Vice President - Global Product Security

PTC; Boston (MA); On-site; USD 272,000 - 340,000; Full time

Benefits offered by this job

Equity programs

Employee stock purchase program

Medical, dental & vision insurance

401(k) with employer match

Commuter subsidy

Job summary

PTC seeks a Vice President - Global Product Security to define and lead the company’s product security strategy across its global portfolio. Reporting to the Chief Product Officer, they will ensure security is embedded throughout the lifecycle from architecture to deployment and vulnerability management.

You will partner with Product, Engineering, Cloud Operations, Information Security, Legal, and Customer Success to strengthen security, reduce risk, and maintain customer trust.

Qualifications

• 15+ years in product/security roles with leadership experience.
• Experience embedding security into modern software development and CI/CD.
• Ability to translate risk into executive-level actions.

Responsibilities

• Define and execute a comprehensive product security strategy aligned with company priorities.
• Establish security standards, policies, and governance across the product lifecycle.
• Embed security into architecture, engineering practices, and release processes.
• Advise executive leadership on risks, investments, and threats.
• Establish metrics to measure security posture and remediation performance.

Skills

Product security

Application security

Security leadership

CI/CD security

OWASP framework

Penetration testing

Threat modeling

Executive communication

Education

Bachelor's degree in CS/Cybersecurity/Engineering

Tools

Black Duck

SCA tools

SAST/DAST tools

Job description

Our world is transforming, and PTC is leading the way. Our software brings the physical and digital worlds together, enabling companies to improve operations, create better products, and empower people in all aspects of their business.

Our people make all the difference in our success. Today, we are a global team of nearly 7,000 and our main objective is to create opportunities for our team members to explore, learn, and grow - all while seeing their ideas come to life and celebrating the differences that make us who we are and the work we do possible.

PTC is seeking a Vice President - Global Product Security to define and lead the company's product security strategy across its global portfolio. Reporting to the Chief Product Officer, they will ensure security is embedded throughout the product lifecycle spanning architecture and development through release, deployment, and ongoing vulnerability management.

You will partner closely with Product, Engineering, Cloud Operations, Information Security, Legal, and Customer Success to strengthen product security, reduce risk, and maintain customer trust. This leader must combine deep application security expertise with judgment and influence to establish consistent standards across a complex global product organization.

Key Responsibilities

Product Security Strategy and Governance

• Define and execute a comprehensive product security strategy aligned with PTC's product, cloud, and AI priorities.


• Establish security standards, policies, and governance across the product development lifecycle.


• Embed security into product architecture, engineering practices, release processes, and acquisition integration.


• Advise the Chief Product Officer and executive leadership on product security risks, priorities, investments, and emerging threats.


• Establish clear metrics and reporting to measure product security posture, vulnerability trends, remediation performance, and organizational readiness.

Application Security

• Lead the company's application security program across cloud, SaaS, on-premises, and connected products.


• Establish secure development standards based on recognized frameworks, including OWASP.


• Oversee application security testing using software composition analysis, static application security testing, dynamic application security testing, and related tools, including Black Duck.


• Partner with Engineering to incorporate security testing and automated controls into development and CI/CD workflows.


• Ensure vulnerabilities are consistently identified, prioritized, remediated, and validated based on severity and customer risk.


• Guide secure architecture reviews, threat modeling, code reviews, and security design decisions for new and existing products.

Vulnerability and Incident Management

• Lead PTC's product penetration-testing strategy, including the selection and management of internal and external testing resources.


• Establish and oversee product vulnerability management and Product Security Incident Response Team processes.


• Define policies governing responsible disclosure, vulnerability intake, remediation timelines, customer communication, and the publication of Common Vulnerabilities and Exposures.


• Serve as the senior product security authority during significant vulnerabilities or product-related security incidents.


• Ensure clear coordination among Product, Engineering, Information Security, Legal, Communications, and Customer Success during security events.

AI and Emerging Technology

• Assess how AI is changing application vulnerability discovery, security testing, attack methods, and remediation.


• Define appropriate security standards and testing requirements for AI-enabled products and functionality.


• Evaluate opportunities to use AI to improve vulnerability detection, prioritization, and response.


• Anticipate emerging product security risks and translate them into practical product and engineering requirements.

Leadership and Partnership

• Build and lead a high-performing product security organization with the expertise and scale required to support PTC's portfolio.


• Create clear accountability for product security while strengthening security ownership within Product and Engineering.


• Partner with customer-facing teams to address product security requirements during strategic sales, renewals, and customer reviews.


• Represent PTC's product security strategy with customers, partners, auditors, and other external stakeholders.


• Promote a culture in which security is treated as a core product requirement and an enabler of customer trust.

Qualifications

• 15+ years of progressive experience in product security, application security, software engineering security, or a related discipline, including 8+ years leading security teams and programs within a global technology company.


• Experience embedding security into modern software development and CI/CD processes.


• Ability to translate complex technical risks into clear business implications, priorities, and executive-level recommendations.


• Proven ability to influence senior product and engineering leaders and drive consistent standards across a global, matrixed organization.


• Strong judgment, credibility, and communication skills, particularly during high-risk security events.


• Bachelor's degree in computer science, cybersecurity, engineering, or a related field; an advanced degree or relevant security certifications are preferred.

Required Application Security Expertise

• Deep familiarity with OWASP standards, including the OWASP Top 10.


• Broad expertise across application security testing tools and methodologies, including Black Duck, software composition analysis, static application security testing, and dynamic application security testing.


• Demonstrated experience leading and managing penetration-testing programs.


• Strong understanding of how AI is changing application vulnerability detection, testing, and remediation.


• Expertise in application security policies, including responsible disclosure, vulnerability management, remediation requirements, customer communication, and decisions regarding when to publish CVEs.

PTC carefully considers a wide range of factors when determining compensation. The anticipated annual salary range for this position is between $272,000 - $340,000. The salary range reflects a good-faith estimate of compensation at the time of posting. Actual compensation may vary based on a candidate's skills, qualifications, experience, and location. Eligible employees also can become PTC shareholders through our employee share purchase program (ESPP), which allows for the purchase of discounted PTC stock. Certain roles may also be eligible for participation in our equity programs. Employees may be eligible for medical, dental and vision insurance, paid time off and sick leave, tuition reimbursement, 401(k) contributions and employer match, flexible spending accounts, life insurance, disability coverage and if you are an office-assigned employee, a generous commuter subsidy. All total rewards and benefits programs are subject to plan eligibility and other terms and conditions. For more information about PTC's comprehensive benefits, please visit our Careers Page.

At PTC, we believe in the power of diverse ideas and perspectives. As a global company that values and respects all identities, cultures, and perspectives, we strive to create an inclusive PTC for ALL through an environment where everyone feels like they belong and are empowered to bring their true, authentic selves to work. Proud to be an Equal Opportunity Employer, we welcome applicants from all backgrounds and hire without regard to race, national origin, religion, age, color, ethnicity, ancestry, marital status, sex (including pregnancy), sexual orientation, gender identity, gender expression, genetic information, disability, veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. For more information about PTC's comprehensive benefits and our AI usage, please visit our Careers Page (https://www.ptc.com/en/careers/united-states-careers). PTC endeavors to make ptc.com/careers accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact PTC's Talent Acquisition team at [e-mail]. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.

Life at PTC is about more than working with today's most cutting-edge technologies to transform the physical world. It's about showing up as you are and working alongside some of today's most talented industry leaders to transform the world around you.

If you share our passion for problem-solving through innovation, you'll likely become just as passionate about the PTC experience as we are.

We respect the privacy rights of individuals and are committed to handling Personal Information responsibly and in accordance with all applicable privacy and data protection laws. Review our Privacy Policy here.