We are Progress (Nasdaq: PRGS) - the trusted provider of software that enables our customers to develop, deploy and manage responsible, AI-powered applications and experience with agility and ease.
We’re proud to have a diverse, global team where we value the individual and enrich our culture by considering varied perspectives because we believe people power progress. Join us as a Software Architect and help us do what we do best: propelling business forward. Know more about us. Overview: We are seeking an experienced Product Security Architect to drive the security strategy, architecture, and secure engineering practices across the OpenEdge product portfolio. This role serves as the primary security authority for OpenEdge, partnering closely with Product Management, Engineering, Architecture, DevOps, Corporate Security, and SSCoE teams to ensure security is embedded throughout the product lifecycle.
The ideal candidate is a seasoned product security professional with deep knowledge of enterprise software platforms, secure software development, cloud and on-premises security models, vulnerability management, compliance frameworks, and security architecture. This individual will provide strategic technical leadership, influence product direction, and champion a security-first engineering culture.
In this role you will:
Product Security Strategy & Architecture
- Define and maintain the overall security architecture and roadmap for OpenEdge products.
- Act as the principal security advisor for product management, engineering leadership, and architecture teams.
- Evaluate emerging threats, technologies, and industry trends to influence product security investments.
- Lead security design reviews for major architectural initiatives and new product capabilities.
- Ensure security requirements are incorporated during roadmap planning and architectural runway activities.
Secure Software Development Lifecycle (SSDLC)
- Establish and enforce secure development practices across all OpenEdge teams.
- Define security quality gates for software design, implementation, testing, build, and release processes.
- Drive adoption and continuous improvement of OWASP SAMM and secure SDLC maturity initiatives.
- Provide guidance on secure coding, security testing, and vulnerability remediation practices.
Threat Modeling & Risk Management
- Lead threat modeling exercises for OpenEdge platform components.
- Identify and assess product security risks and recommend mitigation strategies.
- Conduct architecture risk assessments for new features, integrations, APIs, AI capabilities, and cloud services.
- Maintain risk registers and communicate security posture to leadership.
Security Testing & Vulnerability Management
- Drive SAST, DAST, SCA, penetration testing, and code review initiatives.
- Partner with engineering teams to prioritize and remediate vulnerabilities.
- Define vulnerability response, SLA tracking, and remediation processes.
- Provide technical oversight for coordinated vulnerability disclosure programs.
Platform & Infrastructure Security
- Establish security requirements for the OpenEdge Database, PASOE, authentication and authorization services, MCP integrations, DevOps tooling, cloud deployments, and container or Kubernetes platforms.
- Define secure deployment architectures and hardening recommendations.
Compliance & Governance
- Drive compliance initiatives, including SOC 2, security certifications, FIPS-related requirements, customer security assessments, and regulatory or contractual security obligations.
- Lead SBOM strategy, third-party component governance, and software supply chain security initiatives.
- Partner with Legal, Compliance, and Corporate Security teams to address security requirements.
Security Leadership & Cross-Functional Collaboration
- Serve as a trusted technical leader across OpenEdge Engineering.
- Mentor engineers, security champions, and architects on product security best practices.
- Influence strategic security decisions and investment prioritization.
- Present security posture, risks, and recommendations to senior leadership and executives.
Incident Response & Security Operations
- Support investigation of security incidents affecting OpenEdge products.
- Coordinate root-cause analysis and long-term remediation initiatives.
- Define product security response and communication processes.
Your background:
Education
- Bachelor's or Master's degree in Computer Science, Engineering, Cybersecurity, or a related discipline.
Experience
- 12+ years in software engineering, product security, or security architecture.
- 5+ years leading product security strategy for enterprise software products.
- Experience securing large-scale commercial software platforms.
- Proven success influencing engineering organizations and executive stakeholders.
Technologies
- C/C++, Java, JavaScript, and Python
- Linux/Unix and Windows Server
- Databases, REST APIs, and microservices architecture
Preferred Qualifications
- Experience with OpenEdge architecture, ABL, PASOE, OpenEdge Database, SQL, DevOps tooling, and enterprise middleware.
- Experience implementing AI/ML security controls and securing agentic AI systems.
- Experience supporting customer security reviews and enterprise compliance requests.
Leadership Competencies
- Strategic thinking and technical leadership
- Influencing without authority
- Executive communication
- Risk-based decision-making
- Cross-functional collaboration
- Mentoring and coaching
- Customer-centric mindset
Ideal Candidate Profile
A highly respected OpenEdge technical expert who combines deep platform knowledge with modern product security, DevSecOps, architecture governance, and executive-level leadership capabilities, acting as the security equivalent of a chief architect for the product.
If this sounds like you and fits your experience and career goals, we’d be happy to chat. What we offer in return is the opportunity to experience a great company culture with wonderful colleagues to learn from and collaborate with, and also to enjoy:
Compensation
- Competitive remuneration package
- Employee Stock Purchase Plan Enrolment
Vacation, Family, and Health
- 30 days of earned leave
- An extra day off for your birthday
- Various other leaves like marriage leave, casual leave, maternity leave, and paternity leave
- Premium Group Medical Insurance for employees and five dependents, personal accident insurance coverage, and life insurance coverage
- Professional development reimbursement
- Interest subsidy on loans - either vehicle or personal loans.