{"id":3627562,"url":"https://alion.io/job/ptc-staff-product-security-engineer-2","title":"Staff Product Security Engineer","company":{"id":7480,"name":"PTC","domain":"ptc.com","url":"https://alion.io/company/ptc","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":94,"open_postings":72,"ghost_share":0,"stale_share":0.208,"repost_share":0.028,"time_to_fill_p50_days":45,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Boston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":95000,"max":140000,"currency":"USD","period":"year","gross":null,"usd_annual":140000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"JavaScript","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"Apex","optional":true},{"name":"CloudFormation","optional":true},{"name":"FedRAMP","optional":true},{"name":"ISO 27001","optional":true},{"name":"Kubernetes","optional":true},{"name":"SOC 2","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-11-02T20:06:24Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-08T14:55:21Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":5},"description":"Our world is transforming, and PTC is leading the way. Our software brings the physical and digital worlds together, enabling companies to improve operations, create better products, and empower people in all aspects of their business.\nOur people make all the difference in our success. Today, we are a global team of nearly 7,000 and our main objective is to create opportunities for our team members to explore, learn, and grow - all while seeing their ideas come to life and celebrating the differences that make us who we are and the work we do possible.\nPTC enables global manufacturers to realize double-digit impact with software solutions that enable them to accelerate product and service innovation, improve operational efficiency, and increase workforce productivity. In combination with an extensive partner network, PTC provides customers flexibility in how its technology can be deployed to drive digital transformation - on premises, in the cloud, or via its pure SaaS platform. At PTC, we don't just imagine a better world, we enable it.\nStaff Product Security Engineer\nYou’ll be responsible for helping secure PTC by providing cyber security expertise in the analysis, assessment, development, and evaluation of security solutions and architectures to secure our SaaS applications, containers, operating systems, databases, and networks. Additionally, the Security Engineer assists in the development of cyber security requirements, conducts security risk assessments, evaluates security services and technologies, and reviews and documents information security policies and procedures as well as provides monitoring and oversight for alerts in this environment.\nOur SaaS Security Team is small but growing. So, we all do what it takes and use all the skills in our personal arsenals to continue to evolve PTC’s SaaS Security posture. Our environment is fast, friendly, and dynamic.\nDay-To-Day:\nServes as a subject matter expert (SME) on Information Security.\n\nIdentify and implement new security technologies and best practices.\n\nReview security test results from vulnerability scans, penetration testing for true positives and propose appropriate remediation measures or mitigation controls.\n\nReduce time-to-detect and time-to-remediate by driving the automation of applied threat intelligence and sensor enrichment.\n\nGuide and influence multi-disciplinary teams in implementing and operating Cyber Security controls.\n\nConsults with internal teams on engineering designs and development of cloud-based systems to ensure security is built-in.\n\nLearns with agility; empowered to update and enhance current security practices, tooling, and documentation.\n\nMust Have\nUS Citizen or Green Card holder based in the US required to meet ITAR Compliance and regulatory requirements.\n\nBachelor's degree in computer science, Information Security, Engineering, or an equivalent combination of practical experience.\n\n5+ years of experience inApplication Security, Product Security, or Software Security Engineering.\n\nStrong knowledge of Secure Software Development Lifecycle (SSDLC) practices.\n\nHands-on experience withthreat modeling,secure design reviews, andapplication security assessments.\n\nIn-depth understanding ofOWASP Top 10 andOWASP API Top 10.\n\nExperience usingSAST, DAST, SCA, and secrets scanning tools and integrating them in CI/CD.\n\nProficiency in at least one programming language:Java, Python, JavaScript/TypeScript, or Go.\n\nExperience securingmobile applications, including offline data and sync workflows.\n\nSecureREST and event-driven APIs used by customers, partners, and internal services.\n\nExposure toAI/ML security, responsible AI practices, or model risk management.\n\nStrong understanding of cloud platforms (AWS, Azure, or GCP).\n\nStrong written and verbal communication skills with the ability to partner effectively with engineering and product teams.\n\n Nice to Have\nExperience securing Salesforce-based applications (Apex, Lightning, Salesforce security model).\n\nExperience integrating security controls into CI/CD pipelines (DevSecOps).\n\nFamiliarity withcontainer and Kubernetes security.\n\nKnowledge of OAuth 2.0, OpenID Connect (OIDC), JWT, and identity/security patterns.\n\nExperience with Infrastructure as Code (IaC) security (Terraform, CloudFormation, ARM).\n\nExperience working inregulated or compliance-driven environments.\n\nFamiliarity withISO 27001, SOC 2, NIST, or FedRAMP frameworks.\n\nSecurity certifications such as GWAPT, OSWE, CSSLP, CISSP, or CCSP.\n\nPTC carefully considers a widevarietyof factorswhendeterminingcompensation.Theanticipatedannual salary range for this positionisbetween$95,000-$140,000.The salary rangereflectsa good-faith estimate of compensation at the time of posting.Actualcompensationmay vary based on a candidate's skills, qualifications, experience, and location. Additionally, candidates may be eligible fora performance-basedbonus. Employeesalsohavethe opportunity tobecome a PTC shareholder through our employee share purchase program(ESPP),which allowsfor thepurchaseofdiscounted PTC stock.Certainrolesmay also be eligible forparticipation in ourequity programs.Employees may be eligible for medical, dental and vision insurance, paid time off and sick leave, tuition reimbursement, 401(k) contributions and employer match, flexible spending accounts, life insurance, disability coverage and,if you are an office-assigned employee,a generous commuter subsidy.All total rewards and benefits programs are subject to applicable planeligibilityand otherterms and conditions.\nFor more informationaboutPTC’s comprehensive benefits, pleasevisitour Careers Page. “This position is not eligible for employment-based immigration sponsorship. Applicants must be authorized to work in the United States without requiring current or future sponsorship from PTC.”\nPTC recruits on a rolling basis. Candidates are considered as they apply, until the opportunity is filled.\nThis position is not eligible for employment-based immigration sponsorship. Applicants must be authorized to work in the United States without requiring current or future sponsorship from PTC.At PTC, we believe in the power of diverse ideas and perspectives. As a global company that values and respects all identities, cultures, and perspectives, we strive to create an inclusive PTC for ALL through an environment where everyone feels like they belong and are empowered to bring their true, authentic selves to work. Proud to be an Equal Opportunity Employer, we welcome applicants from all backgrounds and hire without regard to race, national origin, religion, age, color, ethnicity, ancestry, marital status, sex (including pregnancy), sexual orientation, gender identity, gender expression, genetic information, disability, veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.For more information about PTC’s comprehensive benefits and our AI usage, please visit our Careers Page (https://www.ptc.com/en/careers/united-states-careers). Applications will be accepted on an on-going basis until the opportunity is filled.PTC endeavors to make ptc.com/careers accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact PTC's Talent Acquisition team at . This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.Life at PTC is about more than working with today’s most cutting-edge technologies to transform the physical world. It’s about showing up as you are and working alongside some of today’s most talented industry leaders to transform the world around you.\nIf you share our passion for problem-solving through innovation, you’ll likely become just as passionate about the PTC experience as we are. Are you ready to explore your next career move with us?\nWe respect the privacy rights of individuals and are committed to handling Personal Information responsibly and in accordance with all applicable privacy and data protection laws. Review our Privacy Policy here.\"","description_format":"text","description_chars":8392,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Life insurance","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["AR & VR Software","Information Security","Industrial IoT (IIoT)","Field Service Management Software"],"lifecycle":[{"event":"open","at":"2026-11-02T20:06:24Z"},{"event":"reopen","at":"2026-11-07T10:46:26Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 40 · green card filings: 27","filings_12m":40,"filings_prev_12m":63,"green_card_filings_12m":27,"median_offered_wage_usd":134515,"route":null,"cap_exempt":false,"checked_at":"2026-11-08T10:45:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":13}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":45,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-11-08T05:47:12Z"},"pay":{"stated_usd_annual":140000,"is_top_pay":false},"html_url":"https://alion.io/job/ptc-staff-product-security-engineer-2","json_url":"https://alion.io/job/ptc-staff-product-security-engineer-2.json","meta":{"generated_at":"2026-11-08T18:42:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":39145,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7480},"rest":"https://alion.io/mcp/rest/get_company?id=7480"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fptc-staff-product-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fptc-staff-product-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fptc-staff-product-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ptc-staff-product-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fptc-staff-product-security-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3627562}},{"tool":"search_jobs","arguments":{"company":"ptc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3627562},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}