Senior Product Security Engineer

PTC Inc; Boston (MA); Presencial; USD 95.000 - 140.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical, dental, and vision insurance

401(k) contributions and employerMatch

Employee stock purchase program (ESPP)

Commuter subsidy

Descripción de la vacante

PTC is seeking a Senior Product Security Engineer to secure its SaaS applications, containers, operating systems, databases, and networks. The role focuses on threat modeling, secure design reviews, and integrating security across CI/CD pipelines.

You will work with cross-functional teams to enhance the security posture of PTC’s software offerings. You will need strong SSDLC experience, cloud platform knowledge (AWS/Azure/GCP), and excellent communication to partner with product and engineering

Formación

• US Citizen or Green Card holder based in the US
• Bachelor's degree in computer science, information security, engineering, or equivalent
• 5+ years in application security or software security engineering with SSDLC knowledge
• Hands-on threat modeling, secure design reviews, and security assessments
• Strong knowledge of OWASP Top 10 and API Top 10
• Experience with SAST, DAST, SCA, and secrets scanning in CI/CD
• Proficiency in Java, Python, JavaScript/TypeScript, or Go
• Experience securing mobile apps and secure REST APIs
• Cloud platform knowledge (AWS/Azure/GCP)
• Strong written and verbal communication skills

Responsabilidades

• Serve as SME on information security across SaaS
• Identify and implement new security technologies and best practices
• Review security test results and propose remediation measures
• Automate threat intelligence and sensor enrichment to reduce detection/remediation time
• Guide multi-disciplinary teams in implementing security controls
• Consult with engineering on cloud-based system security
• Continuously update security practices, tooling, and documentation

Conocimientos

Application Security

SSDLC

Threat Modeling

OWASP Top 10

CI/CD Security

Programming: Java/Python/JS/Go

Cloud Platforms

Communication

US Citizenship/Green Card

Educación

Bachelor's degree in CS/Info Security/Engineering

Herramientas

SAST

DAST

SCA

Secrets Scanning Tools

CI/CD Tooling

Kubernetes Security

OAuth 2.0 / OIDC

Terraform / CloudFormation

Descripción del empleo

Our world is transforming, and PTC is leading the way. Our software brings the physical and digital worlds together, enabling companies to improve operations, create better products, and empower people in all aspects of their business. Our people make all the difference in our success. Today, we are a global team of nearly 7,000 and our main objective is to create opportunities for our team members to explore, learn, and grow – all while seeing their ideas come to life and celebrating the differences that make us who we are and the work we do possible. PTC enables global manufacturers to realize double-digit impact with software solutions that enable them to accelerate product and service innovation, improve operational efficiency, and increase workforce productivity. In combination with an extensive partner network, PTC provides customers flexibility in how its technology can be deployed to drive digital transformation – on premises, in the cloud, or via its pure SaaS platform. At PTC, we don't just imagine a better world, we enable it.

Senior Product Security Engineer

You’ll be responsible for helping secure PTC by providing cyber security expertise in the analysis, assessment, development, and evaluation of security solutions and architectures to secure our SaaS applications, containers, operating systems, databases, and networks. Additionally, the Security Engineer assists in the development of cyber security requirements, conducts security risk assessments, evaluates security services and technologies, and reviews and documents information security policies and procedures as well as provides monitoring and oversight for alerts in this environment. Our SaaS Security Team is small but growing. So, we all do what it takes and use all the skills in our personal arsenals to continue to evolve PTC’s SaaS Security posture. Our environment is fast, friendly, and dynamic.

Day-to-Day

• Serves as a subject matter expert (SME) on Information Security.
• Identify and implement new security technologies and best practices.
• Review security test results from vulnerability scans, penetration testing for true positives and propose appropriate remediation measures or mitigation controls.
• Reduce time-to-detect and time-to-remediate by driving the automation of applied threat intelligence and sensor enrichment.
• Guide and influence multi-disciplinary teams in implementing and operating Cyber Security controls.
• Consults with internal teams on engineering designs and development of cloud-based systems to ensure security is built-in.
• Learns with agility; empowered to update and enhance current security practices, tooling, and documentation.

Must Have

• Must Have US Citizen or Green Card holder based in the US required to meet ITAR Compliance and regulatory requirements.
• Bachelor's degree in computer science, Information Security, Engineering, or an equivalent combination of practical experience.
• 5+ years of experience in Application Security, Product Security, or Software Security Engineering.Strong knowledge of Secure Software Development Lifecycle (SSDLC) practices.
• Hands-on experience with threat modeling, secure design reviews, and application security assessments.
• In-depth understanding of OWASP Top 10 and OWASP API Top 10.
• Experience using SAST, DAST, SCA, and secrets scanning tools and integrating them in CI/CD.
• Proficiency in at least one programming language: Java, Python, JavaScript/TypeScript, or Go.
• Experience securing mobile applications, including offline data and sync workflows.
• Secure REST and event-driven APIs used by customers, partners, and internal services.
• Exposure to AI/ML security, responsible AI practices, or model risk management.
• Strong understanding of cloud platforms (AWS, Azure, or GCP).
• Strong written and verbal communication skills with the ability to partner effectively with engineering and product teams.

Nice to Have

• Experience securing Salesforce-based applications (Apex, Lightning, Salesforce security model).
• Experience integrating security controls into CI/CD pipelines (DevSecOps).
• Familiarity with container and Kubernetes security.
• Knowledge of OAuth 2.0, OpenID Connect (OIDC), JWT, and identity/security patterns.
• Experience with Infrastructure as Code (IaC) security (Terraform, CloudFormation, ARM).
• Experience working in regulated or compliance-driven environments.
• Familiarity with ISO 27001, SOC 2, NIST, or FedRAMP frameworks.
• Security certifications such as GWAPT, OSWE, CSSLP, CISSP, or CCSP.

PTC carefully considers a wide variety of factors when determining compensation. The anticipated annual salary range for this position is between $95,000-$140,000. The salary range reflects a good-faith estimate of compensation at the time of posting. Actual compensation may vary based on a candidate's skills, qualifications, experience, and location. Additionally, candidates may be eligible for a performance-based bonus. Employees also have the opportunity to become a PTC shareholder through our employee share purchase program (ESPP), which allows for the purchase of discounted PTC stock. Certain roles may also be eligible for participation in our equity programs.

• Employees also have the opportunity to become a PTC shareholder through our employee share purchase program (ESPP), which allows for the purchase of discounted PTC stock.
• Employees may be eligible for medical, dental and vision insurance, paid time off and sick leave, tuition reimbursement, 401(k) contributions and employer match, flexible spending accounts, life insurance, disability coverage and, if you are an office-assigned employee, a generous commuter subsidy.
• All total rewards and benefits programs are subject to applicable plan eligibility and other terms and conditions.
• For more information about PTC’s comprehensive benefits, please visit our Careers Page.

At PTC, we believe in the power of diverse ideas and perspectives. As a global company that values and respects all identities, cultures, and perspectives, we strive to create an inclusive PTC for ALL through an environment where everyone feels like they belong and are empowered to bring their true, authentic selves to work. Proud to be an Equal Opportunity Employer, we welcome applicants from all backgrounds and hire without regard to race, national origin, religion, age, color, ethnicity, ancestry, marital status, sex (including pregnancy), sexual orientation, gender identity, gender expression, genetic information, disability, veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

For more information about PTC’s comprehensive benefits and our AI usage, please visit our Careers Page (https://www.ptc.com/en/careers/united-states-careers).

Applications will be accepted on an on-going basis until the opportunity is filled.

PTC endeavors to make ptc.com/careers accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact PTC's Talent Acquisition team at [e-mail]. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.

Life at PTC is about more than working with today’s most cutting-edge technologies to transform the physical world. It’s about showing up as you are and working alongside some of today’s most talented industry leaders to transform the world around you.

We respect the privacy rights of individuals and are committed to handling Personal Information responsibly and in accordance with all applicable privacy and data protection laws. Review our Privacy Policy here.

PTC is a global software company powering how products are designed, built, serviced, and operated across industries like Aerospace & Defense, Industrial, Automotive, MedTech, Electronics, and High Tech. We are bold thinkers who collaborate as one team to deliver meaningful customer outcomes. Grounded in our values-Customers Matter, PTC for All, Team PTC, Purposeful Innovation, and Be Bold, we're shaping a smarter, more sustainable, connected future.