Cybersecurity Operations Engineer

VELCO - Vermont Electric Power Company

. Monitor and triage security alerts across endpoints, identity platforms, networks, servers, cloud services, email, applications, and enterprise security technologies .

Posted 10/12/2026full-timeRutland • Vermont • United StatesMid-LevelSenior💰 $90,917 - $127,284 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity operations, incident response, and security monitoring, with a strong focus on vulnerability management and compliance with NERC CIP standards. Proficient in utilizing security tools and technologies to analyze threats, coordinate remediation, and maintain operational integrity.

Highest-signal resume keywords

Cybersecurity OperationsIncident ResponseVulnerability ManagementSIEM AdministrationNERC CIP Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat AnalysisAlert TriageSecurity Tool AdministrationLog AnalysisIncident DocumentationDetection EngineeringRoot-Cause AnalysisScriptingAutomationTechnical Procedures

Soft Skills

Analytical SkillsTroubleshootingOrganizational SkillsProject CoordinationCommunication Skills

Tools & Technologies

SIEMEDREmail SecurityIdentity ProtectionNetwork MonitoringCloud ServicesMicrosoft Active DirectoryMicrosoft 365VirtualizationDNS

Certifications & Qualifications

CompTIA Security+CompTIA CySA+GCIHGCIA

Industry Keywords

NERC CIP-008NERC CIP-015SOC PracticesCIS ControlsMITRE ATT&CKRisk-Based Vulnerability ManagementIncident Response LifecycleEvidence HandlingHigh-Pressure EventsCompliance Evidence

Tech Stack

Tools & technologies

CloudCyber SecurityDNSFirewallsLinux

About the role

Key responsibilities & impact

Monitor and triage security alerts across endpoints, identity platforms, networks, servers, cloud services, email, applications, and enterprise security technologies
Investigate suspicious activity, validate event scope and severity, document findings, coordinate containment and remediation, and escalate incidents
Participate in cybersecurity incident response and NERC CIP-008 activities, including preparation, testing, classification, evidence preservation, response coordination, recovery, lessons learned, and incident records
Participate in NERC CIP-015 internal network security monitoring, including monitoring strategy, sensor and data-source coverage, alert review, analysis, escalation, evidence retention, testing, and process improvement
Administer and improve SIEM, EDR, email security, vulnerability management, identity protection, network monitoring, and security orchestration technologies
Develop and tune detections, dashboards, correlation rules, use cases, playbooks, and response procedures
Conduct vulnerability assessment and remediation coordination; validate risk, prioritize corrective actions, track exposure, and report unresolved issues
Support identity and access security through review of privileged activity, authentication anomalies, account misuse, and access-control exceptions
Analyze threat intelligence and emerging attack techniques and incorporate relevant indicators into monitoring
Perform proactive threat hunting and security analysis using telemetry, baselines, and contextual information
Maintain case notes, metrics, evidence, procedures, diagrams, inventories, and records for reporting, audits, investigations, and compliance
Partner with IT Infrastructure and application owners to implement changes securely, validate logging and monitoring, and resolve security issues
Support security assessments, control testing, audit requests, regulatory reviews, tabletop exercises, and corrective action plans
Provide security guidance and awareness, translating technical findings into business risk, recommended actions, and status updates
Participate in project planning, technology evaluations, vendor security reviews, and implementation activities
Participate in an on-call rotation and support significant cybersecurity events or operational emergencies
Represent VELCO in industry, regional, and regulatory forums and maintain knowledge through training, exercises, workshops, and professional development
Perform other duties as assigned

Requirements

What you’ll need

Bachelor’s degree in cybersecurity, information technology, computer science, information systems, or a related technical discipline is preferred
An associate degree, recognized technical or military training, or an equivalent combination of relevant education and progressively responsible experience may be considered
At least one current industry-recognized cybersecurity certification aligned with security operations is preferred, such as CompTIA Security+, CompTIA CySA+, GCIH, GCIA, or equivalent
Candidates without a certification may be expected to obtain an approved credential within 12 months of hire
Ongoing role-based training in incident response, security monitoring and detection, threat analysis, vulnerability management, cloud and identity security, and applicable VELCO procedures and NERC CIP requirements
3–7 years of progressively responsible experience in cybersecurity operations, security engineering, incident response, infrastructure security, or a related field
Practical experience investigating alerts, administering security tools, coordinating remediation, and producing clear operational or compliance evidence
Working knowledge of SOC practices, incident handling, threat analysis, alert triage, case management, and escalation
Experience with SIEM, endpoint detection and response, vulnerability management, email security, identity protection, network security monitoring, and related enterprise security platforms
Knowledge of Windows and Linux systems, Microsoft Active Directory and Entra ID, Microsoft 365, virtualization, networking, DNS, DHCP, VPN technologies, cloud services, and common enterprise applications
Ability to analyze logs and telemetry from endpoints, identity systems, firewalls, network devices, servers, cloud platforms, and applications
Understanding of incident response lifecycles, evidence handling, root-cause analysis, recovery, lessons learned, and incident documentation
Familiarity with internal network security monitoring, detection engineering, traffic and flow analysis, sensor coverage, logging architecture, and escalation procedures
Working knowledge of NERC CIP concepts, particularly CIP-008 and CIP-015
Familiarity with NIST guidance, CIS Controls, MITRE ATT&CK, vendor security guidance, and risk-based vulnerability management
Ability to develop and maintain scripts, queries, automation, playbooks, test plans, and technical procedures
Strong analytical, troubleshooting, organizational, and project coordination skills
Excellent written and verbal communication skills
Ability to maintain confidentiality, exercise sound judgment, work effectively during high-pressure events, and collaborate professionally
Eligible applicants must be authorized to work in the United States
Successful reference check, background check including social media check, physical examination, and drug screening required

Benefits

Comp & perks

Comprehensive benefits
Generous paid time off
Incentive compensation (bonus) potential
Open office setting and dog friendly
Opportunity to work closely with engineering, IT, and operations
Mission-driven organization supporting critical energy infrastructure
Collaborative, cross-functional team environment
Ongoing role-based training
Professional development
Periodic travel and overnight stays for training, workshops, meetings, or industry events