Staff Product Security Engineer — SaaS & Cloud Security Expert

PTC; Boston (MA); On-site; USD 95,000 - 140,000; Full time

Benefits offered by this job

Employee stock purchase program (ESPP)

Medical, dental and vision insurance

401(k) with employer match

Tuition reimbursement

Commuter subsidy

Job summary

PTC in the United States is hiring a Staff Product Security Engineer to strengthen the security of our SaaS platforms, containers, and cloud-based systems. You will act as SME on information security, shaping threat modeling, secure design reviews, and SSDLC adoption across engineering teams.

You will partner with product and engineering to design secure architectures, automate threat intel, and improve security tooling and documentation while operating in a fast-paced, collaborative environment.

Qualifications

• 5+ years of experience in Application Security, Product Security, or Software Security Engineering.
• Strong knowledge of Secure Software Development Lifecycle (SSDLC) practices.
• Hands-on experience with threat modeling, secure design reviews, and application security assessments.
• In-depth understanding of OWASP Top 10 and OWASP API Top 10.
• Experience using SAST, DAST, SCA, and secrets scanning tools and integrating them in CI/CD.
• Proficiency in at least one programming language: Java, Python, JavaScript/TypeScript, or Go.
• Experience securing mobile applications, including offline data and sync workflows.
• Secure REST and event-driven APIs used by customers, partners, and internal services.

Responsibilities

• Identify and implement new security technologies and best practices.
• Review security test results from vulnerability scans and propose remediation measures.
• Automate threat intelligence and sensor enrichment to reduce time-to-detect and time-to-remediate.
• Guide and influence multi-disciplinary teams in implementing and operating Cyber Security controls.
• Consult with internal teams on engineering designs and development of cloud-based systems to ensure security is built-in.
• Learn and enhance current security practices, tooling, and documentation.

Skills

Threat modeling

Secure design reviews

Application security

CI/CD security

SAST/DAST/SCA

Cloud security

Java

Python

Education

Bachelor's degree in Computer Science/Information Security/Engineering

Tools

SAST tools

DAST tools

SCA tools

Terraform

Kubernetes

AWS

Azure

GCP

Job description

PTC in the United States is hiring a Staff Product Security Engineer to strengthen the security of our SaaS platforms, containers, and cloud-based systems. You will act as SME on information security, shaping threat modeling, secure design reviews, and SSDLC adoption across engineering teams.

You will partner with product and engineering to design secure architectures, automate threat intel, and improve security tooling and documentation while operating in a fast-paced, collaborative environment.