Cybersecurity Engineer

United States, Massachusetts, Northborough

Oct 13, 2026

Aspen is a technology leader in sustainability and electrification solutions. The Company's aerogel technology enables its customers and partners to achieve their own objectives around the global megatrends of resource efficiency, e-mobility, and clean energy. Aspen's Pyro Thin products enable solutions to thermal runaway challenges within the electric vehicle ("EV") market. The Company's Cryogel and Pyrogel products are valued by the world's largest energy infrastructure companies.

Aspen's strategy is to partner with world-class industry leaders to leverage its Aerogel Technology Platform into additional high-value markets. Aspen is headquartered in Northborough, Mass.

At Aspen, our values reflect who we are and how we work both with each other and our customers, suppliers, and communities. They shape our interactions, guide our decisions, and inspire us to bring our best. Whether collaborating internally or externally, our values drive us to make a meaningful impact within Aspen and in all our relationships.

• We Do the Right Thing
• We are Problem Solvers
• We are Allies
• We Drive Forward

An experienced, hands-on cybersecurity position responsible for independently managing security operations, technical projects, incident investigations, compliance remediation, and security platform improvements while providing guidance to junior staff and serving as an operational and technical backup to the manager of the Cybersecurity team.

• Evaluate, implement, and maintain security controls across corporate IT, data center, cloud, and industrial/OT environments while maintaining appropriate segmentation, resilience, and access controls.
• Administer and improve enterprise security platforms, including firewalls, SIEM, EDR, vulnerability management, email security, PAM, password management, SASE, and related monitoring technologies.
• Investigate security alerts and incidents, correlate evidence across multiple platforms, determine scope and impact, coordinate containment and recovery, and document findings and corrective actions.
• Lead or independently support cybersecurity projects such as firewall deployments, SIEM integrations, vulnerability remediation initiatives, privileged access improvements, email authentication enforcement, network segmentation, and security tool optimization.
• Support customer and internal audits like TISAX by interpreting requirements, assessing control maturity, identifying gaps, developing remediation plans, and producing defensible implementation statements and evidence.
• Translate audit findings, vulnerabilities, and risk assessments into assigned corrective actions; track remediation progress and validate effective closure.
• Manage SPF, DKIM, and DMARC onboarding for third party senders; analyze message headers and authentication results; and coordinate remediation with vendors and internal system owners.
• Improve security awareness and phishing simulation program
• Conduct technical and security reviews of vendors, applications, architecture changes, remote access requests, and proposed integrations through established risk, architecture review, and change management processes.
• Perform and improve recurring identity and access reviews, including privileged accounts, administrative roles, vendor access, service accounts, and user lifecycle controls.
• Develop and maintain security policies, standards, procedures, network diagrams, incident playbooks, operational metrics, risk documentation, and executive ready reporting.

• Bachelor's degree in computer science, Information Security, or a related field, preferred.
• 5+ years of experience or equivalent demonstrated technical capability in cybersecurity, networking, or infrastructure, ideally spanning multiple security disciplines.
• Certifications such as Security+, CySA+, Pen Test+, CCNA, CEH, GCIH, or GICSP.

Required:

• Strong working knowledge of firewalls, routing and switching, network segmentation, secure remote access, and Network security design and segmentation.
• Demonstrated ability to independently investigate security alerts, incidents, and complex technical problems without relying on predefined checklists.
• Experience owning a security platform or project from requirements and design through implementation, documentation, and ongoing operation.
• Comfort working across…