Empleos actuales relacionados con Product Security Engineer - Ciudad de México, Ciudad de México - Aspen Technology
-
Security Engineer
hace 2 semanas
Ciudad de México, Ciudad de México Datwyler A tiempo completoIn billions of syringes and in every second car worldwide, Datwyler components make an important contribution to the safety of patients and drivers. The high-tech company focuses on high-quality, system-critical elastomer components and holds leading positions in attractive global markets such as healthcare, mobility, connectivity, general industry and food...
-
Security Test Engineer
hace 2 semanas
Ciudad de México, Ciudad de México LiveWell A tiempo completoAt Zurich Capability Center, we are looking for a:Security Test EngineerSecurity Test Engineer is responsible to assure that Security Testing deliverables are meeting the highest quality Security Standards from the technology perspective and with focus on providing Penetration testing and App sec toolset administration support for the Security Testing BTS...
-
Application Security Engineer
hace 1 semana
Ciudad de México, Ciudad de México TTEC A tiempo completoApplication Security EngineerBe the spark that brightens days and ignite your career with TTEC's award-winning employment experience. As an Application Security Engineer working remotely in Mexico, you'll be a part of creating and delivering amazing customer experiences while you also #experienceTTEC, an award-winning employment experience and company...
-
Network Security Engineer
hace 4 días
Ciudad de México, Ciudad de México Astellas Pharma A tiempo completoThis position is based in Mexico City, Mexico & will require work from the office at least the minimum number of days per week as agreed by the business leader.Purpose and Scope:As a Network Security Engineer, you will play a critical role in protecting Astellas' global network infrastructure and ensuring the security, availability, and resilience of...
-
Network Security Engineer
hace 4 días
Ciudad de México, Ciudad de México Astellas A tiempo completoThis position is based in Mexico City, Mexico & will require work from the office at least the minimum number of days per week as agreed by the business leader.Purpose and Scope:As a Network Security Engineer, you will play a critical role in protecting Astellas' global network infrastructure and ensuring the security, availability, and resilience of...
-
Security Engineer
hace 1 semana
Ciudad de México, Ciudad de México Bitcoin Devs Company A tiempo completoOverview The Security Engineer plays a crucial role in our organization, ensuring the security of our systems and data. This position is based in Mexico and will be 100% remote, requiring strong communication and collaboration skills to work effectively within a distributed team. The Security Engineer will be responsible for implementing and maintaining...
-
Lead Security Operations Engineer
hace 4 días
Ciudad de México, Ciudad de México Cloudlinux A tiempo completoCloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure...
-
Software Engineer, Cloud Security
hace 2 días
Ciudad de México, Ciudad de México Lyft A tiempo completoAt Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive.Lyft connects people to transportation to change the way we live and get around our communities. Lyft's engineering team is growing, and we are looking for Engineers with a passion in...
-
Network Security Engineer
hace 4 días
Ciudad de México, Ciudad de México Astellas Pharma A tiempo completoJob description:Are you driven to make a real difference in the lives of patients?We're seeking passionate individuals who thrive in dynamic environments, embrace new ideas and aren't afraid to take intelligent risks. People who act with unwavering integrity and are deeply committed to making a tangible impact.LocationThis position is based in Mexico...
-
Cyber Security Engineer
hace 1 semana
Ciudad de México, Ciudad de México Astellas Pharma A tiempo completoJob description:Are you driven to make a real difference in the lives of patients?We're seeking passionate individuals who thrive in dynamic environments, embrace new ideas and aren't afraid to take intelligent risks. People who act with unwavering integrity and are deeply committed to making a tangible impact.Location and Working EnvironmentThis...
Product Security Engineer
hace 3 semanas
The driving force behind our success has always been the people of AspenTech. What drives us, is our aspiration, our desire and ambition to keep pushing the envelope, overcoming any hurdle, challenging the status quo to continually find a better way. You will experience these qualities of passion, pride and aspiration in many ways — from a rich set of career development programs to support of community service projects to social events that foster fun and relationship building across our global community.
The RoleAspenTech is an AI-powered software company helping the world's leading energy, chemical and engineering companies succeed in their digital transformation, making their operations more efficient and reducing impact on the environment. At AspenTech, you will be part of a global market-leading company with double digit growth and a blue-chip customer base.We offer the opportunity to make an impact, to drive innovation and to be an agent of positive change. Our culture and vision have taken dramatic leaps forward over the past two years and we still have work to do. We need extraordinary individuals to pave the way ahead. The reviews on here paint many stories of successes, failures, excitement and disappointment. Every person has their own story. We strive to make your story at AspenTech a great one.
Under the direction of the VP of Product Security this role is a key member for day-to-day operations of Product Security at Aspen Technology. This role will help protect our clients, enable teams to deliver secure development, and position us for future security needs.
This thought leader will help drive mitigation of risk thru activities such as developing Threat Models, driving Risk Assessments, reviewing alignment of standard controls to mitigate risks in products, oversee vulnerability tracking, ensure security documentation and compliance with security lifecycle activities for product security releases. This could include supporting compliance documents, secure patch release, security incidents, security communications, the security champion program, and product security verification/validation activities. This role will work closely with development teams, senior leaders, and teams across the organization. This role will work with teams across the organization to mitigate risks, protect our customers, protect our assets, and enable secure activities. The Sr. Product Security Engineer will support the development and execution of product security strategic efforts to meet business and technology objectives.
This role will also support the continuously improving product security policies, procedures, tools, guidelines, and security awareness. This role will also maintain a vigilant awareness of industry threats, standards, regulations, and best practices to enhance our security profile.Your Impact
- Responsible for supporting the design, implementation, and oversight of Product Secure Development Lifecycle. Including aspects such as security requirements, secure architecture/design, risk assessment, threat models, security scanning, triage, vulnerability management, security design reviews and product security validation/verification.
- Administers product security practices to product teams, technology, and security champions across the organization.
- Drive Product Security efforts to resolve challenges, enable automation, and impact organization security culture
- Monitors information security best practices, standards, regulations, industry threats and risks for improvements to product security practices.
- Maintains a deep understanding of current issues in the realm of information security. Subscribes to major industry newsgroups and mailing lists and assesses the impact of all emerging issues on systems and practices at Aspen Technology.
- Monitors security bulletins and alerts from all Aspen Technology's information system vendors. Evaluates vulnerability impact and formulates and executes risk mitigation plans for product security.
- Member of the AspenTech Security Emergency Response Team (ASERT) providing expert analysis of security customer reported security incidents. Works with information resource owners during and after security incidents; work with product teams for analysis; recommends best practices and solutions. Where appropriate, work with product teams, technology teams, client support and customer contacts.
- Occasionally after hours and weekends work to perform tasks that cannot be done during business hours.
- Bachelor's degree (B.A./B.S.) or equivalent in computer science or technical equivalent discipline from an accredited college or university required
- 1-3+ years of experience in IT required
- 1-3+ years of experience in an information security role or experience with security and development teams.
- Knowledge of information security regulatory requirements for privacy, secure by design, secure by default and defense in depth
- Maintains a broad understanding of information security including ISO27002, NIST 800 and information security frameworks and regulations.
- Desired experience with Application/Product Security, Risk Assessment, Threat Models, Secure Architecture/Design, compliance, and audit
- Desired experience with cloud solutions such as Azure and AWS - Experience with security policy, procedures, tools, services, and cloud security models.
- Demonstrated ability to plan, design, develop, deploy, and maintain application security best practices
- Ability to assume high levels of responsibility and to work with a minimum of day-to-day supervision
- Ability to cooperatively and effectively work with people from all organizational levels and build consensus through negotiation and diplomacy
- Preferable exposure to the following: IEC , IEC , NIST 800-53, ISO 27001, ISO 27002, Cloud Security Alliance (CSA), Cybersecurity and Infrastructure Security Agency (CISA), SANS, OWASP, CWE 25, and AI Security best practices.
- Desired domain knowledge and/or certification: CISSP, CISA, CCSP, CSSLP, CEH, SANS GIAC, security certification from AWS or Azure
- Desired knowledge of the following Technologies: Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA)
- Desired experience with Application Security Best Practices such as web security, cloud security, pen testing, fuzz testing, security coding guidelines, security architecture/design principles, CVSS, STRIDE, DREAD
- Experience with Application development technologies, processes, and best practices. For example: SAFE/Agile, RUP, CICD, DevSecOps