Cybersecurity Engineer

What we do- Aspen•Northborough, MA

8d•Onsite

About The Position

Aspen is a technology leader in sustainability and electrification solutions. The Company's aerogel technology enables its customers and partners to achieve their own objectives around the global megatrends of resource efficiency, e-mobility, and clean energy. Aspen's PyroThin® products enable solutions to thermal runaway challenges within the electric vehicle ("EV") market. The Company's Cryogel® and Pyrogel® products are valued by the world's largest energy infrastructure companies. Aspen's strategy is to partner with world-class industry leaders to leverage its Aerogel Technology Platform® into additional high-value markets. Aspen is headquartered in Northborough, Mass. At Aspen, our values reflect who we are and how we work both with each other and our customers, suppliers, and communities. They shape our interactions, guide our decisions, and inspire us to bring our best. Whether collaborating internally or externally, our values drive us to make a meaningful impact within Aspen and in all our relationships. Aspen’s CORE Values We Do the Right Thing We are Problem Solvers We are Allies We Drive Forward

Requirements

5+ years of experience or equivalent demonstrated technical capability in cybersecurity, networking, or infrastructure, ideally spanning multiple security disciplines.
Certifications such as Security+, CySA+, PenTest+, CCNA, CEH, GCIH, or GICSP.
Strong working knowledge of firewalls, routing and switching, network segmentation, secure remote access, and Network security design and segmentation.
Demonstrated ability to independently investigate security alerts, incidents, and complex technical problems without relying on predefined checklists.
Experience owning a security platform or project from requirements and design through implementation, documentation, and ongoing operation.
Comfort working across multiple disciplines and developing expertise in new tools, technologies, regulatory requirements, and business environments.
Ability to assess technical risk, recommend practical controls, and clearly communicate findings to technical and nontechnical stakeholders.

Nice To Haves

Bachelor’s degree in computer science, Information Security, or a related field, preferred.
Experience securing manufacturing, industrial, or OT environments.
Experience with security frameworks or assessments such as NIST CSF, TISAX, or customer-specific requirements.
Experience with SPF, DKIM, DMARC, and enterprise email-security platforms.
Experience administering SIEM, EDR, PAM, SASE, vulnerability-management, or firewall platforms.
Experience with Active Directory, Entra ID, and Windows security.
Experience conducting vendor risk assessments, architecture reviews, or change-control reviews.

Responsibilities

Evaluate, implement, and maintain security controls across corporate IT, data center, cloud, and industrial/OT environments while maintaining appropriate segmentation, resilience, and access controls.
Administer and improve enterprise security platforms, including firewalls, SIEM, EDR, vulnerability management, email security, PAM, password management, SASE, and related monitoring technologies.
Investigate security alerts and incidents, correlate evidence across multiple platforms, determine scope and impact, coordinate containment and recovery, and document findings and corrective actions.
Lead or independently support cybersecurity projects such as firewall deployments, SIEM integrations, vulnerability remediation initiatives, privileged access improvements, email authentication enforcement, network segmentation, and security tool optimization.
Support customer and internal audits like TISAX by interpreting requirements, assessing control maturity, identifying gaps, developing remediation plans, and producing defensible implementation statements and evidence.
Translate audit findings, vulnerabilities, and risk assessments into assigned corrective actions; track remediation progress and validate effective closure.
Manage SPF, DKIM, and DMARC onboarding for third party senders; analyze message headers and authentication results; and coordinate remediation with vendors and internal system owners.
Improve security awareness and phishing simulation program
Conduct technical and security reviews of vendors, applications, architecture changes, remote access requests, and proposed integrations through established risk, architecture review, and change management processes.
Perform and improve recurring identity and access reviews, including privileged accounts, administrative roles, vendor access, service accounts, and user lifecycle controls.
Develop and maintain security policies, standards, procedures, network diagrams, incident playbooks, operational metrics, risk documentation, and executive ready reporting.