Senior InfoSec Lead - SaaS Security & Cloud

Aspenware; Denver (CO); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

4 weeks PTO

11 paid holidays

6 days sick time

Parental leave

Medical, dental, and vision insurance

Life insurance

401k with 5% match

Annual ski day

Ikon Pass

National Park Pass

Annual Wellness Stipend

Flexible work environment

Job summary

Aspenware in Denver, CO is seeking a Lead Infosec Engineer to lead and mature our security program. You will oversee security operations, vendor relationships, and remediation efforts to enhance our cybersecurity posture across our SaaS platform.

You will collaborate with IT and engineering to drive AppSec, cloud security (Azure), and governance, risk, and compliance initiatives, including SOC2 accreditation and adherence to NIST CSF standards.

Qualifications

• Experience owning Infosec strategy for SaaS companies, especially in ecommerce.
• Expert knowledge of AppSec, Infrastructure security, access control, and GRC.
• 4+ years of experience in a cybersecurity role within a software development organization.
• 8+ years in technical roles – as a software engineer, information security analyst or similar.
• Masters or bachelor's degree in Information Systems with a focus in cyber security or equivalent experience / certifications.
• Experience with NIST CSF, ISO27001, PCI, SOC2 or similar standards/certifications.

Responsibilities

• Partner with engineering to secure products, cloud infrastructure, and platform.
• Champion rigorous security standards in resource allocation tradeoffs.
• Improve Aspenware’s AppSec and SDLC security.
• Understand key security attack vectors and protect Aspenware from malicious actors.
• Manage security vendor relationships with requirements and support.
• Lead the company from its Type I SOC 2 accreditation through Type 2 accreditation.
• Assist end users to remediate security issues.
• Coordinate with external vendors for oversight of devices and networks in a remote work environment.
• Manage pen testing, endpoint testing, purple team testing, and PCI scans.
• Develop network security reference architectures and roadmaps aligned with policies.

Skills

Infosec strategy

Security leadership

Threat investigations

Governance & risk

DevSecOps mindset

Education

Master's or Bachelor's in Information Systems (cyber security focus)

Tools

Microsoft Azure

MS Entra

Azure monitoring

Job description

Aspenware in Denver, CO is seeking a Lead Infosec Engineer to lead and mature our security program. You will oversee security operations, vendor relationships, and remediation efforts to enhance our cybersecurity posture across our SaaS platform.

You will collaborate with IT and engineering to drive AppSec, cloud security (Azure), and governance, risk, and compliance initiatives, including SOC2 accreditation and adherence to NIST CSF standards.