Information Security Engineer II

VEIC

. Monitor, triage, investigate, and respond to information security incidents and alerts .

Posted 9/21/2026full-timeRemote • Vermont • United StatesMid-LevelSenior💰 $90,000 - $100,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in information security operations and engineering, with a strong focus on incident response, security technologies, and risk management. Proficient in Microsoft 365 security products and skilled in automation and digital forensics.

Highest-signal resume keywords

Information Security OperationsMicrosoft 365 Security ProductsIncident ResponsePowerShell ProgrammingDigital Forensics

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security ConceptsSecurity EngineeringVulnerability ScanningEvent Log ManagementEndpoint SecurityTCP/IP NetworkingWindows Operating SystemLinux Operating SystemCloud TechnologiesAutomation Capabilities

Soft Skills

Analytical SkillsProblem-Solving SkillsCommunication SkillsCustomer Service OrientationProject Management

Tools & Technologies

SIEM TechnologiesDigital Forensics ToolsFirewallsWeb Application FirewallsAI-Assisted Tools

Certifications & Qualifications

CompTIA Security+CySA+GSEC

Industry Keywords

Cyber RiskSecurity Best PracticesGovernancePolicy MaintenanceAudit Evidence Collection

Tech Stack

Tools & technologies

CloudFirewallsLinuxPythonTCP/IP

About the role

Key responsibilities & impact

Monitor, triage, investigate, and respond to information security incidents and alerts
Coordinate containment, eradication, and recovery activities for security incidents
Engineer, implement, and maintain information security technologies, including SIEM content, detection rules, data onboarding, and automation
Own security engineering projects from scoping and design through implementation and operational handoff
Serve as an Information Technology point of contact for security technologies, processes, and procedures
Collaborate with IT colleagues and teams across the organization on technology, process improvement, and system security
Identify and escalate security issues, risks, and operational performance concerns
Perform investigative tasks and support digital forensics
Support governance and policy activities, including policy maintenance, control reviews, and audit evidence collection
Advise business units on cyber risk and secure, practical processes
Provide guidance on security best practices
Develop security automation capabilities, including AI-assisted tools
Provide information security training and guidance to VEIC staff
Participate in on-call and after-hours incident response, including on-site response when physical presence is required
Perform administrative tasks, reporting, stakeholder communications, and other assigned duties

Requirements

What you’ll need

3 or more years of experience in information security operations and/or security engineering, or an equivalent combination of education and experience
Strong understanding of information security concepts and principles
Proficiency securing and administering Microsoft 365 security products, including Defender for Endpoint, Purview, Entra ID, and Intune
Proficiency with Windows and Linux operating systems, TCP/IP networking, storage systems, virtualization, and containerization
Proficiency in PowerShell and/or Python
Working knowledge of vulnerability scanning, event log management, endpoint security, firewalls, and web application firewalls
Working knowledge of cloud technologies and concepts
Familiarity with digital forensics tools, techniques, and procedures
Familiarity with physical security concepts and practices
Demonstrated ability to work independently and manage projects from initiation through completion
Strong written and verbal communication skills and customer service orientation
Strong analytical, critical thinking, and problem-solving skills
Ability to manage multiple tasks and competing priorities
Ability to communicate complex technical concepts to non-technical audiences
Commitment to continuous learning and professional development
Possess, or be willing to obtain, an entry- to mid-level information security certification such as CompTIA Security+, CySA+, or GSEC within the first six months of employment
Ability to remain stationary at a workstation for extended periods
All positions are subject to criminal background checks

Benefits

Comp & perks

Remote work arrangement
Flexible work arrangements
Ergonomic assessments and appropriate accommodation
Wellness support, including regular movement breaks
Occasional company events or meetings, typically 0–2 times per year, often optional or available virtually