Product Security Engineer (Azure)

TL;DR

Product Security Engineer (Azure): Safeguarding the company's digital assets in Azure environments with an accent on monitoring, detection, investigation, and response to security threats. Focus on owning the end-to-end SOC function, leveraging AI/ML-powered security tools, and ensuring compliance with U.S. Government cloud regulatory frameworks.

Location: Remote from Andover, Massachusetts, United States. Must operate within U.S. Government cloud regulatory frameworks.

Salary: $120,000–$140,000

Company

Aras is a leader in product lifecycle management (PLM) and digital thread solutions, enabling rapid delivery of flexible solutions built on a powerful digital thread backbone and a low-code development platform.

What you will do

• Monitor Azure cloud infrastructure for potential threats using SOC tools and analyze alerts.
• Respond to Level 2 security incidents, coordinate mitigation, and ensure timely resolution.
• Conduct detailed investigations of complex security incidents to determine root causes and scope.
• Develop and refine SOC detection mechanisms, customizing security tools to enhance capabilities.
• Own the end-to-end SOC function, including workflows, runbooks, escalation models, and continuous improvement.
• Leverage AI/ML-powered security tools and LLM-based copilots to enhance monitoring, triage, and investigation workflows.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Experience operating security functions in Azure GovCloud or GCC High environments.
• Understanding of U.S. Government cloud regulatory frameworks such as FedRAMP High, NIST 800-53, and DoD SRG.
• Practical experience securing Azure GovCloud environments subject to NIST 800-171 and CMMC 2.0.
• Certifications: Microsoft Certified: Security Operations Analyst Associate or other relevant Azure certifications.
• Proficiency in SIEM tools, network security, endpoint security, and cloud security principles.
• Experience with scripting languages (e.g., Python, PowerShell) for automation.

Nice to have

• 3+ years of experience in information security, specifically in a SOC environment.
• Experience with Azure cloud services.
• Experience with Managed Detection and Response (MDR) services.

Culture & Benefits

• Flexible paid time off, plus company-paid holidays and a dedicated Global Wellness Day.
• A 401(k) plan with company match.
• Robust health coverage, including generous medical, dental, and vision insurance with high premium contributions and deductible reimbursement.
• Company-paid life insurance, as well as short- and long-term disability coverage.