Product Security Engineer - Bedford - Aspen Technology

    Aspen Technology
    Aspen Technology Bedford

    1 week ago

    $125,000 - $190,000 (USD) per year *
    Description

    The Role

    Under the direction of the VP of Product Security this role is a key member for day-to-day operations of Product Security at Aspen Technology. This role will help protect our clients, enable teams to deliver secure development, and position us for future security needs. This thought leader will help drive mitigation of risk thru activities such as developing Threat Models, driving Risk Assessments, reviewing alignment of standard controls to mitigate risks in products, oversee vulnerability tracking, ensure security documentation and compliance with security lifecycle activities for product security releases. This could include supporting compliance documents, secure patch release, security incidents, security communications, the security champion program, and product security verification/validation activities. This role will work closely with development teams, senior leaders, and teams across the organization. This role will work with teams across the organization to mitigate risks, protect our customers, protect our assets, and enable secure activities. The Sr. Product Security Engineer will support the development and execution of product security strategic efforts to meet business and technology objectives. This role will also support the continuously improving product security policies, procedures, tools, guidelines, and security awareness. This role will also maintain a vigilant awareness of industry threats, standards, regulations, and best practices to enhance our security profile.

    Your Impact

    • Responsible for supporting the design, implementation, and oversight of Product Secure Development Lifecycle. Including aspects such as security requirements, secure architecture/design, risk assessment, threat models, security scanning, triage, vulnerability management, security design reviews and product security validation/verification.
    • Administers product security practices to product teams, technology, and security champions across the organization.
    • Drive Product Security efforts to resolve challenges, enable automation, and impact organization security culture.
    • Monitors information security best practices, standards, regulations, industry threats and risks for improvements to product security practices.
    • Maintains a deep understanding of current issues in the realm of information security. Subscribes to major industry newsgroups and mailing lists and assesses the impact of all emerging issues on systems and practices at Aspen Technology.
    • Monitors security bulletins and alerts from all Aspen Technology's information system vendors. Evaluates vulnerability impact and formulates and executes risk mitigation plans for product security.
    • Member of the AspenTech Security Emergency Response Team (ASERT) providing expert analysis of security customer reported security incidents. Works with information resource owners during and after security incidents; work with product teams for analysis; recommends best practices and solutions. Where appropriate, work with product teams, technology teams, client support and customer contacts.
    • Occasionally after hours and weekends work to perform tasks that cannot be done during business hours.

    What You'll Need

    • Bachelor's degree (B.A./B.S.) or equivalent in computer science or technical equivalent discipline from an accredited college or university required.
    • 1-3+ years of experience in IT required.
    • 1-3+ years of experience in an information security role or experience with security and development teams.
    • Knowledge of information security regulatory requirements for privacy, secure by design, secure by default and defense in depth.
    • Maintains a broad understanding of information security including ISO27002, NIST 800 and information security frameworks and regulations.
    • Desired experience with Application/Product Security, Risk Assessment, Threat Models, Secure Architecture/Design, compliance, and audit.
    • Desired experience with cloud solutions such as Azure and AWS - Experience with security policy, procedures, tools, services, and cloud security models.
    • Demonstrated ability to plan, design, develop, deploy, and maintain application security best practices.
    • Ability to assume high levels of responsibility and to work with a minimum of day-to-day supervision.
    • Ability to cooperatively and effectively work with people from all organizational levels and build consensus through negotiation and diplomacy.
    • Preferable exposure to the following: IEC , IEC , NIST 800-53, ISO 27001, ISO 27002, Cloud Security Alliance (CSA), Cybersecurity and Infrastructure Security Agency (CISA), SANS, OWASP, CWE 25, and AI Security best practices.
    • Desired domain knowledge and/or certification: CISSP, CISA, CCSP, CSSLP, CEH, SANS GIAC, security certification from AWS or Azure.
    • Desired knowledge of the following Technologies: Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA).
    • Desired experience with Application Security Best Practices such as web security, cloud security, pen testing, fuzz testing, security coding guidelines, security architecture/design principles, CVSS, STRIDE, DREAD.
    • Experience with Application development technologies, processes, and best practices. For example: SAFE/Agile, RUP, CICD, DevSecOps.
    * This salary range is an estimation made by beBee
  • Work in company

    Information System Security Engineer

    Only for registered members

    Astrion has an exciting opportunity for a Senior Informaiton System Security Engineer located at Hanscom AFB in Bedford Massachusetts providing support in the C3I and Infrastructure Division (AFLCMC/HNI) which focuses on providing enterprise support to over 110 active Air Force, ...

    Bedford $160,000 - $175,000 (USD)

    1 month ago

  • Work in company

    Associate Embedded Security Engineer

    Only for registered members

    Lensa does not hire directly for these jobs but promotes them on behalf of its clients. Why choose between doing meaningful work and having a fulfilling life at MITRE? We're making a difference every day—working for a safer, healthier, and more secure nation and world. · Develop ...

    Bedford

    1 month ago

  • Work in company

    Principal Product Security Engineer

    Only for registered members

    The Principal Product Security Engineer will help protect clients, enable teams to deliver secure development, and position AspenTech for future security needs. · This thought leader will drive mitigation of risk through activities such as developing Threat Models, driving Risk A ...

    Bedford $120,900 - $151,100 (USD) Full time

    1 month ago

  • Work in company

    Cloud Engineer with Security Clearance

    Only for registered members

    Cloud Engineer This position focuses on Cloud Engineering and Management and will coordinate across multiple areas as the program supports AWS, Azure, Google, and Oracle clouds. This is an exciting opportunity to use your experience to modernize a leading, global-scale multi-clou ...

    Bedford $110,000 - $180,000 (USD) per year

    3 days ago

  • Work in company

    Principal Product Security Engineer

    Only for registered members

    The driving force behind our success has always been the people of AspenTech. What drives us, is our aspiration, our desire and ambition to keep pushing the envelope, overcoming any hurdle, challenging the status quo to continually find a better way. You will experience these qua ...

    Bedford, MA

    2 weeks ago

  • Work in company

    Engineer Software with Security Clearance

    Only for registered members

    Principal Software Engineer with Security Clearance · A high-level software engineer position available at Applied Research Solutions, supporting the Command, Control, Communications, and Battle Management Division (C3BM) at Hanscom AFB. This role will be part of an integrated De ...

    Bedford

    1 week ago

  • Work in company

    Cybersecurity Engineer with Security Clearance

    Only for registered members

    Leidos is seeking a Cybersecurity Engineer to work on modernizing a leading global-scale multi-cloud environment in support of a critical mission. · ...

    Bedford

    2 weeks ago

  • Work in company

    Security Engineer

    Only for registered members

    This is a job summary for a Security Engineer. · Manage and lead technical projects and security initiatives globally and within the regionEngineer, implement and monitor security measures for the protection of computer systems, networks and informationIdentify and define system ...

    Wilmington

    1 month ago

  • Work in company

    Application Security Engineer

    Only for registered members

    Job summary · State Street Cyber Security Architecture & Engineering team seeks accomplished professional with proven expertise in Application Security (AppSec) and DevSecOps. · Help build our DevSecOps & AppSec Strategy to integrate cybersecurity into the organizational adoption ...

    Burlington $120,000 - $202,500 (USD) Full time

    3 weeks ago

  • Work in company

    Cyber Security Engineer

    Only for registered members

    The Product Security Leader PSR is part of our security team and helps safeguard the integrity, confidentiality, and availability of our healthcare technology products. This role works cross-functionally with Engineering, Product, Compliance, and DevOps teams to embed security in ...

    Burlington $105,600 - $158,400 (USD) Full time

    2 weeks ago

  • Work in company

    Systems Engineer Journeyman with Security Clearance

    Only for registered members

    Job Title: Systems Engineer Journeyman with Security Clearance · Why Work With Us? · Responsibilities: · ...

    Bedford

    1 week ago

  • Work in company

    Information System Security Engineer

    Only for registered members

    HX5 is currently seeking an Information System Security Engineer to support the HNJ Division at Hanscom Air Force Base, MA. · This position is expected to pay $128,516-$180,557 annually; depending on experience, education, and any certifications that are directly related to the p ...

    Hanscom AFB $128,516 - $180,557 (USD)

    1 month ago

  • Work in company

    Information System Security Engineer

    Only for registered members

    We have an exciting opportunity for a Senior Informaiton System Security Engineer located at Hanscom AFB in Bedford Massachusetts providing support in the C3I and Infrastructure Division (AFLCMC/HNI) which focuses on providing enterprise support to over 110 active Air Force, Air ...

    Hanscom AFB, MA

    1 month ago

  • Work in company

    Information System Security Engineer

    Only for registered members

    Astrion has an exciting opportunity for a Senior Informaiton System Security Engineer located at Hanscom AFB in Bedford Massachusetts providing support in the C3I and Infrastructure Division (AFLCMC/HNI). ...

    Hanscom AFB $160,000 - $175,000 (USD)

    3 weeks ago

  • Work in company

    Information System Security Engineer

    Only for registered members

    HX5 is currently seeking an Information System Security Engineer to support the HNJ Division at Hanscom Air Force Base, MA. · Master's or Doctorate degree and at least ten (10) years of job experience, minimum of ten (10) years of progressive technical experience related to IA/cy ...

    Hanscom AFB, MA

    1 month ago

  • Work in company

    Information Systems Security Engineer

    Only for registered members

    Odyssey Systems has an exciting opportunity for a Senior Information Systems Security Engineer (ISSE) supporting the AFLCMC/HNJ Special Programs Division, located at Hanscom Air Force Base, MA. · ...

    Hanscom AFB, MA

    2 months ago

  • Work in company

    Senior Security Engineer

    Only for registered members

    Job Title: Security Engineer · Company: Trigent Software Inc. · Location: Billerica, MA · Type: Full-time (Direct Hire), Hybrid · Salary: TBD · Role Highlights: · Lead security incidents & investigations as SME. Scale incident response, create runbooks & post-mortems, run tableto ...

    Billerica $150,000 - $230,000 (USD) per year

    2 weeks ago

  • Work in company

    Communications and Networking Engineer with Security Clearance

    Only for registered members

    MITRE is seeking a Communications and Networking Engineer to provide expertise and support to critical challenges in the Air Force Nuclear Enterprise. The position involves technical guidance through modeling, simulation, and analytical methods. · ...

    Bedford

    1 month ago

  • Work in company

    Senior Security Engineer

    Only for registered members

    Job Title: · Security Engineer · Company: · Trigent Software Inc. · Location: · Billerica, MA · Type: · Full-time (Direct Hire), Hybrid · Salary: · TBD · Role Highlights: · Lead security incidents & investigations as SME. Scale incident response, create runbooks & post-mortems, r ...

    Billerica, MA $150,000 - $230,000 (USD) per year

    2 weeks ago

  • Work in company

    Software Engineer with Security Clearance

    Only for registered members

    This is a full-time position for a Software Engineer with Security Clearance at McBride Consulting. The role involves general software engineering & development tasks such as feasibility analysis, problem definition, solution evaluation, documentation of solutions using diagrams/ ...

    Hanscom AFB

    1 month ago

  • As a Senior Cybersecurity Engineer / Information Systems Security Manager (ISSM) with MTSI you will support a customer operating out of Wright Patterson AFB) in Dayton, OH or Hanscom AFB, MA. The ISSE serves as the Program Office's information security professional responsible fo ...

    Hanscom AFB

    1 month ago

Jobs
>
Product security engineer
>
Jobs for Product security engineer in Bedford