Senior Product Security Engineer (SaaS & Cloud)

PTC; United States; Remote; USD 95,000 - 125,000; Full time

Job summary

PTC seeks a Staff Product Security Engineer to secure our SaaS apps, containers, and cloud infrastructure. You will develop cyber security requirements, assess risks, and review security policies while supporting the evolving SaaS security posture in a fast-paced team.

The role emphasizes collaboration with engineering and product teams, hands-on security testing, and ongoing improvement of security practices and tooling within an innovative global company.

Qualifications

• US Citizen or Green Card holder based in the US required.
• Bachelor’s degree in Computer Science, Information Security, Engineering, or equivalent.
• 5+ years of experience in Application Security, Product Security, or Software Security Engineering.
• Strong knowledge of SSDLC practices.
• Hands-on experience with threat modeling, secure design reviews, and security assessments.
• In-depth understanding of OWASP Top 10 and OWASP API Top 10.
• Experience using SAST, DAST, SCA, and secrets scanning tools and CI/CD integration.
• Proficiency in Java, Python, JavaScript/TypeScript, or Go.
• Experience securing mobile apps, offline data, and sync.
• Secure REST and event-driven APIs.
• Exposure to AI/ML security or model risk management.
• Strong knowledge of cloud platforms (AWS/Azure/GCP).
• Strong written and verbal communication skills.

Responsibilities

• Serve as SME on Information Security for SaaS apps and cloud services.
• Identify and implement new security technologies and best practices.
• Review security test results and drive remediation measures.
• Reduce time-to-detect by automating threat intelligence and sensor data.
• Guide multi-disciplinary teams in implementing cybersecurity controls.
• Consult with engineering on secure cloud-based designs.
• Continuously update security practices, tooling, and documentation.

Skills

Information Security

Application Security

SSDLC

Threat modeling

Secure design reviews

API Security

SAST/DAST/SCA

CI/CD security

Java

Python

JavaScript/TypeScript

Go

Cloud platforms

REST API security

Threat intelligence

Education

Bachelor's degree

Tools

SAST

DAST

SCA

Secrets scanning

CI/CD tooling

Job description

PTC seeks a Staff Product Security Engineer to secure our SaaS apps, containers, and cloud infrastructure. You will develop cyber security requirements, assess risks, and review security policies while supporting the evolving SaaS security posture in a fast-paced team.

The role emphasizes collaboration with engineering and product teams, hands-on security testing, and ongoing improvement of security practices and tooling within an innovative global company.