Cybersecurity Engineer

Aspen Aerogels is seeking an experienced, hands-on Cybersecurity Engineer to manage security operations, technical projects, incident investigations, compliance remediation, and security platform improvements. The role also provides guidance to junior staff and serves as an operational and technical backup to the Cybersecurity team manager.

Responsibilities:

• Evaluate, implement, and maintain security controls across corporate IT, data center, cloud, and industrial/OT environments while maintaining appropriate segmentation, resilience, and access controls
• Administer and improve enterprise security platforms, including firewalls, SIEM, EDR, vulnerability management, email security, PAM, password management, SASE, and related monitoring technologies
• Investigate security alerts and incidents, correlate evidence across multiple platforms, determine scope and impact, coordinate containment and recovery, and document findings and corrective actions
• Lead or independently support cybersecurity projects such as firewall deployments, SIEM integrations, vulnerability remediation initiatives, privileged access improvements, email authentication enforcement, network segmentation, and security tool optimization
• Support customer and internal audits like TISAX by interpreting requirements, assessing control maturity, identifying gaps, developing remediation plans, and producing defensible implementation statements and evidence
• Translate audit findings, vulnerabilities, and risk assessments into assigned corrective actions; track remediation progress and validate effective closure
• Manage SPF, DKIM, and DMARC onboarding for third party senders; analyze message headers and authentication results; and coordinate remediation with vendors and internal system owners
• Improve security awareness and phishing simulation program
• Conduct technical and security reviews of vendors, applications, architecture changes, remote access requests, and proposed integrations through established risk, architecture review, and change management processes
• Perform and improve recurring identity and access reviews, including privileged accounts, administrative roles, vendor access, service accounts, and user lifecycle controls
• Develop and maintain security policies, standards, procedures, network diagrams, incident playbooks, operational metrics, risk documentation, and executive ready reporting

Requirements:

• 5+ years of experience or equivalent demonstrated technical capability in cybersecurity, networking, or infrastructure, ideally spanning multiple security disciplines
• Strong working knowledge of firewalls, routing and switching, network segmentation, secure remote access, and Network security design and segmentation
• Demonstrated ability to independently investigate security alerts, incidents, and complex technical problems without relying on predefined checklists
• Experience owning a security platform or project from requirements and design through implementation, documentation, and ongoing operation
• Comfort working across multiple disciplines and developing expertise in new tools, technologies, regulatory requirements, and business environments
• Ability to assess technical risk, recommend practical controls, and clearly communicate findings to technical and nontechnical stakeholders
• Bachelor's degree in computer science, Information Security, or a related field, preferred
• Experience securing manufacturing, industrial, or OT environments
• Experience with security frameworks or assessments such as NIST CSF, TISAX, or customer-specific requirements
• Experience with SPF, DKIM, DMARC, and enterprise email-security platforms
• Experience administering SIEM, EDR, PAM, SASE, vulnerability-management, or firewall platforms
• Experience with Active Directory, Entra ID, and Windows security
• Experience conducting vendor risk assessments, architecture reviews, or change-control reviews