Cybersecurity Engineer

An experienced, hands-on cybersecurity position responsible for independently managing security operations, technical projects, incident investigations, compliance remediation, and security platform improvements while providing guidance to junior staff and serving as an operational and technical backup to the manager of the Cybersecurity team.

How will you do it-

• Evaluate, implement, and maintain security controls across corporate IT, data center, cloud, and industrial/OT environments while maintaining appropriate segmentation, resilience, and access controls.
• Administer and improve enterprise security platforms, including firewalls, SIEM, EDR, vulnerability management, email security, PAM, password management, SASE, and related monitoring technologies.
• Investigate security alerts and incidents, correlate evidence across multiple platforms, determine scope and impact, coordinate containment and recovery, and document findings and corrective actions.
• Lead or independently support cybersecurity projects such as firewall deployments, SIEM integrations, vulnerability remediation initiatives, privileged access improvements, email authentication enforcement, network segmentation, and security tool optimization.
• Support customer and internal audits like TISAX by interpreting requirements, assessing control maturity, identifying gaps, developing remediation plans, and producing defensible implementation statements and evidence.
• Translate audit findings, vulnerabilities, and risk assessments into assigned corrective actions; track remediation progress and validate effective closure.
• Manage SPF, DKIM, and DMARC onboarding for third party senders; analyze message headers and authentication results; and coordinate remediation with vendors and internal system owners.
• Improve security awareness and phishing simulation program
• Conduct technical and security reviews of vendors, applications, architecture changes, remote access requests, and proposed integrations through established risk, architecture review, and change management processes.
• Perform and improve recurring identity and access reviews, including privileged accounts, administrative roles, vendor access, service accounts, and user lifecycle controls.
• Develop and maintain security policies, standards, procedures, network diagrams, incident playbooks, operational metrics, risk documentation, and executive ready reporting., * Frequently required to stand
• Frequently required to walk
• Occasionally required to sit
• Frequently required to utilize hand and finger dexterity
• Occasionally required to climb, balance, bend, stoop, kneel or crawl
• Occasionally exposed to wet and/or humid conditions (non-weather)
• Occasionally works near moving mechanical parts
• Occasionally works around fumes, airborne particles, or toxic chemicals
• Occasionally exposed to outside weather conditions
• Occasionally exposed to extreme heat or cold (non-weather)
• The employee must occasionally lift and/or move up to _50lbs pounds

• Bachelor’s degree in computer science, Information Security, or a related field, preferred.
• 5+ years of experience or equivalent demonstrated technical capability in cybersecurity, networking, or infrastructure, ideally spanning multiple security disciplines.
• Certifications such as Security+, CySA+, PenTest+, CCNA, CEH, GCIH, or GICSP.

Demonstrated Skills and Competencies:

Required:

• Strong working knowledge of firewalls, routing and switching, network segmentation, secure remote access, and Network security design and segmentation.
• Demonstrated ability to independently investigate security alerts, incidents, and complex technical problems without relying on predefined checklists.
• Experience owning a security platform or project from requirements and design through implementation, documentation, and ongoing operation.
• Comfort working across multiple disciplines and developing expertise in new tools, technologies, regulatory requirements, and business environments.
• Ability to assess technical risk, recommend practical controls, and clearly communicate findings to technical and nontechnical stakeholders.

Preferred:

• Experience securing manufacturing, industrial, or OT environments.
• Experience with security frameworks or assessments such as NIST CSF, TISAX, or customer-specific requirements.
• Experience with SPF, DKIM, DMARC, and enterprise email-security platforms.
• Experience administering SIEM, EDR, PAM, SASE, vulnerability-management, or firewall platforms.
• Experience with Active Directory, Entra ID, and Windows security.
• Experience conducting vendor risk assessments, architecture reviews, or change-control reviews.

Aspen is committed to offering a comprehensive benefits package, a positive and productive work environment, encouraged work/life and family balance, and opportunities for growth and development, in a culture that is focused on inclusion, sustainability, and working together to solve the world’s toughest challenges.

Aspen is proud to offer a competitive benefits package including Medical, Dental, Vision, Tuition Reimbursement, Paid Holidays, Sick Time, and PTO. In addition, we also offer 401k Employer Match, Life and Disability Insurance, and other benefits.

Expected Compensation: Between $115,000 and $130,000 USD/year based on experience

Aspen Aerogels, Inc. is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, age, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

Aspen is a technology leader in sustainability and electrification solutions. The Company’s aerogel technology enables its customers and partners to achieve their own objectives around the global megatrends of resource efficiency, e-mobility, and clean energy. Aspen’s PyroThin products enable solutions to thermal runaway challenges within the electric vehicle (“EV”) market. The Company’s Cryogel and Pyrogel products are valued by the world’s largest energy infrastructure companies. Aspen’s strategy is to partner with world-class industry leaders to leverage its Aerogel Technology Platform into additional high-value markets. Aspen is headquartered in Northborough, Mass.