Security Technical Product Manager

PTC; Boston (MA); On-site; USD 131,000 - 170,000; Full time

Benefits offered by this job

Medical, dental and vision insurance

401(k) with employer match

Tuition reimbursement

Commuter subsidy

Job summary

PTC is seeking a Security Technical Product Manager to drive security initiatives for the PTCCAD organization. You will embed security across the SDLC, lead SOC 2 readiness, and oversee secure architecture for AI-enabled, cloud-connected CAD features.

You will collaborate with engineering, security champions, and compliance to ensure best practices, threat modeling, and vulnerability management are built into product development from ideation to deployment.

Qualifications

• Bachelor’s degree in Computer Science or related STEM field.
• Minimum 3 years as a Technical Product Manager or Product Security Engineer.
• Experience with secure SDLC practices and security standards.

Responsibilities

• Define technical security requirements for CAD features including AI and connected services.
• Conduct threat modeling and secure architecture reviews for new functionality.
• Manage SOC 2 compliance and annual security assessments.
• Collaborate with engineering teams to plan and oversee security projects.
• Oversee vulnerability prioritization and remediation across teams.
• Improve security best practices and ensure secure lifecycle integration.

Skills

Secure SDLC

AI security

NIST/ISO/CWE/CVSS/OWASP

Vulnerability scanning

Authentication protocols

Education

Bachelor’s degree in CS or STEM

Tools

SAST

DAST

SCA

Job description

Our world is transforming, and PTC is leading the way. Our software brings the physical and digital worlds together, enabling companies to improve operations, create better products, and empower people in all aspects of their business.

Our people make all the difference in our success. Today, we are a global team of nearly 7,000 and our main objective is to create opportunities for our team members to explore, learn, and grow – all while seeing their ideas come to life and celebrating the differences that make us who we are and the work we do possible.

Security Technical Product Manager

The Security Technical Product Manager will drive security initiatives for PTCCAD organization. This role focuses on strengthening application security across a complex desktop architecture with connected components and AI capabilities, ensuring compliance with SOC 2 and FedRAMP requirements. The TPM will collaborate closely with engineering, security champions, and compliance teams to embed security best practices throughout the SDLC.

Key Focus Areas

• Mature security controls across the Secure SDLC for desktop applications.
• Lead SOC 2 readiness and compliance activities.
• Address security implications of AI features and cloud-connected components.
• Drive secure architecture reviews, create security requirements, threat modeling, and oversee vulnerability management.
• Collaborate on security processes for DevSecOps and CI/CD pipelines.
• Manage partner security aspects of partner engagements as well as usage of opensource components.

Your Day-to-Day

• Define technical security requirements for PTC CAD product features, including AI and connected services.
• Conduct threat modeling and secure architecture reviews for new functionality.
• Manage SOC 2 compliance, annual security assessments and audits.
• Work directly with engineering scrum teams to plan and oversee complex security projects.
• Manage vulnerability prioritization and remediation efforts across functional teams.
• Improve security best practices and ensure security is “built-in” across the product lifecycle.
• Oversee rollout of security controls, scanning tools (SAST, DAST, SCA), and process updates.
• Collaborate on product security standards, policies, and incident response.
• Communicate security posture and compliance status to internal and external stakeholders.

Skills and Knowledge

• Strong background in Secure SDLC programs (OWASP SAMM, BSIMM, MS SDL).
• Familiarity with AI security risks (model integrity, data privacy, adversarial attacks).
• Knowledge of common security standards: NIST 800-53, ISO 270xx, CWE, CVSS, OWASP.
• Experience with vulnerability scanning tools (SAST, DAST, SCA).
• Understanding of authentication protocols and secure communication for connected components.

Basic Qualifications

• Bachelor’s Degree in Computer Science or related STEM field.
• Ability to commute to the Seaport Boston office at least 2 days a week.
• Minimum 3 years as a Technical Product Manager or Product Security Engineer.
• Excellent written and verbal communication skills.

Preferred Qualifications

• Experience with CAD software or complex engineering applications.
• Familiarity with SOC2 compliance requirements.
• Knowledge of DevSecOps practices and CI/CD security integration.

This position is not eligible for employment-based immigration sponsorship. Applicants must be authorized to work in the United States without requiring current or future sponsorship from PTC.

PTC carefully considers a wide variety of factors when determining compensation. The anticipated annual salary range for this position is between $131,000 - 170,000. The salary range reflects a good-faith estimate of compensation at the time of posting. Actual compensation may vary based on a candidate's skills, qualifications, experience, and location. Additionally, candidates may be eligible for a performance-based bonus. Employees also have the opportunity to become a PTC shareholder through our employee share purchase program (ESPP), which allows for the purchase of discounted PTC stock. Certain roles may also be eligible for participation in our equity programs. Employees may be eligible for medical, dental and vision insurance, paid time off and sick leave, tuition reimbursement, 401(k) contributions and employer match, flexible spending accounts, life insurance, disability coverage and, if you are an office-assigned employee, a generous commuter subsidy. All total rewards and benefits programs are

subject to applicable plan eligibility and other terms and conditions.

For more information about PTC’s comprehensive benefits, please visit our Careers Page.

At PTC, we believe in the power of diverse ideas and perspectives. As a global company that values and respects all identities, cultures, and perspectives, we strive to create an inclusive PTC for ALL through an environment where everyone feels like they belong and are empowered to bring their true, authentic selves to work. Proud to be an Equal Opportunity Employer, we welcome applicants from all backgrounds and hire without regard to race, national origin, religion, age, color, ethnicity, ancestry, marital status, sex (including pregnancy), sexual orientation, gender identity, gender expression, genetic information, disability, veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Life at PTC is about more than working with today’s most cutting-edge technologies to transform the physical world. It’s about showing up as you are and working alongside some of today’s most talented industry leaders to transform the world around you.

We respect the privacy rights of individuals and are committed to handling Personal Information responsibly and in accordance with all applicable privacy and data protection laws. Review our Privacy Policy here."