributing to open-source security tooling is a strong differentiator in the competitive Massachusetts market.
Which companies hire product security engineers in Massachusetts?
Employers hiring product security engineers in Massachusetts right now include Bose, Zappsec, and State Street, based on current listings on Migrate Mate as of September 2026. Massachusetts's concentration of defense contractors, major financial institutions, and medtech companies along the Route 128 corridor means demand is distributed across several distinct industries rather than a single sector.
Which Massachusetts cities have the most product security engineer jobs?
Boston, Tewksbury, and Framingham have the most product security engineer openings in Massachusetts. Boston and Cambridge anchor demand through their dense concentration of fintech firms, biotech companies, and research institutions, while Waltham and Burlington attract roles tied to the defense technology and enterprise software employers that cluster along the Route 128 corridor.
Are there remote product security engineer jobs in Massachusetts?
Yes, and more than most technical fields, because product security engineering work is largely code review, threat modeling, and documentation that translates well to remote environments. About 78% of product security engineer openings tied to Massachusetts are remote or hybrid as of September 2026, reflecting the desk-based nature of most tasks. Roles involving hardware testing or secure lab access tend to require on-site presence.
How can I get hired as a product security engineer in Massachusetts with little or no experience?
The most realistic entry path is moving laterally from a software engineering, IT operations, or systems administration role into security, since Massachusetts employers value hands-on technical context. Companies like Raytheon Technologies and several Cambridge-based biotech firms run structured associate or rotational programs that place candidates without dedicated security backgrounds into product security teams. Building a home lab, earning a CEH or Security+ certification, and completing a bug bounty finding on a public program significantly strengthens an application.
Where can I find and apply to product security engineer jobs in Massachusetts?
You can find and apply to product security engineer jobs in Massachusetts on Migrate Mate, which lists current Massachusetts openings. Find the roles that fit your experience and location, then apply directly to the employer through each listing.
See All 17 Product Security Engineer Jobs in Massachusetts
Find roles in Massachusetts that match your experience and apply in just a few clicks.
Find Jobs