Remote Staff Product Security Engineer

PTC Inc; United States; On-site; USD 95,000 - 125,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) with match

Employee stock purchase plan

Job summary

PTC Inc. is seeking a Staff Product Security Engineer to secure our SaaS stack, containers, and APIs. You will drive SSDLC practices, perform threat modeling, conduct security reviews, and guide engineering teams to embed security into cloud-based systems.

We value strong communication, hands-on security testing, and collaboration across product and engineering. This remote US role offers competitive compensation and comprehensive benefits.

Qualifications

• Bachelor's degree in computer science, Information Security, Engineering, or equivalent.
• 5+ years of experience in Application Security, Product Security, or Software Security Engineering.
• Strong knowledge of SSDLC practices.
• Hands-on experience with threat modeling, secure design reviews, and security assessments.
• In-depth understanding of OWASP Top 10 and OWASP API Top 10.
• Experience with SAST, DAST, SCA, and secrets scanning tools and integrating them in CI/CD.
• Proficiency in Java, Python, JavaScript/TypeScript, or Go.
• Experience securing mobile apps, REST and event-driven APIs, and cloud platforms (AWS/Azure/GCP).

Responsibilities

• Serve as SME on Information Security.
• Identify and implement new security technologies and best practices.
• Review security test results and propose remediation or mitigations.
• Automate threat intelligence and sensor enrichment to reduce MTTD/MTTR.
• Guide multi-disciplinary teams in implementing security controls.
• Consult with engineering on cloud-based designs to ensure security.
• Continuously update security practices, tooling, and documentation.

Skills

Application security

Product security

Software security engineering

SSDLC

Threat modeling

Secure design reviews

Security assessments

OWASP Top 10

OWASP API Top 10

CI/CD security

SAST

DAST

SCA

Secrets scanning

Java

Python

JavaScript/TypeScript

Go

Mobile security

REST APIs

Cloud platforms

AWS

Azure

GCP

Communication

Education

Bachelor's degree in CS/InfoSec/Engineering

Tools

CI/CD tools

IAM/Identity tooling

Job description

PTC Inc. is seeking a Staff Product Security Engineer to secure our SaaS stack, containers, and APIs. You will drive SSDLC practices, perform threat modeling, conduct security reviews, and guide engineering teams to embed security into cloud-based systems.

We value strong communication, hands-on security testing, and collaboration across product and engineering. This remote US role offers competitive compensation and comprehensive benefits.