01Overview
Our world is transforming, and PTC is leading the way. Our software brings the physical and digital worlds together, enabling companies to improve operations, create better products, and empower people in all aspects of their business.
Our people make all the difference in our success. Today, we are a global team of nearly 7,000 and our main objective is to create opportunities for our team members to explore, learn, and grow all while seeing their ideas come to life and celebrating the differences that make us who we are and the work we do possible.
Job Title: Principal Product Security Engineer
Role Overview
The Principal Product Security Engineer is a senior technical leader responsible for safeguarding the security of products and services across the full Software Development Lifecycle (SDLC), with a robust emphasis on handson application penetration testing. This role combines deep offensive security expertise with architectural judgment, secure design guidance, and crossorganizational influence.
As a principallevel engineer, you will lead complex application security assessments across web applications, APIs, SaaS platforms, and emerging technologies (including AIdriven solutions), while also shaping product security strategy, standards, and engineering practices. You will work closely with R&D;, Product Management, Cloud, SaaS, and QA teams to ensure security is built in, not bolted on.
This role is highly technical, executionfocused, and requires the ability to both find and exploit realworld vulnerabilities and drive durable remediation outcomes across multiple product lines.
Key Responsibilities
Application Penetration Testing & Offensive Security
- Lead and execute indepth manual application penetration testing across web applications, APIs, and LLM/AI enabled applications.
- Perform security testing aligned with OWASP Top 10, OWASP API Top 10, OWASP LLM/AI Top 10, CWE Top 25, and emerging attack classes.
- Identify complex attack paths, chai .
