Security Technical Product Manager

PTC•Boston, MA

42d•$131,000 - $170,000•Hybrid

About The Position

The Security Technical Product Manager will drive security initiatives for PTC CAD organization. This role focuses on strengthening application security across a complex desktop architecture with connected components and AI capabilities, ensuring compliance with SOC 2 and FedRAMP requirements. The TPM will collaborate closely with engineering, security champions, and compliance teams to embed security best practices throughout the SDLC. Key Focus Areas Mature security controls across the Secure SDLC for desktop applications. Lead SOC 2 readiness and compliance activities. Address security implications of AI features and cloud-connected components. Drive secure architecture reviews, create security requirements, threat modeling, and oversee vulnerability management. Collaborate on security processes for DevSecOps and CI/CD pipelines. Manage partner security aspects of partner engagements as well as usage of opensource components. Your Day-to-Day Define technical security requirements for PTC CAD product features, including AI and connected services. Conduct threat modeling and secure architecture reviews for new functionality. Manage SOC 2 compliance, annual security assessments and audits. Work directly with engineering scrum teams to plan and oversee complex security projects. Manage vulnerability prioritization and remediation efforts across functional teams. Improve security best practices and ensure security is “built-in” across the product lifecycle. Oversee rollout of security controls, scanning tools (SAST, DAST, SCA), and process updates. Collaborate on product security standards, policies, and incident response. Communicate security posture and compliance status to internal and external stakeholders.

Requirements

Strong background in Secure SDLC programs (OWASP SAMM, BSIMM, MS SDL).
Experience with application security for desktop software (C++, Java, JavaScript).
Familiarity with AI security risks (model integrity, data privacy, adversarial attacks).
Knowledge of common security standards: NIST 800-53, ISO 270xx, CWE, CVSS, OWASP.
Experience with vulnerability scanning tools (SAST, DAST, SCA).
Understanding of authentication protocols and secure communication for connected components.
Bachelor’s Degree in Computer Science or related STEM field.
Ability to commute to the Seaport Boston office at least 2 days a week.
Minimum 3 years as a Technical Product Manager or Product Security Engineer.
Software development experience (C++, Java, JavaScript).
Excellent written and verbal communication skills.

Nice To Haves

Experience with CAD software or complex engineering applications.
Familiarity with SOC2 compliance requirements.
Knowledge of DevSecOps practices and CI/CD security integration.

Responsibilities

Drive security initiatives for PTC CAD organization.
Strengthen application security across a complex desktop architecture with connected components and AI capabilities.
Ensure compliance with SOC 2 and FedRAMP requirements.
Collaborate closely with engineering, security champions, and compliance teams to embed security best practices throughout the SDLC.
Mature security controls across the Secure SDLC for desktop applications.
Lead SOC 2 readiness and compliance activities.
Address security implications of AI features and cloud-connected components.
Drive secure architecture reviews, create security requirements, threat modeling, and oversee vulnerability management.
Collaborate on security processes for DevSecOps and CI/CD pipelines.
Manage partner security aspects of partner engagements as well as usage of opensource components.
Define technical security requirements for PTC CAD product features, including AI and connected services.
Conduct threat modeling and secure architecture reviews for new functionality.
Manage SOC 2 compliance, annual security assessments and audits.
Work directly with engineering scrum teams to plan and oversee complex security projects.
Manage vulnerability prioritization and remediation efforts across functional teams.
Improve security best practices and ensure security is “built-in” across the product lifecycle.
Oversee rollout of security controls, scanning tools (SAST, DAST, SCA), and process updates.
Collaborate on product security standards, policies, and incident response.
Communicate security posture and compliance status to internal and external stakeholders.