This is a remote position.
About the Job
As a Senior Cybersecurity Engineer at Aspire, you will lead the execution of the organization's information security program across cloud infrastructure, SaaS platforms, and enterprise environments. This is a hands-on engineering role focused on strengthening security, maintaining regulatory compliance, managing security operations, and partnering with engineering teams to build secure and scalable solutions.
What you'll do
- Manage and maintain cybersecurity compliance programs, including NYDFS Cybersecurity Regulation 500, ISO 27001, and enterprise security requirements.
- Conduct vulnerability assessments, coordinate penetration testing, and drive remediation efforts across cloud and internal environments.
- Monitor and respond to security events using AWS security services, SIEM platforms, and other security tools.
- Develop and maintain incident response processes, security controls, and identity and access management (IAM) practices.
- Partner with engineering teams to integrate security into the SDLC through secure coding practices, threat modeling, and application security reviews.
- Support vendor risk assessments, client security reviews, and security documentation for audits and compliance.
- Serve as the security subject matter expert for cloud security, API security, and OWASP Top 10 best practices.
What you'll need
- 7+ years of experience in cybersecurity engineering or information security, preferably within SaaS, fintech, or cloud-based environments.
- Strong experience with cloud security (AWS preferred), identity and access management, logging, monitoring, and security operations.
- Experience with compliance frameworks such as NYDFS, ISO 27001, SOC 2, PCI DSS, or similar.
- Hands-on experience with SIEM platforms, vulnerability management, penetration testing, and incident response.
- Strong understanding of application security, API security, secure SDLC, and OWASP Top 10.
- Excellent communication skills with experience supporting audits, security documentation, and cross-functional collaboration.
- Professional certifications such as CISSP, CISM, or CEH are preferred.
- Awareness or knowledge of IT security best practices as defined by ISO/SOC or similar.