Security Engineer

Why Join AspenView?

At AspenView, we’re more than a nearshore IT partner—we’re a people-first, purpose-driven company that believes great culture drives great outcomes. We’re passionate about connecting talent and technology to deliver measurable value for clients—and meaningful career paths for our people.

Here’s what you can expect:

• Competitive base
• Flexible work model: hybrid, remote, or in-office
• Real growth opportunities and leadership visibility
• Inclusive, respectful culture that blends U.S. innovation with Colombian heart
• A company that listens, invests in you, and celebrates wins together

The Senior Security Engineer is a dedicated, hands-on professional responsible for transforming detection and response capabilities for a US higher-education client. Working as the primary security engineer, you will move the client away from an underperforming managed service provider to establish robust, in-house security operations. You will communicate directly with the CIO, acting as the sole owner of the account to ensure critical failures are managed properly and proactive recommendations are implemented.

What you will do:

Security Operations & Incident Response

• Own Microsoft Sentinel, including detection content, analytics rules, data connectors, and ingestion costs across an Azure-first estate.

• Manage incident response end-to-end, from triage and containment to written post-incident reviews.

• Establish severity tiering that the client actually trusts, ensuring critical failures reach a human while filtering out noise.

Vulnerability & Infrastructure Management

• Execute vulnerability management across servers, network devices, and endpoints on a patch cadence the client signs off on.

• Harden Azure workloads, identity configurations, and the LMS/SIS integrations that carry sensitive student data.

Technical Leadership & Documentation

• Provide proactive consultation directly to the CIO; bring recommendations rather than waiting for a ticket.

• Write comprehensive runbooks and documentation as you go to ensure the service survives your time off.

• Lead an initial three-month discovery phase to capture what currently lives in one person's head.

Tools & Technologies:

• Security Platforms: Microsoft Sentinel and Defender.

• Cloud & Infrastructure: Azure security in practice (identity, network security groups, key management, logging pipelines).

• Query Languages: Real KQL fluency.

• Networking: Firewall and switch configuration (Fortinet, Palo Alto, Cisco).

What you bring:

• Experience: Six or more years in security engineering or security operations, with at least two of those years running a SIEM in production.

• Hands-on Skills: Practical experience with Azure security and KQL, and the ability to walk through a past incident end-to-end (including the part that went wrong).

• Communication: Fluent English, strong enough to brief a CIO directly in writing and on a call without an intermediary.

• Mindset: Proactive and accountable. You own the problem directly and act as a dedicated partner to the client.

• Availability: Willingness to work US Central hours as your standard day.

Bonus Qualifications:

• Experience in higher education, K-12, or the public sector.

• Working familiarity with FERPA or the GLBA Safeguards Rule.

• Certifications such as AZ-500, SC-200, GCIH, or OSCP.