Cybersecurity Engineer

What we do- Aspen is a technology leader in sustainability and electrification solutions. The Company's aerogel technology enables its customers and partners to achieve their own objectives around the global megatrends of resource efficiency, e-mobility, and clean energy. Aspen's PyroThin® products enable solutions to thermal runaway challenges within the electric vehicle (EV) market. The Company's Cryogel® and Pyrogel® products are valued by the world's largest energy infrastructure companies. Aspen's strategy is to partner with world-class industry leaders to leverage its Aerogel Technology Platform® into additional high-value markets. Aspen is headquartered in Northborough, Mass.What we value-At Aspen, our values reflect who we are and how we work both with each other and our customers, suppliers, and communities. They shape our interactions, guide our decisions, and inspire us to bring our best. Whether collaborating internally or externally, our values drive us to make a meaningful impact within Aspen and in all our relationships.Aspen’s CORE ValuesWe Do the Right ThingWe are Problem SolversWe are AlliesWe Drive ForwardWhat you will do- An experienced, hands-on cybersecurity position responsible for independently managing security operations, technical projects, incident investigations, compliance remediation, and security platform improvements while providing guidance to junior staff and serving as an operational and technical backup to the manager of the Cybersecurity team.How will you do it- Evaluate, implement, and maintain security controls across corporate IT, data center, cloud, and industrial/OT environments while maintaining appropriate segmentation, resilience, and access controls.Administer and improve enterprise security platforms, including firewalls, SIEM, EDR, vulnerability management, email security, PAM, password management, SASE, and related monitoring technologies.Investigate security alerts and incidents, correlate evidence across multiple platforms, determine scope and impact, coordinate containment and recovery, and document findings and corrective actions.Lead or independently support cybersecurity projects such as firewall deployments, SIEM integrations, vulnerability remediation initiatives, privileged access improvements, email authentication enforcement, network segmentation, and security tool optimization.Support customer and internal audits like TISAX by interpreting requirements, assessing control maturity, identifying gaps, developing remediation plans, and producing defensible implementation statements and evidence.Translate audit findings, vulnerabilities, and risk assessments into assigned corrective actions; track remediation progress and validate effective closure.Manage SPF, DKIM, and DMARC onboarding for third party senders; analyze message headers and authentication results; and coordinate remediation with vendors and internal system owners.Improve security awareness and phishing simulation programConduct technical and security reviews of vendors, applications, architecture changes, remote access requests, and proposed integrations through established risk, architecture review, and change management processes.Perform and improve recurring identity and access reviews, including privileged accounts, administrative roles, vendor access, service accounts, and user lifecycle controls.Develop and maintain security policies, standards, procedures, network diagrams, incident playbooks, operational metrics, risk documentation, and executive ready reporting.Why you are right for the job- Bachelor’s degree in computer science, Information Security, or a related field, preferred.5+ years of experience or equivalent demonstrated technical capability in cybersecurity, networking, or infrastructure, ideally spanning multiple security disciplines.Certifications such as Security+, CySA+, PenTest+, CCNA, CEH, GCIH, or GICSP.Demonstrated Skills and Competencies:Required:Strong working knowledge of firewalls, routing and switching, network segmentation, secure remote access, and Network security design and segmentation.Demonstrated ability to independently investigate security alerts, incidents, and complex technical problems without relying on predefined checklists.Experience owning a security platform or project from requirements and design through implementation, documentation, and ongoing operation.Comfort working across multiple disciplines and developing expertise in new tools, technologies, regulatory requirements, and business environments.Ability to assess technical risk, recommend practical controls, and clearly communicate findings to technical and nontechnical stakeholders.Preferred:Experience securing manufacturing, industrial, or OT environments.Experience with security frameworks or assessments such as NIST CSF, TISAX, or customer-specific requirements.Experience with SPF, DKIM, DMARC, and enterprise email-security platforms.Experience administering SIEM, EDR, PAM, SASE, vulnerability-management, or firewall platforms.Experience with Active Directory, Entra ID, and Windows security.Experience conducting vendor risk assessments, architecture reviews, or change-control reviews.What to expect- Physical Demands and Work Environment:Frequently required to standFrequently required to walkOccasionally required to sitFrequently required to utilize hand and finger dexterityOccasionally required to climb, balance, bend, stoop, kneel or crawlOccasionally exposed to wet and/or humid conditions (non-weather)Occasionally works near moving mechanical parts Occasionally works around fumes, airborne particles, or toxic chemicals Occasionally exposed to outside weather conditions Occasionally exposed to extreme heat or cold (non-weather)The employee must occasionally lift and/or move up to __50lbs_ poundsThe above is intended to describe the general content of and requirements for the performance of this job. It is not to be construed as an exhaustive statement of duties, responsibilities or physical requirements. Nothing in this job description restricts management’s right to assign or reassign duties and responsibilities to this job at any time. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.PERKS OF JOINING OUR TEAM!Aspen is committed to offering a comprehensive benefits package, a positive and productive work environment, encouraged work/life and family balance, and opportunities for growth and development, in a culture that is focused on inclusion, sustainability, and working together to solve the world’s toughest challenges. Aspen is proud to offer a competitive benefits package including Medical, Dental, Vision, Tuition Reimbursement, Paid Holidays, Sick Time, and PTO. In addition, we also offer 401k Employer Match, Life and Disability Insurance, and other benefits.Expected Compensation: Between $115,000 and $130,000 USD/year based on experienceAspen Aerogels, Inc. is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, age, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.Aspen Aerogels, Inc. is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please send an e-mail to View email address on click.appcast.io or call and leave a voice message at View phone number on click.appcast.io and let us know the nature of your request and your contact information and we will return your message.Job SummaryRequisition Number: CYBER001366Job Category: Information TechnologySchedule: Full-Time