Senior SecOps

The role

You will be the senior hands-on security engineer and technical lead for VIP's security program. You will work on network segmentation, detection and response, vulnerability management, and identity security across headquarters, private cloud, and acquired business units.

What you will do

• Lead network segmentation initiatives and remove overly permissive network paths.
• Enhance visibility into east-west network traffic and support Palo Alto security architecture initiatives.
• Own the relationship between the SIEM, SOC, and security tooling.
• Build and improve detection, monitoring, and response across HQ, cloud, and acquired units.
• Lead risk-based vulnerability management across Windows, macOS, Linux, and cloud.
• Strengthen identity and access management with Okta, privileged access management, and least-privilege controls.
• Improve security around remote access, vendor access, and customer VPN connectivity.
• Serve as internal technical lead during security incidents, coordinating with DFIR and vCISO partners.
• Conduct tabletop exercises and security readiness activities.
• Mentor junior security team members and help establish security best practices.

Required qualifications

• 7+ years of hands-on experience in security engineering, security operations, network security, or related disciplines.
• Deep practical experience with enterprise firewalls, network segmentation, and security architecture design.
• Experience with SIEM platforms, security monitoring, and managed SOC environments.
• Hands-on experience with endpoint detection and response (EDR) platforms and incident investigation.
• Demonstrated experience responding to and managing real-world security incidents.
• Strong understanding of identity and access management, privileged access controls, and authentication technologies.
• Experience developing and improving vulnerability management and remediation programs.
• Strong analytical, troubleshooting, and risk-prioritization skills.
• Excellent written and verbal communication skills, including with executives and external partners.
• Ability to operate effectively in a lean, high-impact security team.

Nice to have

• Experience integrating acquired companies or managing security across multi-entity organizations.
• Experience with Palo Alto Networks firewalls and security platforms.
• Experience with Okta, QRadar, CrowdStrike, Nessus, Vulcan, BeyondTrust, or Devolutions.
• Exposure to IBM i (AS/400) or other long-lived enterprise platforms.
• Scripting and automation experience using Python, PowerShell, or similar.
• CISSP, GIAC (GCIA, GCIH, GDSA), PCNSE, or similar security certifications.

Benefits

• Health Insurance
• Vision and Dental Expense Reimbursement
• 401(k) Match & Employer Contributions
• Life and Disability Insurance
• Health Savings and Flexible Spending Accounts
• Paid Parental Leave
• Discounted Gym Memberships
• Combined Time Off and Floating Holidays
• Flex and Remote Work Schedules
• On-site Child Care Center (VT)
• On-site Fitness Center (VT)
• On-site Health Clinic (VT)

Before you apply

• Applicants must be legally authorized to work in the location of the position.

About the company

Vermont Information Processing is a technology provider to the beverage industry for over 50 years. It is backed by Warburg Pincus and is investing heavily in security.