Cybersecurity Operations Engineer

Socket.dev; New Hampshire; On-site; USD 60,000 - 108,000; Full time

Job summary

University of New Hampshire is seeking a Cyber Operations Engineer to implement, monitor, and improve cybersecurity technologies and processes across USNH. You will support ISS, collaborate with IT teams, and help protect institutional information assets.

The role focuses on threat detection, incident response, vulnerability management, security monitoring, and compliance across on-prem and cloud environments while coordinating with university stakeholders.

Qualifications

• Bachelor's degree in a related field or equivalent experience required.
• Experience in vulnerability management, security monitoring, or incident response preferred.
• Experience administering Windows and/or Linux in an enterprise environment.
• Solid understanding of networking, authentication, and security principles.
• Strong analytical, troubleshooting, and communication skills.
• Ability to manage multiple priorities in a dynamic environment.
• Must be able to work independently and with teams; police background check required.
• Residence within commuting distance to Durham NH.

Responsibilities

• Monitor, investigate, and respond to cybersecurity incidents including phishing, malware, and unauthorized access.
• Perform triage, containment, eradication, recovery, and post-incident analysis.
• Support threat hunting and investigations using enterprise monitoring tools.
• Develop and refine incident response procedures and playbooks.
• Collaborate with stakeholders during security investigations and responses.
• Administer vulnerability management platforms and coordinate remediation.
• Assess vulnerabilities across servers, cloud, and network resources.
• Develop metrics and dashboards to show remediation progress.

Skills

Vulnerability management

Security monitoring

Incident response

Windows administration

Linux administration

Networking fundamentals

Authentication technologies

Analytical thinking

Multitasking

Communication skills

Team collaboration

Independent work

Police background check clearance

Durham NH commuting

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field

Tools

Microsoft Defender XDR

Microsoft Sentinel

Microsoft Entra ID

Microsoft Purview

Microsoft Intune

Microsoft Azure

Amazon Web Services (AWS)

Splunk

CrowdStrike EDR

IAM/PAM solutions

PowerShell

Python

Tenable/Qualys/Rapid7

NIST CSF / CIS Controls

Job description

The Cyber Operations Engineer is responsible for the implementation, administration, monitoring, and continuous improvement of cybersecurity technologies, services, and processes across the University System of New Hampshire (USNH). The position provides operational and engineering support for Information Security Services (ISS) and works collaboratively with infrastructure, identity and access management, application, and campus technology teams to protect institutional information assets and reduce cybersecurity risk.

This role serves as a technical security subject matter expert responsible for threat detection, incident response, vulnerability management, security monitoring, security engineering, and compliance support activities. The Cyber Security Engineer participates in the evaluation, deployment, and optimization of enterprise security solutions and assists in the development of security standards, procedures, and best practices that support the University's strategic security objectives.

The position also serves as the system administrator to the UNH Police Department and the USNH security camera system. The position is expected to administer a M365 tenant of 55 users, manage servers, and assist all USNH campuses with their cameras.

The Cyber Security Engineer interfaces with USNH technology teams, business units, and external partners to support a secure computing environment while balancing operational needs, regulatory requirements, and institutional priorities.

Essential Duties and Responsibilities

Security Operations and Incident Response

• Monitor, investigate, and respond to cybersecurity incidents, including compromised accounts, phishing attacks, malware infections, unauthorized access attempts, and other security events.

• Perform incident triage, containment, eradication, recovery, and post-incident analysis activities.

• Support threat hunting and security investigations utilizing enterprise security monitoring and endpoint protection platforms.

• Participate in the development and refinement of incident response procedures and playbooks.

• Collaborate with internal and external stakeholders during security investigations and incident response activities.

Vulnerability and Risk Management

• Administer and operate enterprise vulnerability management platforms and services.

• Conduct vulnerability assessments of servers, workstations, cloud resources, applications, and network infrastructure.

• Analyze vulnerability findings and coordinate remediation efforts with system owners and technology teams.

• Develop metrics, dashboards, and reporting to communicate vulnerability trends and remediation progress.

• Support risk assessments and security reviews of systems, services, and technology initiatives.

Security Engineering and Administration

• Implement, configure, administer, and maintain enterprise security technologies, including but not limited to:

  • Endpoint Detection and Response (EDR)
  • Security Information and Event Management (SIEM)
  • Identity and Access Management (IAM)
  • Privileged Access Management (PAM)
  • Email Security Platforms
  • Cloud Security Technologies
  • Data Protection and Compliance Solutions

• Evaluate emerging technologies and recommend improvements to strengthen the University's cybersecurity posture.

• Assist with the design and implementation of security controls for on-premises and cloud environments.

• Develop and maintain security automation and orchestration processes to improve operational efficiency.

Compliance, Audit, and Governance

• Support internal and external audits by gathering evidence, documenting controls, and assisting with remediation activities.

• Assist in the implementation and validation of security controls required by institutional policies, standards, and regulatory requirements.

• Maintain security documentation, procedures, standards, and technical runbooks.

• Participate in security assessments and compliance initiatives across the USNH environment.

Collaboration and Education

• Work closely with technology teams to promote secure design and operational practices.

• Provide technical consultation and guidance regarding cybersecurity risks and controls.

• Develop and deliver security awareness, training, and educational materials.

• Create and maintain technical documentation and knowledge base content.

• Participate in project teams and provide security expertise for technology initiatives.

Operational Support

• Participate in on-call rotations and after-hours incident response activities as required.

• Support continuous improvement initiatives related to security operations, monitoring, and engineering.

• Perform other duties as assigned in support of Information Security Services.

Minimum Qualifications and Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or an equivalent combination of education and experience.

• Experience with vulnerability management, security monitoring, or incident response activities.

• Experience administering Windows and/or Linux operating systems in an enterprise environment.

• Knowledge of networking fundamentals, authentication technologies, and security principles.

• Strong analytical, troubleshooting, and problem-solving skills.

• Demonstrated ability to manage multiple priorities in a dynamic environment.

• Excellent verbal, written, and interpersonal communication skills.

• Ability to work independently and collaboratively within a team environment.

• Ability to pass a police department background check

• Live within the Durham NH area or within a reasonable commutable distance

Knowledge, Skills, and Abilities

• Strong understanding of cybersecurity principles, technologies, and best practices.

• Ability to analyze security events and identify potential threats and vulnerabilities.

• Ability to communicate technical information effectively to both technical and non-technical audiences.

• Strong organizational and time-management skills.

• Ability to document processes and maintain accurate records.

• Commitment to continuous learning and professional development.

• Ability to exercise sound judgment when handling sensitive information and security incidents.

Preferred Qualifications

• Experience supporting Microsoft security technologies, including:

  • Microsoft Defender XDR
  • Microsoft Sentinel
  • Microsoft Entra ID
  • Microsoft Purview
  • Microsoft Intune

• Experience with Microsoft M365 administration, including:

  • Intune
  • Email
  • Endpoint configuration

• Experience with cloud platforms such as Microsoft Azure and Amazon Web Services (AWS).

• Experience with Splunk and Enterprise Security

• Experience with Crowdstrike EDR

• Experience with Identity and Access Management (IAM) and Privileged Access Management (PAM) solutions.

• Experience with scripting and automation using PowerShell, Python, or similar technologies.

• Experience with vulnerability management platforms such as Tenable, Qualys, or Rapid7.

• Experience with security frameworks and standards such as NIST CSF, CIS Controls, ISO 27001, or Higher Education Community Vendor Assessment Toolkit (HECVAT).

• Experience supporting audit, compliance, or risk management programs within higher education or large enterprises.

Certifications (Preferred)

One or more of the following certifications are desirable:

• CompTIA Security+
• CompTIA CySA+
• CISSP
• GIAC Certifications
• GSEC
• Microsoft Security Certifications
• SC-200 Security Operations Analyst
• SC-300 Identity and Access Administrator
• SC-100 Cybersecurity Architect

Working Conditions

• Standard office and hybrid work environment. (24-Hours on Durham campus)
• Occasional travel between USNH campuses may be required.
• Participation in an on-call rotation and response to critical security incidents outside of normal business hours may be required.
• Ability to perform work involving prolonged computer use and analysis of technical information.
• Ability to respond to service calls 24x7

Applicant Instructions

Applicants should be prepared to upload the following documents when applying online within the My Experience: Resume/CV section of the application: (Maximum of 5 Documents)

• Resume/CV
• Cover Letter

Applications that are missing any of the required items may not move forward for consideration. Additional uploaded documents not requested in the position announcement will not be reviewed.

The University of New Hampshire is an R1 Carnegie classification research institution providing comprehensive, high-quality undergraduate and graduate programs of distinction. UNH is located in Durham on a 188-acre campus, 60 miles north of Boston and 8 miles from the Atlantic coast and is convenient to New Hampshire’s lakes and mountains. There is a student enrollment of 13,000 students, with a full-time faculty of over 600, offering 90 undergraduate and more than 70 graduate programs. The University actively promotes a dynamic learning environment in which qualified individuals of differing perspectives, life experiences, and cultural backgrounds pursue academic goals with mutual respect and shared inquiry.

EEO Statement

The University System of New Hampshire is an Equal Opportunity/Equal Access employer. The University System is committed to creating an environment that values and supports diversity and inclusiveness across our campus communities and encourages applications from qualified individuals who will help us achieve this mission. The University System prohibits discrimination on the basis of race, color, religion, sex, age, national origin, sexual orientation, gender identity or expression, disability, genetic information, veteran status, or marital status.

Compensation Pay Range

$60,360.00 - $107,920.00

The pay range for this position is listed above. Actual offer will be based on skills, qualifications, experience, and internal equity, in addition to relevant business considerations. More information on benefits can be found here: USNH Employee Benefits | Human Resources

Location

Durham