4 days ago
Boston, MA, USAStaff+
Base Salary
$95k - $140k/yr
Responsibilities
- Serve as a subject matter expert on information security.
- Identify and implement security technologies and best practices.
- Review vulnerability scan and penetration-testing results, identify true positives, and recommend remediation or mitigation controls.
- Automate applied threat intelligence and sensor enrichment to reduce detection and remediation time.
- Guide multidisciplinary teams in implementing and operating cybersecurity controls.
- Consult with engineering teams on cloud-based system designs to ensure security is built in.
- Develop cybersecurity requirements, conduct risk assessments, evaluate security services and technologies, and maintain security policies, procedures, tooling, and documentation.
- Monitor and provide oversight for security alerts in the SaaS environment.
Requirements
- US citizenship or Green Card status and US residence are required to meet ITAR and regulatory requirements.
- Bachelor’s degree in computer science, information security, engineering, or an equivalent combination of practical experience.
- At least 5 years of experience in application security, product security, or software security engineering.
- Strong knowledge of Secure Software Development Lifecycle practices and hands-on experience with threat modeling, secure design reviews, and application security assessments.
- In-depth understanding of OWASP Top 10 and OWASP API Top 10.
- Experience with SAST, DAST, SCA, and secrets-scanning tools and integrating them into CI/CD.
- Proficiency in at least one of Java, Python, JavaScript/TypeScript, or Go.
- Experience securing mobile applications, including offline data and synchronization workflows.
- Experience securing REST and event-driven APIs.
- Exposure to AI/ML security, responsible AI practices, or model risk management.
- Strong understanding of AWS, Azure, or GCP.
- Preferred experience includes Salesforce security, CI/CD security controls, container and Kubernetes security, OAuth 2.0, OpenID Connect, JWT, Terraform, CloudFormation, ARM, regulated environments, ISO 27001, SOC 2, NIST, FedRAMP, and security certifications such as GWAPT, OSWE, CSSLP, CISSP, or CCSP.
Benefits
- Annual performance-based bonus eligibility and participation in the employee share purchase program, with certain roles potentially eligible for equity programs.
- Medical, dental, vision, paid time off, sick leave, tuition reimbursement, 401(k) contributions and employer match, flexible spending accounts, life insurance, disability coverage, and a commuter subsidy for office-assigned employees.
- Applications are accepted on an ongoing, rolling basis until the position is filled.
Categories
About PTC
PTC is a public software company that provides CAD, PLM, IoT, and AR platforms for manufacturers, including Creo, Windchill, ThingWorx, Vuforia, and the Onshape SaaS CAD system. It sells enterprise subscriptions and services that help industrial companies design products, manage lifecycles, and connect equipment and service operations. Founded in 1985 and headquartered in Boston, it trades on Nasdaq (PTC) and serves global discrete manufacturing and industrial markets.