Open security roles at Bose Corporation, and what we know about the team behind them.
electrical/electronic manufacturing · 6500 employees · 2 open roles. Updated October 16, 2026.
Bose Corporation
“Bose approaches product security in the same manner as it does other technologies and products.”
Bose Corporation
“Bose approaches product security in the same manner as it does other technologies and products.”
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
How they approach application security
“Bose approaches product security in the same manner as it does other technologies and products. They have implemented a product security framework that includes proactive monitoring of products for security defects. Information regarding developer enablement versus gatekeeping, and stated pain points or goals, is not publicly available. There is no explicit public language found describing a developer-engagement model or AppSec KPIs.”
The team
Diana Doroftei leads Cybersecurity Governance, Risk and Compliance at Bose, working with the CISO. Sahand Naderi is a Manager, Product Security responsible for supporting and maintaining product cybersecurity services and technologies. Jonathan Ganz is a Security Engineer at Bose. The organizational structure, reporting line for AppSec, team size, and common skill/tool patterns are not publicly available. Active job postings indicate hiring for Product Security Engineers, with examples from Jobright.ai and Built In Boston.
What they're working on
Bose has a Product Security Incident Response Team (PSIRT) committed to rapidly addressing security vulnerabilities. They implement a product security framework with proactive monitoring for security defects and conduct source-code analysis, identifying requirements and considering supply chain threats. Potential security vulnerabilities can be reported to the PSIRT via privacyandsecurity@bose.com. Information on a Security Champions program, 'shift left' practices, recent initiatives, triage SLAs, ticketing tools, or remediation ownership is not publicly available.