Principal Product Security Engineer

Bedford, MAPosted 10 months agoWebsite

Apply on Aspen Technology's site →

At a Glance

AWSAzureNISTThreat ModelingDevSecOpsCS/Security Degree

About This Role

This thought leader will help drive mitigation of risk through activities such as developing Threat Models, driving Risk Assessments, reviewing alignment of standard controls to mitigate risks in products, oversee vulnerability tracking, ensure security documentation and compliance with security lifecycle activities for product security releases.

Source: Aspen Technology careers · View original posting

Responsibilities

Support design, implementation, and oversight of Product Secure Development Lifecycle
Administer product security practices to product teams, technology, and security champions
Drive Product Security efforts to resolve challenges and enable automation
Monitor information security best practices, standards, and industry threats
Evaluate vulnerability impact and formulate risk mitigation plans
Member of AspenTech Security Emergency Response Team (ASERT)

Requirements

NISTAzureAWSDevSecOps

Bachelor's degree in computer science
8+ years of IT experience
5+ years in information security
Knowledge of security frameworks (ISO27002, NIST)
Experience with Application/Product Security
Experience with cloud solutions (Azure, AWS)
DevSecOps and secure development practices

Benefits & Perks

Salary range $120,900 - $151,100

Bonus/variable incentive pay

Paid time off

Charitable giveback day

Medical/dental/vision insurance

Retirement benefits

About Aspen Technology

Aspen Technology is an industrial software company that specializes in solutions for asset-intensive industries. Founded in 1981 in Cambridge, Massachusetts, AspenTech originated from a research project between MIT and the U.S. Department of Energy. The company went public in 1994 and has since expanded through strategic acquisitions. It is now a subsidiary of Emerson Electric Co. and is headquartered in Bedford, Massachusetts. AspenTech offers a range of software solutions that cover the entire asset lifecycle, including performance engineering, design and simulation software, supply chain management, and predictive maintenance. The company serves various industries such as oil and gas, chemicals, engineering, power, metals, and pharmaceuticals. AspenTech aims to optimize operations and enhance sustainability for its clients by leveraging industrial AI and digitalization.

Industry

information technology & services

Employees

1,200

998 engineers

Revenue

$1.1B

Website

Visit →

Security at Aspen Technology

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

AspenTech publishes a corporate Privacy and Security page, stating a commitment to protecting personal data.
A Security Hardening Best Practices document outlines security principles such as "Security is a shared responsibility"and recommends "defense in depth, least privilege access".
However, an explicit, high-level AppSec mission statement or clear public statements on developer enablement vs. gatekeeping language were not found, beyond job text mentioning "enable teams to deliver secure development".

Security Team

AspenTech has a Product Security organization: the OPTIMIZE™ 2024 speaker listing identifies "Peter Escobar"as "VP, Product Security"and describes "Product Security Shared Services"driving product security across the portfolio. It also lists "Jonathan Dashner"as "Principal Product Security Engineer."Precise AppSec team headcount or current team size is not publicly available in the sources found.

Key Initiatives

Multiple public job postings for "Product Security Engineer"at AspenTech describe duties and processes including: supporting the Product Secure Development Lifecycle, performing threat models and risk assessments, managing vulnerabilities, facilitating assessments, assisting security champions, and participating in an AspenTech Security Emergency Response Team (ASERT).
Detailed vulnerability remediation SLAs (e.g., MTTR, critical findings within X days) were not found in public materials.

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on Aspen Technology's site