Product Security Engineer

Stack

Responsibilities

• ▹Monitor Azure cloud infrastructure for threats using SOC tools, and analyze and prioritize alerts
• ▹Respond to Level 2 security incidents, coordinate with relevant teams and ensure timely resolution
• ▹Conduct detailed investigations of complex security incidents in Aras SaaS to determine root causes and scope, using forensic analysis as needed
• ▹Develop and refine SOC detection mechanisms in Azure and customize security tools
• ▹Work with the Product Security and Global Cloud Services teams, and prepare detailed incident reports and documentation
• ▹Develop scripts or tools to automate response and mitigation
• ▹Own the end-to-end SOC function, including workflows, run books, escalation models and continuous improvement
• ▹Drive operational security decisions and act as primary incident commander for security events
• ▹Build and mature SOC capabilities, including onboarding new data sources, improving alert fidelity and optimizing processes
• ▹Leverage AI/ML-powered security tools and detection engines to enhance monitoring, triage and investigation
• ▹Evaluate and tune AI-assisted anomaly detection models to reduce false positives
• ▹Use LLM-based copilots or automated investigation frameworks to accelerate incident triage and response
• ▹Assess security risks associated with AI workloads, including model abuse, prompt injection, data leakage and adversarial scenarios

Requirements

• ▹Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field
• ▹Experience operating security functions in Azure GovCloud or GCC High environments, including segregated environments, boundary protections and compliance-driven logging limitations
• ▹Understanding of U.S. Government cloud regulatory frameworks such as FedRAMP High, NIST 800-53, DoD SRG and data residency requirements
• ▹Familiarity with GovCloud-specific service differences, authentication flows and monitoring constraints
• ▹Practical experience securing Azure GovCloud environments subject to NIST 800-171 and CMMC 2.0, protecting CUI through compliant detection, response and monitoring
• ▹Certification: Microsoft Certified: Security Operations Analyst Associate or other relevant Azure certification
• ▹Proficiency in SIEM tools and technologies
• ▹Strong understanding of network, endpoint and cloud security principles
• ▹Experience with scripting languages (e.g. Python, PowerShell) for automation
• ▹Familiarity with Azure-specific tools and services for security management

Nice to have

• ▹3–5 years of experience in information security, specifically in a SOC environment
• ▹Experience with Azure cloud services (highly preferred)
• ▹Experience with Managed Detection and Response (MDR) services

Soft skills

What we offer

• ▹Flexible paid time off, company-paid holidays and a dedicated Global Wellness Day
• ▹401(k) plan with company match
• ▹Generous medical, dental and vision insurance with high premium contributions and deductible reimbursement
• ▹Company-paid life insurance, plus short- and long-term disability coverage
• ▹Compensation commensurate with experience; expected base salary $100,000-125,000, eligible for additional compensation

About the company

Aras is a leader in product lifecycle management (PLM) and digital thread solutions, built on a low-code platform. Its customers include automotive, industrial, aerospace and defense, and high-tech electronics manufacturers. The company has over 700 employees in 11 countries.