Product Security Engineer Jobs in Massachusetts
Product Security Engineer jobs in Massachusetts are in high demand, concentrated in the life sciences, financial technology, and defense technology sectors, with openings at every level from early-career to principal engineer. The heaviest hiring activity is in Boston, Cambridge, and Waltham, where established employers like Raytheon Technologies, Fidelity Investments, and MathWorks maintain large security engineering teams. The most sought-after specialties across Massachusetts right now are application security, embedded and IoT product security, and secure software development lifecycle integration. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 16+ Product Security Engineer jobs
Senior Manager, Product Security Office
Hybrid On-Site: Walnut Creek, CA; Austin, TX; Troy, MI; Boston, MA; Kanata, Ontario, Canada
Citizenship: USA National or Canada Citizen, without citizenship of another country
ABOUT WIND RIVER
Wind River is a global leader in delivering software for mission-critical intelligent systems. For more than four decades, the company has been an innovator and pioneer, powering billions of systems that require the highest levels of security, safety, and reliability.
Wind River helps customers across automotive, aerospace, defense, industrial, medical, and telecommunications industries solve complex technology challenges on their journey toward the new intelligent machine economy. The company’s software powers generation after generation of the safest, most secure systems in the world. Examples include playing a key role in NASA space missions such as Artemis I, the James Webb Space Telescope, and multiple Mars rovers. We’ve achieved recent 5G milestones including the world’s first successful 5G data session with Verizon and building one of the largest Open RAN networks in the world with Vodafone.
The company has received industry recognition for its technology innovation and leadership, and for its workplace culture, including global Great Place to Work certification and being named a “Top Workplace” for ten consecutive years. If you want to be part of a unique culture where the lived experience is based on our cultural attributes of growth mindset, customer-focus, and diversity, equity, inclusion & belonging, come join us and help advance the future software defined world.
Role Summary
Wind River Systems is seeking an experienced Secure Software Engineering Professional to lead and manage the Product Security Office to scale trust in our product security to meet increasing business and security technology needs. This position will lead and grow a mature product security team while architecting and mobilizing product security trust initiatives, manage customer product security trust, and lead the product security incident response (PSIRT) and vulnerability management team.
The successful candidate will have experience in software security techniques, broad-based security standards and regulatory experience, and have mature cross-functional leadership, teamwork, and communications capabilities.
Interface & Collaboration
The successful candidate will work and collaborate with customer, product, engineering, and operations teams to ensure high levels of product security trust with a scalable, compliance-driven mindset, across all products.
Your Role
- Manage, Lead, and Grow the Product Security Office and Team
- Architect the product security trust roadmap and scale the compliance framework to meet emerging and future business priorities.
- Empower product security compliance across engineering and aligned to the CTO Office, Product Management, IT, Legal, InfoSec, and SecOps.
- Empower product security champions throughout product software engineering.
- Architect, and lead execution of organization-wide product security assurance software platforms.
- Lead the Product Security Incident Response Team (PSIRT) operations team.
- Manage customer product security trust and compliance.
- Training, mentoring, and supporting development teams to follow secure development values, principles, and practices.
Your Background
Core Competencies & Demonstrated Success
- Experience Leading Software Product Security Team(s).
- Direct experience with product security assurance techniques including Threat Modeling, Security Testing, Vulnerability Management, Software Composition, etc.
- Experience in software engineering models and techniques.
- Experience empowering product security compliance broadly across an organization.
- Broad-based experience with global security regulations, frameworks, and standards.
- Exposure to customer compliance and remediations (Questionnaire’s, Audits, Contracts, etc.)
- Excellent verbal and written, management level and customer communication skills.
- Ability to analyze and think quickly and to resolve conflict.
- Strong communication, interpersonal, and mentoring skills.
- Ability to work effectively across the organization.
- Ability to adapt to a changing environment.
Qualifications
- Bachelor’s degree in Engineering, Computer Science, Information Security, or a related technical field.
- 10+ years of experience in software engineering, program management, governance, compliance, or related leadership roles.
- 5+ years of people management experience leading technical, compliance, or program teams.
- Direct experience mobilizing one or more security standards/certifications/frameworks like FIRST.org, OWASP SAMM, IEC 62443, ISO 21434, NIST 800-218, FIPS 140-3, DISA STIG, Common Criteria, CMMC, Fed Ramp, or similar.
- Broad practical experience with the NIST 800 series of security standards, including 800-53, 800-171, and others.
- Practical experience with one or more threat modeling frameworks such as: TARA, STRIDE, PASTA, ATT&CK, or similar.
- Broad practical experience with secure software testing techniques and tools including: SAST, DAST, Fuzz, Security Feature, and Penetration Testing.
- Working knowledge of vulnerability and incident management coordination: Global Vulnerability Registers, CVSS Scoring, CNA, VINCE, NVD, and similar.
- Experience mobilizing secure software development techniques across an organization.
- Experience using agile techniques and frameworks to deliver secure software.
- Experience leading full-stack software solutions, preferably for product security.
Preferred Qualifications
- Certified security professional (CSSLP, CISM, CISSP, CEH, or similar).
- Experience with the European Union (EU) security regulatory environment including the Cyber Resilience Act (CRA).
- Experience with national security systems and standards (CNSS, etc.).
- Working knowledge of risk management frameworks and risk-based secure software development.
- Experience with AI and Machine learning and their governance and provenance in a secure software development environment.
- Working knowledge of related quality and safety assurance standards such as ASPICE, ISO 26262, DO-178C, or similar.
Additionally, will consider San Diego, Walnut Creek, Boston, MA, Troy, MI or Austin, TX area (brick and mortar location will be leased soon)
SECURITY CLEARANCE REQUIREMENTS
USA National or Canada Citizen without citizenship of another country
Successful candidates must engage in a security clearance process in regard to their citizenship in order to perform fundamental job duties, as per applicable law. In particular, candidates with certain citizenship may not be able to perform such fundamental job duties. Currently, this includes citizens of the following countries: Belarus; Burma; China; Cuba; Iran; North Korea; Syria; Venezuela; Afghanistan; Cambodia; Central African Republic; Cyprus; Democratic Republic of Congo; Ethiopia; Eritrea; Haiti; Iraq; Lebanon; Libya; Russia; Somalia; South Sudan; Sudan; Zimbabwe. The security clearance process may take a significant amount of time to complete, and any offer of employment will be contingent on the candidate's legal ability to perform the fundamental job duties. Wind River is committed to meeting its obligations to candidates under applicable human rights law and privacy law in this regard.
COMPENSATION
The annual base salary range for this role’s listed grade level is currently $200,000 to $240,000 plus bonus for residents in the states of Colorado, New York and New Jersey; and $210,000 to $250,000 plus bonus for residents in the states of California and Washington, and the NYC area. Salary ranges are determined through interviews and a review of education, experience, knowledge, skills, location and abilities of the applicant, and equity with other team members. Employees in this role are also eligible for the following benefits in accordance with the terms of the Company's plans: health, dental, vision insurance, life insurance, flex time off, eligibility to enroll in 401k, 12 paid holidays.
Privacy Notice - Active Candidates: https://www.aptiv.com/privacy-notice-active-candidates
Aptiv is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender identity, sexual orientation, disability status, protected veteran status or any other characteristic protected by law.
Senior Manager, Product Security Office
Hybrid On-Site: Walnut Creek, CA; Austin, TX; Troy, MI; Boston, MA; Kanata, Ontario, Canada
Citizenship: USA National or Canada Citizen, without citizenship of another country
ABOUT WIND RIVER
Wind River is a global leader in delivering software for mission-critical intelligent systems. For more than four decades, the company has been an innovator and pioneer, powering billions of systems that require the highest levels of security, safety, and reliability.
Wind River helps customers across automotive, aerospace, defense, industrial, medical, and telecommunications industries solve complex technology challenges on their journey toward the new intelligent machine economy. The company’s software powers generation after generation of the safest, most secure systems in the world. Examples include playing a key role in NASA space missions such as Artemis I, the James Webb Space Telescope, and multiple Mars rovers. We’ve achieved recent 5G milestones including the world’s first successful 5G data session with Verizon and building one of the largest Open RAN networks in the world with Vodafone.
The company has received industry recognition for its technology innovation and leadership, and for its workplace culture, including global Great Place to Work certification and being named a “Top Workplace” for ten consecutive years. If you want to be part of a unique culture where the lived experience is based on our cultural attributes of growth mindset, customer-focus, and diversity, equity, inclusion & belonging, come join us and help advance the future software defined world.
Role Summary
Wind River Systems is seeking an experienced Secure Software Engineering Professional to lead and manage the Product Security Office to scale trust in our product security to meet increasing business and security technology needs. This position will lead and grow a mature product security team while architecting and mobilizing product security trust initiatives, manage customer product security trust, and lead the product security incident response (PSIRT) and vulnerability management team.
The successful candidate will have experience in software security techniques, broad-based security standards and regulatory experience, and have mature cross-functional leadership, teamwork, and communications capabilities.
Interface & Collaboration
The successful candidate will work and collaborate with customer, product, engineering, and operations teams to ensure high levels of product security trust with a scalable, compliance-driven mindset, across all products.
Your Role
- Manage, Lead, and Grow the Product Security Office and Team
- Architect the product security trust roadmap and scale the compliance framework to meet emerging and future business priorities.
- Empower product security compliance across engineering and aligned to the CTO Office, Product Management, IT, Legal, InfoSec, and SecOps.
- Empower product security champions throughout product software engineering.
- Architect, and lead execution of organization-wide product security assurance software platforms.
- Lead the Product Security Incident Response Team (PSIRT) operations team.
- Manage customer product security trust and compliance.
- Training, mentoring, and supporting development teams to follow secure development values, principles, and practices.
Your Background
Core Competencies & Demonstrated Success
- Experience Leading Software Product Security Team(s).
- Direct experience with product security assurance techniques including Threat Modeling, Security Testing, Vulnerability Management, Software Composition, etc.
- Experience in software engineering models and techniques.
- Experience empowering product security compliance broadly across an organization.
- Broad-based experience with global security regulations, frameworks, and standards.
- Exposure to customer compliance and remediations (Questionnaire’s, Audits, Contracts, etc.)
- Excellent verbal and written, management level and customer communication skills.
- Ability to analyze and think quickly and to resolve conflict.
- Strong communication, interpersonal, and mentoring skills.
- Ability to work effectively across the organization.
- Ability to adapt to a changing environment.
Qualifications
- Bachelor’s degree in Engineering, Computer Science, Information Security, or a related technical field.
- 10+ years of experience in software engineering, program management, governance, compliance, or related leadership roles.
- 5+ years of people management experience leading technical, compliance, or program teams.
- Direct experience mobilizing one or more security standards/certifications/frameworks like FIRST.org, OWASP SAMM, IEC 62443, ISO 21434, NIST 800-218, FIPS 140-3, DISA STIG, Common Criteria, CMMC, Fed Ramp, or similar.
- Broad practical experience with the NIST 800 series of security standards, including 800-53, 800-171, and others.
- Practical experience with one or more threat modeling frameworks such as: TARA, STRIDE, PASTA, ATT&CK, or similar.
- Broad practical experience with secure software testing techniques and tools including: SAST, DAST, Fuzz, Security Feature, and Penetration Testing.
- Working knowledge of vulnerability and incident management coordination: Global Vulnerability Registers, CVSS Scoring, CNA, VINCE, NVD, and similar.
- Experience mobilizing secure software development techniques across an organization.
- Experience using agile techniques and frameworks to deliver secure software.
- Experience leading full-stack software solutions, preferably for product security.
Preferred Qualifications
- Certified security professional (CSSLP, CISM, CISSP, CEH, or similar).
- Experience with the European Union (EU) security regulatory environment including the Cyber Resilience Act (CRA).
- Experience with national security systems and standards (CNSS, etc.).
- Working knowledge of risk management frameworks and risk-based secure software development.
- Experience with AI and Machine learning and their governance and provenance in a secure software development environment.
- Working knowledge of related quality and safety assurance standards such as ASPICE, ISO 26262, DO-178C, or similar.
Additionally, will consider San Diego, Walnut Creek, Boston, MA, Troy, MI or Austin, TX area (brick and mortar location will be leased soon)
SECURITY CLEARANCE REQUIREMENTS
USA National or Canada Citizen without citizenship of another country
Successful candidates must engage in a security clearance process in regard to their citizenship in order to perform fundamental job duties, as per applicable law. In particular, candidates with certain citizenship may not be able to perform such fundamental job duties. Currently, this includes citizens of the following countries: Belarus; Burma; China; Cuba; Iran; North Korea; Syria; Venezuela; Afghanistan; Cambodia; Central African Republic; Cyprus; Democratic Republic of Congo; Ethiopia; Eritrea; Haiti; Iraq; Lebanon; Libya; Russia; Somalia; South Sudan; Sudan; Zimbabwe. The security clearance process may take a significant amount of time to complete, and any offer of employment will be contingent on the candidate's legal ability to perform the fundamental job duties. Wind River is committed to meeting its obligations to candidates under applicable human rights law and privacy law in this regard.
COMPENSATION
The annual base salary range for this role’s listed grade level is currently $200,000 to $240,000 plus bonus for residents in the states of Colorado, New York and New Jersey; and $210,000 to $250,000 plus bonus for residents in the states of California and Washington, and the NYC area. Salary ranges are determined through interviews and a review of education, experience, knowledge, skills, location and abilities of the applicant, and equity with other team members. Employees in this role are also eligible for the following benefits in accordance with the terms of the Company's plans: health, dental, vision insurance, life insurance, flex time off, eligibility to enroll in 401k, 12 paid holidays.
Privacy Notice - Active Candidates: https://www.aptiv.com/privacy-notice-active-candidates
Aptiv is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender identity, sexual orientation, disability status, protected veteran status or any other characteristic protected by law.
See All 16 Product Security Engineer Jobs in Massachusetts
Find roles in Massachusetts that match your experience and apply in just a few clicks.
Find JobsProduct Security Engineer Jobs by City in Massachusetts
Where Massachusetts roles are concentrated, by current openings.
Product Security Engineer Job Market in Massachusetts
A snapshot from current Massachusetts openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Medical Devices
- Technology & Software
What Massachusetts Employers Look For
The qualifications that appear most often in product security engineer jobs across Massachusetts.
- Bachelor's degree in computer science, cybersecurity, or a closely related engineering field
- Hands-on experience with threat modeling, penetration testing, or secure code review
- Proficiency in one or more programming languages such as Python, C, C++, or Java
- Relevant certification such as CISSP, CEH, or OSCP recognized by Massachusetts employers
- Familiarity with security frameworks including NIST, ISO 27001, or IEC 62443 for product environments
- Experience working within agile or DevSecOps pipelines to integrate security into product development
Product Security Engineer Jobs in Massachusetts: Frequently Asked Questions
How do you become a product security engineer in Massachusetts?
A bachelor's degree in computer science, cybersecurity, or electrical engineering is the standard foundation Massachusetts employers expect. Massachusetts does not require a state-issued license specifically for product security engineers, but industry certifications like CISSP or OSCP carry significant weight with Boston-area and Route 128 corridor employers. Building a portfolio of security research or contributing to open-source security tooling is a strong differentiator in the competitive Massachusetts market.
Which companies hire product security engineers in Massachusetts?
Employers hiring product security engineers in Massachusetts right now include PTC, Bose, and Zappsec, based on current listings on Migrate Mate as of November 2026. Massachusetts's concentration of defense contractors, major financial institutions, and medtech companies along the Route 128 corridor means demand is distributed across several distinct industries rather than a single sector.
Which Massachusetts cities have the most product security engineer jobs?
Boston, Tewksbury, and Framingham have the most product security engineer openings in Massachusetts. Boston and Cambridge anchor demand through their dense concentration of fintech firms, biotech companies, and research institutions, while Waltham and Burlington attract roles tied to the defense technology and enterprise software employers that cluster along the Route 128 corridor.
Are there remote product security engineer jobs in Massachusetts?
Yes, and more than most technical fields, because product security engineering work is largely code review, threat modeling, and documentation that translates well to remote environments. About 80% of product security engineer openings tied to Massachusetts are remote or hybrid as of November 2026, reflecting the desk-based nature of most tasks. Roles involving hardware testing or secure lab access tend to require on-site presence.
How can I get hired as a product security engineer in Massachusetts with little or no experience?
The most realistic entry path is moving laterally from a software engineering, IT operations, or systems administration role into security, since Massachusetts employers value hands-on technical context. Companies like Raytheon Technologies and several Cambridge-based biotech firms run structured associate or rotational programs that place candidates without dedicated security backgrounds into product security teams. Building a home lab, earning a CEH or Security+ certification, and completing a bug bounty finding on a public program significantly strengthens an application.
Where can I find and apply to product security engineer jobs in Massachusetts?
You can find and apply to product security engineer jobs in Massachusetts on Migrate Mate, which lists current Massachusetts openings. Find the roles that fit your experience and location, then apply directly to the employer through each listing.
See All 16 Product Security Engineer Jobs in Massachusetts
Find roles in Massachusetts that match your experience and apply in just a few clicks.
Find Jobs