{"id":878681,"url":"https://alion.io/job/aspenware-lead-infosec-engineer","title":"Lead InfoSec Engineer","company":{"id":670975,"name":"Aspenware","domain":"aspenware.com","url":"https://alion.io/company/aspenware","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Denver, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":121000,"max_usd":249000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":453},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-08-18T00:00:00Z","employer_posted_date":"2026-08-18","last_verified_at":"2026-10-29T16:32:04Z","board_verified":true,"closed_at":null,"days_open":72,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":72},"description":"Who We Are:\nAspenware empowers mountain resorts and ski areas to deliver the ideal digital guest experience. Our guest-facing e-commerce and registration software is the most capable in the industry and is used by millions of skiers worldwide to process over a billion dollars in annual sales. The resorts we work with trust the innovation and thought leadership that Aspenware provides, and they leverage the operational advantages of our platform to grow their businesses.\nWe are a talented and high-performing team and welcome the opportunity to learn from one another.\nAspenware makes hiring decisions based on how well candidates align with our Core Values. Aspenware employees are…\n Dependable: We take ownership. We are accountable and adaptable. We have a can-do attitude and are willing to pivot. \nCaring: We care about our co-workers and our clients. We are mindful of and inspired by the impact our work has on our communities. \nInnovative: We are thought leaders who bring creativity and a desire for innovation to everything we do. We are continually improving ourselves and our surroundings. \nCurious: We challenge default processes while assuming best intent, seeking to understand before judging. We ask good questions to spark learning, better decisions, and smarter outcomes. We make the extra effort to gain a deeper understanding of a situation so we can provide better solutions. \nThe Role:\nThe Lead Infosec Engineer will be responsible for leading Aspenware’s existing security program and optimizing it to be even more robust.\nYou will manage Aspenware’s security operations including IT vendor and MSSP relationships. You will lead efforts to mitigate existing and emerging cybersecurity threats. You will assess, prioritize, and remediate security risks to improve Aspenware’s overall cybersecurity posture.\nThis is a key role at Aspenware and reports to the Director of Technology Operations & Security. You will work closely with the VP of Technology, other engineering leaders, and business stakeholders to represent the security needs of our platform and hold the enterprise to a rigorous standard of security. Finally, you will collaborate with the Infosec teams at our parent company, Alterra Mountain Co. You will be responsible for sharing strategies, roadmap progress, and incident retrospectives wherever the larger enterprise is impacted.\nWhat You Will Do:\nPartner with engineering teams and systems architects to ensure the security of our products, cloud infrastructure, and technical platform \nBe the champion of rigorous security standards when debating resource allocation tradeoffs \nImprove Aspenware’s AppSec and SDLC security \nUnderstand key security attack vectors and protect Aspenware from malicious actors who wish to abuse our system. \nManage our security vendor relationships with respect to requirements and technical support \nLead the company from its recently earned Type I SOC 2 accreditation through Type 2 accreditation. \nAssist end users to remediate security issues. \nWork with external vendors to provide oversight for computers, devices, and networks in a remote work environment \nManage and evaluate external vendors to conduct pen testing, endpoint testing, purple team testing, and PCI scans \nDevelop and document network security reference architectures, design patterns, roadmaps, and other architectural artifacts aligned with policies, standards, and industry best practices \nWork closely with our DevOps team to manage cloud security in Azure: \nEvaluate Azure cloud and hybrid security services, tools, and appliances in the areas of (but not limited to): intrusion detection, intrusion prevention, packet capture, and quarantine \nAssess network/cloud security posture and recommend modifications for enhancements, improvements, and mitigations \nCollaborate with enterprise partners and incident response teams regarding requirements and deployment of security services, tools, and appliances \nReview access control policies and assist in Identity and Access Management through MS Entra \nEnsure compliance with NIST CSF or similar frameworks and meet disclosure obligations \nIdentify opportunities to improve existing security processes, policies, and tooling \nHelp cultivate and foster a culture of security across the entire organization by driving awareness and promoting a cohesive narrative around security \nPerform in-depth investigations when the suspicion of a threat emerges. \nCoordinate mitigation and remediation plans to address critical risks \nWho You Are:\nYou are passionate about cybersecurity and have a track record in improving the security posture of software engineering organizations. You are a proud advocate of rigorous security standards. You take pride in staying on top of and ahead of information security techniques, standards, and trends. You are a lifelong learner who is constantly educating and challenging yourself to stay ahead of the cybersecurity curve. You thrive in small to mid-size companies where you can take ownership and practice a blend of strategic planning, communication, and individual contribution. You are skilled at communicating with peers, leadership, and clients. You can define and execute on a complex department roadmap and proactively update stakeholders on the status of each of your parallel initiatives.\nYou Ideally Have:\nExperience owning the Infosec strategy for SaaS companies, especially in ecommerce \nExpert knowledge of AppSec, Infrastructure security, access control, and GRC \n4+ years of experience in a cybersecurity role within a software development organization \n8+ years in technical roles - as a software engineer, information security analyst or similar \nMasters or bachelor's degree in Information Systems with a focus in cyber security or equivalent experience / certifications \nExperience with NIST CSF, ISO27001, PCI, SOC2 or similar standards/certifications \nExperience with OWASP or similar standards. \nExperience with DevSecOps \nDirect experience with Azure cloud security \nHands-on experience establishing and configuring security controls for Microsoft Azure and Microsoft 365 components \nUnderstanding of DDOS and other infrastructure threats at the edge \nStrong understanding of security as it relates to CDN, API management, and load balancing technologies \nStrong understanding of Azure monitoring capabilities \nWillingness to jump into a complex, fast-paced environment. \nWhat’s In It for You:\n4 weeks of PTO to start and increases with seniority \n11 paid holidays \n6 days of sick time \nPaid parental leave for both primary and secondary parents \nMedical, dental, and vision insurance \nLife insurance \n401k plan with a 5% match \nAnnual all-company ski day \nSeasonal Ski Pass - Ikon Pass \nNational Park Pass \nAnnual Wellness Stipend \nFlexible work environment","description_format":"text","description_chars":6817,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Flexible schedule","Life insurance","Parental leave","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","E-commerce Platforms","Travel Technology"],"lifecycle":[{"event":"open","at":"2026-09-13T22:51:42Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.347,"p_room":0.28,"age_days":72,"expected_fill_days":27,"reasons":["conf:5","win:tail","crowd:"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/aspenware-lead-infosec-engineer","json_url":"https://alion.io/job/aspenware-lead-infosec-engineer.json","meta":{"generated_at":"2026-10-29T21:09:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31427,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":670975},"rest":"https://alion.io/mcp/rest/get_company?id=670975"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faspenware-lead-infosec-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faspenware-lead-infosec-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faspenware-lead-infosec-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/aspenware-lead-infosec-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faspenware-lead-infosec-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":878681}},{"tool":"search_jobs","arguments":{"company":"aspenware.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":878681},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}