Senior SecOps

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Senior SecOps Engineer based in the United States.

The Senior SecOps Engineer will serve as the senior hands-on security specialist and technical lead for a growing enterprise security program. This role combines security engineering, incident response, vulnerability management, identity security, and operational strategy across corporate, private cloud, and newly integrated business environments. Working alongside an internal security analyst, a 24/7 managed Security Operations Center (SOC), and external security partners, the successful candidate will strengthen detection, prevention, and response capabilities. They will lead initiatives to improve network segmentation, modernize security controls, and reduce organizational risk. The position also involves guiding incident response efforts, mentoring junior team members, and collaborating with executive leadership on security priorities. This is an opportunity to make a visible impact within a well-funded security program supported by senior leadership.

Accountabilities

• Lead network segmentation initiatives, redesigning internal security zones and eliminating overly permissive network access paths.

• Improve visibility into east-west network traffic and contribute to the evolution of enterprise firewall and security architecture.

• Manage and strengthen the relationship between SIEM platforms, the managed SOC, and the broader security tooling ecosystem.

• Build and enhance detection, monitoring, and incident response capabilities across headquarters, cloud environments, and acquired business units.

• Lead vulnerability management across Windows, macOS, Linux, and cloud environments, prioritizing remediation according to risk.

• Partner with IT and infrastructure teams to strengthen identity and access management through Okta, privileged access management platforms, and least-privilege controls.

• Improve security controls for remote access, vendor connectivity, and customer VPN environments.

• Act as the internal technical lead during security incidents, coordinating investigations, containment, and evidence preservation with digital forensics and incident response (DFIR) specialists and virtual CISO partners.

• Conduct incident response tabletop exercises and security readiness activities to improve organizational preparedness.

• Mentor and support junior security team members while establishing operational security standards and best practices.

• Extend security policies, controls, and operational practices across newly acquired business units.

Requirements:

• At least 7 years of hands-on experience in security engineering, security operations, network security, or a related cybersecurity discipline.

• Strong practical expertise in enterprise firewall technologies, network segmentation, and security architecture design.

• Experience with SIEM platforms, security monitoring technologies, and managed SOC environments.

• Hands-on experience with endpoint detection and response (EDR) platforms and incident investigation workflows.

• Demonstrated experience responding to and managing real-world security incidents.

• Strong understanding of identity and access management, privileged access controls, and authentication technologies.

• Experience developing, implementing, and improving vulnerability management and remediation programs.

• Excellent analytical, troubleshooting, and risk-prioritization skills.

• Strong written and verbal communication skills, with the ability to collaborate effectively with executives, technical teams, and external partners.

• Ability to work independently and manage competing priorities within a lean, high-impact security team.

Preferred Qualifications:

• Experience integrating acquired organizations or managing security across multiple business entities.

• Familiarity with Palo Alto Networks firewalls and security platforms.

• Experience with tools such as Okta, QRadar, CrowdStrike, Nessus, Vulcan, BeyondTrust, or Devolutions.

• Exposure to IBM i (AS/400) or other long-standing enterprise technology platforms.

• Scripting and automation experience using Python, PowerShell, or similar technologies.

• Relevant industry certifications such as CISSP, GIAC (GCIA, GCIH, GDSA), PCNSE, or equivalent credentials.

Benefits:

• Annual compensation: $160,000–$190,000.

• Remote work flexibility.

• Health insurance.

• Vision and dental expense reimbursement.

• 401(k) plan with employer matching and contributions.

• Life and disability insurance.

• Health Savings Accounts (HSA) and Flexible Spending Accounts (FSA).

• Paid parental leave.

• Discounted gym memberships.

• Combined time off and floating holidays.

• Flexible work schedules.

• Additional on-site amenities at the Vermont location, including childcare, a fitness center, and a health clinic.