Responsibilities:

Support the deployment of robust application security testing tooling in support of the application lifecycle of PTC products.

Maintain and improve the application security testing suite to reduce vulnerabilities introduced into the PTC production environment.

Support the expanding bug bounty and application penetration testing efforts across PTC.

Participate in activities to support the integration of security controls throughout the SDLC.

Assist in the process of reviewing designs of new applications and products.

Participate in the security testing efforts against our applications, including code reviews, black/white box testing of applications, and maintaining a continuous testing methodology.

The qualifications below are ideal, but not all are required. We encourage candidates to apply if they satisfy some, but not all, qualifications.

3-5 years of experience in information security or equivalent experience

2-3 years of experience in hands-on application and product security disciplines or equivalent experience

Experience with cloud technologies (i.e., AWS, Azure, Salesforce)

Experience working with Salesforce Lighting, Salesforce Customer 360, or Salesforce field service products.

Experience with threat modeling, systems analysis, and security design reviews

Familiarity with SAST, DAST, SCA, and penetration testing methodologies

Good written and verbal communication skills

Understanding of application and product architectures, scripting-based programming languages, web application stacks, and general approaches to implementation of an SDLC

Ability to prioritize security efforts to mitigate the appropriate risks

Ability to identify, analyze, and explain the present or future needs for proposed security initiatives to team leads

Ability to influence with empathy and compassion

Bonus: Experience with CI/CD practices and platform tools (Jenkins, Travis, GitHub, etc.)

Bonus: Background with containers and orchestration technologies (Docker, Kubernetes, Helm)

Ideal candidates will thrive in our culture if they have a passion for:

Building quality products with a mindset on safety and security

Operating in a fast-moving and high-growth environment

Working as a team player with an entrepreneurial work ethic

Security, learning, and continuous improvement

Information/Cyber Security Analyst