Senior Security Engineer & SOC Lead (Remote)

vipvermontinformationprocessing2; Colchester (VT); On-site; USD 160,000 - 190,000; Full time

Job summary

Vermont Information Processing is seeking a senior hands-on security engineer to lead a small, high-leverage team, with one junior analyst at headquarters and a 24/7 managed SOC behind you. You will enforce, extend, and verify protections across headquarters, our private cloud, and five newly acquired business units.

You will own network segmentation remediation, SIEM/EDR coverage, vulnerability management, identity hardening, and incident response coordination with DFIR partners, while

Qualifications

• 7+ years of hands-on security engineering across network, endpoint, and identity domains.
• Deep practical experience with enterprise firewalls and segmentation design (Palo Alto strongly preferred).
• Extensive SIEM operations and EDR platform experience.
• Demonstrated incident-response experience with forensic partners.
• Ability to operate effectively in a lean, fast-moving team.

Responsibilities

• Own network segmentation remediation and redesign internal zones, eliminating permissive paths.
• Own detection & response engineering, tune SIEM/EDR coverage across HQ, cloud workloads, and acquired units.
• Lead vulnerability management with a multi-tool estate and risk-based prioritization.
• Hardening of identity and access, expanding Okta, and privileged access controls; remote and vendor access hygiene.
• Coordinate incident response with DFIR partners; lead tabletop and live-fire exercises.
• Mentor junior analysts to build an operations-capable team.

Skills

Hands-on security engineering

Firewall and segmentation design

SIEM operations

EDR platforms

Incident response

Executive communication

Security certifications (CISSP/GIAC/PC

Tools

CrowdStrike

QRadar

SecurityHQ

Okta

Palo Alto

Nessus/Vulcan

Job description

Vermont Information Processing is seeking a senior hands-on security engineer to lead a small, high-leverage team, with one junior analyst at headquarters and a 24/7 managed SOC behind you. You will enforce, extend, and verify protections across headquarters, our private cloud, and five newly acquired business units.

You will own network segmentation remediation, SIEM/EDR coverage, vulnerability management, identity hardening, and incident response coordination with DFIR partners, while