Information Security Engineer

Why Join AspenView?

• At AspenView, we’re more than a nearshore IT partner, we’re a people-first, purpose-driven company that believes great culture drives great outcomes. We’re passionate about connecting talent and technology to deliver measurable value for clients, and meaningful career paths for our people.

About the Role

• The Information Security Engineer I plays a critical role in maintaining the confidentiality, integrity, and availability of company data and systems. Working as part of a dynamic and dedicated Information Security team within a transforming organization, you will apply fundamental security concepts and practices to assigned activities, helping strengthen the company’s security posture and safeguard against evolving threats.
  With the support of the broader team, you will help lead the evaluation, deployment, and improvement of key Information Technology General Controls (ITGC), including cybersecurity controls, and support security operations across on-premises and cloud environments. You will collaborate closely with Information Services and other teams across the enterprise. Based on business need and your area of expertise, you will be assigned to one or more focus areas: Security Design, Security Engineering, Security Operations, and/or Governance, Risk and Compliance.

What You Will Do
Security Design

• Assist in developing security requirements and guidelines to protect company systems and data.
• Collaborate with senior security professionals and vendors to contribute to the evaluation, design, and selection of security technologies and solutions.
• Support the design and continuous improvement of the vulnerability management program, including assessments, penetration tests, and threat analysis.

Security Engineering

• Participate in security reviews of systems, applications, and networks to identify potential vulnerabilities and recommend appropriate security measures.
• Assist in the implementation and administration of security tools and infrastructure.
• Contribute to the development and enhancement of security controls and overarching solutions.
• Assist in developing plans for risk analysis, vulnerability scans, penetration tests, and additional audits and assessments.
• Support the development of a defense-in-depth strategy to protect critical IT assets and data from internal and external threats.

Security Operations

• Monitor security systems, tools, and logs to identify and respond to security incidents, vulnerabilities, and threats.
• Work with IT teams such as Infrastructure, Desktop Engineering, and Applications to patch and maintain systems in compliance with up-to-date security baselines, and to investigate and resolve security-related issues and incidents.
• Conduct regular security assessments and audits of systems and networks.
• Stay current on security technologies, news, trends, and vulnerabilities as they relate to the organization’s environment and security landscape.
• Assist in the tracking and remediation of vulnerabilities and other security findings.
• Document and update Information Security program procedures and workflows as needed.

Governance, Risk and Compliance

• Support compliance initiatives through audits and by ensuring adherence to industry standards, best practices, and regulations (e.g., PCI-DSS, GDPR).
• Assist in risk assessments and provide recommendations to manage and mitigate security risks.
• Ensure project work and products comply with security policies, and contribute to policy and procedure development.
• Assist in the development and enforcement of security governance practices, including security policies, processes, and procedures.
• Support regular disaster recovery testing.

What You Bring
Education

• Bachelor’s degree in Information Systems, Computer Science, Cyber Security, or a related field (preferred), or equivalent experience.

Experience

• 1–4 years of experience as an Information Security Analyst or Information Security Engineer, including at least 2 years in Information Security in a technical capacity.
• Experience in two or more of the following: SIEM tools, endpoint protection, IDS/IPS systems, vulnerability scanning tools, network security, data loss prevention, or malware analysis.
• Experience working with identity and access control management solutions.
• Experience securing cloud infrastructure such as Microsoft Azure or Amazon Web Services (AWS).