Product Security Engineer

{
  "content_hash": "9180a1fe8abd534171b5ee572f7c53128fb2f692fff530f7e43968fd079ef2b6",
  "source_hash": "d5f97263d43a7b6d7e43e9894b027d6e25a179adb3863eedc6e17cd5e2ed0d77",
  "last_changed_at": "2026-06-04T11:31:25.899Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "Andover, Massachusetts, 01810, United States",
    "city": "Andover",
    "region": null,
    "country": "United States",
    "is_remote": false,
    "confidence": 0.95
  },
  "salary_max": null,
  "salary_min": 1,
  "inferred_at": "2026-06-06T10:18:44.010Z",
  "launch_scope": {
    "reason": "bamboohr_production_catalog",
    "included": true,
    "location": {
      "raw": "Andover, Massachusetts, 01810, United States",
      "city": "Andover",
      "region": null,
      "country": "United States",
      "is_remote": false,
      "confidence": 0.95
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": null,
  "salary_period": null,
  "workplace_type": null,
  "salary_currency": "USD"
}

{}

{
  "list_job": {
    "id": "326",
    "isRemote": null,
    "location": {
      "city": "Andover",
      "state": "Massachusetts"
    },
    "atsLocation": {
      "city": null,
      "state": null,
      "country": null,
      "province": null
    },
    "departmentId": "19585",
    "locationType": "2",
    "jobOpeningName": "Product Security Engineer",
    "departmentLabel": "320 - Product Security",
    "employmentStatusLabel": "Full-Time"
  },
  "detail_errors": [],
  "detail_job_opening": {
    "location": {
      "city": "Andover",
      "state": "Massachusetts",
      "postalCode": "01810",
      "addressCountry": "United States"
    },
    "datePosted": "2026-06-03",
    "atsLocation": {
      "city": null,
      "state": null,
      "country": null,
      "countryId": null
    },
    "description": "<p><span><span>Aras is a leader in product lifecycle management (PLM) and digital thread solutions. As one of the fastest growing PLM companies, our technology enables the rapid delivery of flexible solutions built on a powerful digital thread backbone and a low-code development platform. </span></span><span> </span></p>\n<p><span> </span></p>\n<p><span> </span></p>\n<p><span><span>Our platform and PLM applications connect users in all disciplines to critical product data and processes across the lifecycle and throughout the extended supply chain. The world’s largest manufacturers are </span><span>leveraging</span><span> Aras Innovator to manage their complex product lifecycles to improve production timelines, meet and exceed revenue growth targets, and accelerate innovation. We collaborate with companies in some of the most innovative industries, including automotive, industrial/heavy equipment, aerospace and defense, and high-tech electronics. </span></span><span> </span></p>\n<p><span> </span></p>\n<p><span> </span></p>\n<p><span><span>As a </span></span><span style=\"font-weight: bold\"><span><span>Product Security Engineer</span></span></span><span><span> specializing in our Security Operations Center (SOC) for Azure environments, you will play a crucial role in safeguarding our company’s digital assets. You will focus on monitoring, detecting, investigating, and responding to security threats, ensuring robust defense measures against potential security breaches. </span><span>The ideal candidate will have an engineering-focused background and mindset to approach the role. </span><span>This role is a </span><span>product-focused</span><span> position. </span></span><span> </span></p>\n<p><span> </span></p>\n<p><span><span>The </span><span>ideal candidate</span><span> is expected to </span><span>operate</span><span> as the stand-alone </span><span>Product Security Operations Engineer</span><span> responsible for independently </span><span>monitoring</span><span>, detecting, investigating, and responding to threats without reliance on a full SOC team.</span></span><span> </span></p>\n<p><span> </span></p>\n<p><span style=\"font-weight: bold\"><span><span>Key Responsibilities</span></span></span><span> </span></p>\n<ul>\n<li><span style=\"font-weight: bold\"><span><span>Threat Monitoring and Detection</span></span></span><span><span>: Monitor </span></span><span style=\"font-weight: bold\"><span><span>Azure cloud infrastructure</span></span></span><span><span> for potential threats using SOC tools and technologies. Analyze and prioritize alerts to </span><span>identify</span><span> security incidents. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span style=\"font-weight: bold\"><span><span>Incident Response</span></span></span><span><span>: Respond to Level 2 security incidents, coordinate with relevant teams to mitigate risks, and ensure </span><span>timely</span><span> resolution of security issues. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span style=\"font-weight: bold\"><span><span>Security Investigations</span></span></span><span><span>: Conduct detailed investigations</span><span> in Aras SaaS</span><span> of complex security incidents to </span><span>determine</span><span> root causes and the scope of the impact. Utilize forensic analysis techniques as needed. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span style=\"font-weight: bold\"><span><span>Improvement of Detection Capabilities</span></span></span><span><span>: Develop and refine SOC detection mechanisms in Azure. Customize security tools and technologies to enhance detection and response capabilities. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span style=\"font-weight: bold\"><span><span>Collaboration and Reporting</span></span></span><span><span>: Work closely with </span><span>Product</span><span> </span><span>S</span><span>ecurity and Global Cloud Services teams to enhance overall security posture. Prepare detailed incident reports and documentation for both technical and non-technical stakeholders. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span style=\"font-weight: bold\"><span><span>Automation and Tool Development</span></span></span><span><span>: Develop scripts or tools to automate response and mitigation processes, enhancing the SOC’s operational efficiency. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Own the end-to-end SOC function, including workflows, run books, escalation models, and continuous improvement. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Drive operational security decisions and act as the </span></span><span style=\"font-weight: bold\"><span><span>primary incident commander </span></span></span><span><span>for security events. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Build and mature SOC capabilities, including onboarding new data sources, improving alert fidelity, and </span><span>optimizing</span><span> operational processes. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Leverage </span></span><span style=\"font-weight: bold\"><span><span>AI/ML-powered security tools</span></span></span><span><span> and detection engines to enhance monitoring, triage, and </span><span>investigation</span><span> workflows. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Evaluate and tune </span></span><span style=\"font-weight: bold\"><span><span>AI-assisted anomaly detection models</span></span></span><span><span> to reduce false positives and improve threat identification accuracy. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Utilize </span></span><span style=\"font-weight: bold\"><span><span>LLM-based copilots</span></span></span><span><span> or automated investigation frameworks to accelerate incident triage and response. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Assess security risks associated with </span></span><span style=\"font-weight: bold\"><span><span>AI workloads</span></span></span><span><span>, including model abuse, prompt injection, data leakage, and adversarial scenarios. </span></span><span> </span></li>\n</ul>\n<p><span> </span></p>\n<p><span style=\"font-weight: bold\"><span><span>Required Qualifications</span></span></span><span> </span></p>\n<ul>\n<li><span><span>Education: </span><span>Bachelor’s degree in </span><span>C</span><span>omputer </span><span>S</span><span>cience</span><span>, Information Technology, Cybersecurity, or </span><span>a related</span><span> field. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Experience operating security functions in </span></span><span style=\"font-weight: bold\"><span><span>Azure GovCloud</span></span></span><span><span> or </span></span><span style=\"font-weight: bold\"><span><span>GCC High environments</span></span></span><span><span>, including managing segregated environments, boundary protections, and compliance-driven logging limitations. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Understanding of </span></span><span style=\"font-weight: bold\"><span><span>U.S. Government cloud regulatory frameworks</span></span></span><span><span> such as </span></span><span style=\"font-weight: bold\"><span><span>FedRAMP</span></span></span><span><span> </span></span><span style=\"font-weight: bold\"><span><span>High</span></span></span><span><span>, </span></span><span style=\"font-weight: bold\"><span><span>NIST 800-53, DoD SRG, and data residency requirements.</span></span></span><span><span> </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Familiarity with GovCloud-specific service differences, authentication flows, and monitoring constraints. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Practical experience securing </span></span><span style=\"font-weight: bold\"><span><span>Azure GovCloud</span></span></span><span><span> environments subject to </span></span><span style=\"font-weight: bold\"><span><span>NIST 800-171</span></span></span><span><span> and </span></span><span style=\"font-weight: bold\"><span><span>CMMC 2.0</span></span></span><span><span>, ensuring proper </span></span><span style=\"font-weight: bold\"><span><span>protection of CUI</span></span></span><span><span> through compliant detection, response, and monitoring practices. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Certifications: Microsoft Certified: Security Operations Analyst Associate or other relevant Azure certifications. </span></span><span> </span></li>\n</ul>\n<p><span> </span></p>\n<p><span style=\"font-weight: bold\"><span><span>Preferred Qualifications </span></span></span><span> </span></p>\n<ul>\n<li><span style=\"font-weight: bold\"><span><span>3</span><span>-5</span><span> years of experience in information security, specifically in </span><span>a SOC</span><span> environment. </span></span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Experience with Azure cloud services is highly preferred. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Desired: Experience with Managed Detection and Response (MDR) services. </span></span><span> </span></li>\n</ul>\n<p><span> </span></p>\n<p><span> </span></p>\n<p><span style=\"font-weight: bold\"><span><span>Technical Skills</span></span></span><span> </span></p>\n<ul>\n<li><span><span>Proficiency</span><span> in security information and event management (</span></span><span style=\"font-weight: bold\"><span><span>SIEM</span></span></span><span><span>) tools and technologies. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Strong understanding of network security, endpoint security, and cloud security principles. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Experience with scripting languages (e.g., </span></span><span style=\"font-weight: bold\"><span><span>Python</span></span></span><span><span>, </span></span><span style=\"font-weight: bold\"><span><span>PowerShell</span></span></span><span><span>) for automation. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Familiarity with Azure-specific tools and services for security management. </span></span><span> </span></li>\n</ul>\n<p><span><span> </span></span><span> </span></p>\n<p><span style=\"font-weight: bold\"><span><span>Soft Skills</span></span></span><span> </span></p>\n<ul>\n<li><span><span>Strong analytical and problem-solving skills. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Excellent communication and teamwork abilities. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Comfortability to ask questions.</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Receptive</span><span> feedback.</span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Ability to handle high-pressure situations and make decisions quickly. </span></span><span> </span></li>\n</ul>\n<p><span> </span></p>\n<p><span><span>We were recognized as a leader in The Forrester Wave™: Product Lifecycle Management for Discrete Manufacturers, Q1 2023 and were also named a leader in the 2023 SPARK Matrix for PLM by Quadrant Knowledge Solutions. Feedback from our community has </span><span>established</span><span> Aras as the top ranked PLM vendor in online review services like G2 and Gartner Peer Insights. </span></span><span> </span></p>\n<p><span> </span></p>\n<p><span> </span></p>\n<p><span><span>With over 700 employees in 11 countries, </span><span>we’re</span><span> looking to add to our incredible team. If </span><span>you’re</span><span> passionate about helping develop next generation product innovation, we encourage you to apply! </span></span><span> </span></p>\n<p><span><span>Compensation for the role will be </span><span>commensurate</span><span> with experience.</span></span><span> </span></p>\n<p><span> </span></p>\n<p><span><span>The total expected base salary range will be between $1</span><span>00,000-125,000</span><span>. This position is eligible for </span><span>additional</span><span> compensation. </span></span><span> </span></p>\n<p><span> </span></p>\n<p><span><span>Flexible paid time off to recharge when you need it, plus company-paid holidays and a dedicated Global Wellness Day. </span></span><span> </span></p>\n<ul>\n<li><span><span>A 401(k) plan with company </span><span>match</span><span> to help you invest in your future. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Robust health coverage, including generous medical, dental, and vision insurance with high premium contributions and deductible reimbursement. </span></span><span> </span></li>\n</ul>\n<ul>\n<li><span><span>Company-paid life insurance, as well as short- and long-term disability coverage for added peace of mind. </span></span><span> </span></li>\n</ul>\n<p><span> </span></p>\n<p><span><span>Please visit our </span></span><a href=\"https://aras.com/wp-content/uploads/2024/04/Aras-Privacy-Policy-Job-Applicant-Privacy-Notice.pdf\" target=\"_blank\" rel=\"noopener noreferrer\"><span><span>Privacy Notice</span></span></a><span><span> and </span><span>our</span><span> </span></span><a href=\"https://aras.com/wp-content/uploads/2024/04/United-States-Regional-Privacy-Notice.pdf\" target=\"_blank\" rel=\"noopener noreferrer\"><span><span>California Consumer Privacy Act (CCPA)</span></span></a><span><span>.</span></span><span> </span></p>",
    "compensation": null,
    "departmentId": "19585",
    "locationType": "2",
    "seekPromoted": false,
    "jobCategoryId": null,
    "jobOpeningName": "Product Security Engineer",
    "departmentLabel": "320 - Product Security",
    "jobOpeningStatus": "Open",
    "minimumExperience": "Mid-level",
    "jobOpeningShareUrl": "https://aras.bamboohr.com/careers/326",
    "employmentStatusLabel": "Full-Time"
  }
}