Product Security Engineer
Aras Corporation5 months ago
Remote, United States or Andover, MA, USAMid Level
Base Salary
$100k - $125k/yr
Responsibilities
- Monitor Azure cloud infrastructure and analyze and prioritize security alerts.
- Respond to Level 2 security incidents and coordinate mitigation and resolution activities.
- Investigate complex security incidents in Aras SaaS and conduct forensic analysis as needed.
- Develop, refine, customize, and tune SOC detection mechanisms and security tools.
- Own the end-to-end SOC function, including workflows, runbooks, escalation models, and continuous improvement.
- Act as the primary incident commander for security events and drive operational security decisions.
- Build and mature SOC capabilities by onboarding data sources, improving alert fidelity, and optimizing operational processes.
- Develop scripts and tools to automate security response and mitigation processes.
- Prepare incident reports and documentation for technical and non-technical stakeholders.
- Leverage and evaluate AI/ML-powered security tools, anomaly detection models, LLM-based copilots, and automated investigation frameworks.
- Assess security risks associated with AI workloads, including model abuse, prompt injection, data leakage, and adversarial scenarios.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Three to five years of experience in information security, specifically in a SOC environment.
- Experience operating security functions in Azure GovCloud or GCC High environments, including segregated environments, boundary protections, and compliance-driven logging limitations.
- Understanding of FedRAMP High, NIST 800-53, DoD SRG, and data residency requirements.
- Practical experience securing Azure GovCloud environments subject to NIST 800-171 and CMMC 2.0 for protection of CUI.
- Proficiency with security information and event management (SIEM) tools and technologies.
- Strong understanding of network security, endpoint security, and cloud security principles.
- Experience with scripting languages such as Python and PowerShell for automation.
- Microsoft Certified: Security Operations Analyst Associate or another relevant Azure certification.
- Experience with Azure cloud services and Managed Detection and Response (MDR) services is preferred.
- Strong analytical, problem-solving, communication, teamwork, decision-making, and high-pressure response skills.
Benefits
- Flexible paid time off, company-paid holidays, and a dedicated Global Wellness Day.
- 401(k) plan with company match.
- Medical, dental, and vision insurance with high premium contributions and deductible reimbursement.
- Company-paid life insurance and short- and long-term disability coverage.
About Aras Corporation
Aras builds Aras Innovator, a low‑code product lifecycle management (PLM) and digital thread platform used by engineering and manufacturing organizations to manage multi‑CAD data, changes, requirements, and quality. It sells enterprise subscriptions, cloud hosting, and services for configuring and integrating PLM across complex IT landscapes. Founded in 2000 and headquartered in Andover, Massachusetts, Aras is privately held and operates subsidiaries such as XPLM that focus on integrations between ECAD, PLM, and related systems.