Cybersecurity Operations Engineer: Incident Response Lead

VELCO - Vermont Electric Power Company; Rutland (VT); On-site; USD 91,000 - 127,000; Full time

Job summary

VELCO is seeking a Cybersecurity Operations Engineer to protect the organization’s corporate technology environment and support secure delivery of IT services across Vermont’s transmission network.

You will monitor security alerts, perform incident response, threat analysis, and compliance activities, collaborating with IT, Compliance, Legal, and business teams to strengthen the utility’s cybersecurity program and resilience.

Qualifications

• Working knowledge of security operations center practices and incident handling.
• Experience with SIEM, EDR, vulnerability management, and related platforms.
• Knowledge of Windows and Linux systems, AD/Entra ID, and cloud services.
• Ability to analyze logs and telemetry from endpoints, networks, and cloud services.
• Understanding of incident response lifecycles, evidence handling, and NC/CIP references.
• Strong communication skills and ability to translate findings to non-technical stakeholders.

Responsibilities

• Monitor and triage security alerts from endpoints, networks, and cloud services.
• Investigate suspicious activity, contain and remediate incidents, and escalate as needed.
• Participate in CIIP-008/ CIP-015 related activities and maintain incident records.
• Develop detections, playbooks, and procedures to improve threat visibility and response.
• Coordinate vulnerability management and risk remediation with system owners.
• Provide security guidance and awareness to employees and technical teams.

Tools

SIEM

EDR

Email security

Identity protection

Network monitoring

Job description

VELCO is seeking a Cybersecurity Operations Engineer to protect the organization’s corporate technology environment and support secure delivery of IT services across Vermont’s transmission network.

You will monitor security alerts, perform incident response, threat analysis, and compliance activities, collaborating with IT, Compliance, Legal, and business teams to strengthen the utility’s cybersecurity program and resilience.