Senior Cybersecurity Engineer

About the Job

As a Senior Cybersecurity Engineer at Aspire, you will lead the execution of the organization's information security program across cloud infrastructure, SaaS platforms, and enterprise environments. This is a hands-on engineering role focused on strengthening security, maintaining regulatory compliance, managing security operations, and partnering with engineering teams to build secure and scalable solutions.

What you'll do

• Manage and maintain cybersecurity compliance programs, including NYDFS Cybersecurity Regulation 500, ISO 27001, and enterprise security requirements.
• Conduct vulnerability assessments, coordinate penetration testing, and drive remediation efforts across cloud and internal environments.
• Monitor and respond to security events using AWS security services, SIEM platforms, and other security tools.
• Develop and maintain incident response processes, security controls, and identity and access management (IAM) practices.
• Partner with engineering teams to integrate security into the SDLC through secure coding practices, threat modeling, and application security reviews.
• Support vendor risk assessments, client security reviews, and security documentation for audits and compliance.
• Serve as the security subject matter expert for cloud security, API security, and OWASP Top 10 best practices.

What you'll need

• 7+ years of experience in cybersecurity engineering or information security, preferably within SaaS, fintech, or cloud-based environments.
• Strong experience with cloud security (AWS preferred), identity and access management, logging, monitoring, and security operations.
• Experience with compliance frameworks such as NYDFS, ISO 27001, SOC 2, PCI DSS, or similar.
• Hands-on experience with SIEM platforms, vulnerability management, penetration testing, and incident response.
• Strong understanding of application security, API security, secure SDLC, and OWASP Top 10.
• Excellent communication skills with experience supporting audits, security documentation, and cross-functional collaboration.
• Professional certifications such as CISSP, CISM, or CEH are preferred.
• Awareness or knowledge of IT security best practices as defined by ISO/SOC or similar.