10 days ago
Pune, IndiaStaff+
Responsibilities
- Serve as a trusted security advisor and subject matter expert to engineering leadership and business stakeholders.
- Identify security gaps and assess risks from threat modeling, architecture reviews, secure development assessments, scanning tools, and customer-reported cases.
- Design and implement scalable application, cloud, container, and identity security solutions.
- Develop reusable security frameworks, reference architectures, remediation guidance, and secure design patterns for engineering teams.
- Drive adoption of secure software development and security best practices across products and platforms.
- Design and deliver large-scale software solutions using Java and enterprise application development expertise.
- Collaborate with Product Management, Development, Application Security, and Platform Engineering teams.
Requirements
- 15+ years of hands-on experience in application development and architecture.
- Bachelor’s or Master’s degree in Computer Science, Information Security, Engineering, or a related discipline.
- Deep expertise in Java, Spring Boot, microservices, REST APIs, distributed systems, and cloud-native technologies.
- Strong knowledge of application security, cloud security, Secure SDLC, OWASP Top 10, OWASP ASVS, secure coding, threat modeling, secure design reviews, vulnerability management, API security, and security testing.
- Experience with SAST, DAST, IAST, SCA, penetration testing, and related security testing methodologies.
- Experience with OAuth 2.0, OpenID Connect, SAML, LDAP, Active Directory, Microsoft Entra ID, and Privileged Access Management.
- Hands-on experience designing and implementing scalable security architectures, frameworks, and reusable solutions.
- Working knowledge of .NET, Python, JavaScript, React, Angular, and Node.js.
- Experience with object-oriented design, software architecture, design patterns, and modern development frameworks.
About PTC
PTC is a public software company that provides CAD, PLM, IoT, and AR platforms for manufacturers, including Creo, Windchill, ThingWorx, Vuforia, and the Onshape SaaS CAD system. It sells enterprise subscriptions and services that help industrial companies design products, manage lifecycles, and connect equipment and service operations. Founded in 1985 and headquartered in Boston, it trades on Nasdaq (PTC) and serves global discrete manufacturing and industrial markets.