SecOps Engineer

Open Approach • Burlington, VT

3d • Onsite

About The Position

Open Approach is a values-driven, client-focused IT services company based in Burlington, Vermont, providing managed technology and client support to organizations across New England and beyond. The company emphasizes long-term partnerships, transparency, practical solutions, continuous improvement, and values including equity, humility, excellence, accountability, innovation, and openness.

The SecOps Engineer is a hands-on security engineering role focused on building, improving, and evolving security systems and processes for Open Approach and its clients. The engineer serves as the primary escalation point for the Security Operations Analyst, handles complex investigations and advanced incident response, and designs, implements, and optimizes security platforms such as SIEM, EDR, and vulnerability management tools. The role also emphasizes research, automation, detection improvement, technical compliance controls, collaboration, and the development of documentation and repeatable processes. This is not a traditional dashboard-monitoring SOC position.

Requirements

• At least 3 years of cybersecurity experience; experience with an MSP or prior MSP experience outside cybersecurity is preferred.
• Working understanding of firewalls, IDS/IPS, endpoint protection, and other core security technologies.
• Ability to analyze security events and incidents to identify threats, patterns, and vulnerabilities.
• Strong attention to detail and ability to investigate incidents thoroughly and resolve them properly.
• Ability to uphold operational and security standards and identify gaps.
• Interest in keeping up with new technologies, trends, and best practices.
• Ability to prioritize effectively when multiple incidents or projects compete for attention.
• Understanding of maintaining standards, managing change, and building repeatable processes.
• Understanding of Active Directory architecture, including users, groups, and computer objects, with a security focus.
• Experience with Group Policy design and management.
• Familiarity with hybrid identity environments and synchronization between on-premises Active Directory and Azure/Entra ID.
• Ability to identify and address common identity and access risks.
• Solid understanding of networking fundamentals, including DHCP, DNS, routing, and switching, and their relationship to security.
• Familiarity with remote access technologies such as SSL VPN and IPSec VPN.
• Understanding of segmentation, least privilege, and traffic flow analysis.
• Ability to troubleshoot network-related security issues across layered environments.
• Strong understanding of M365 and Intune security capabilities, including device management, policy enforcement, Conditional Access, authentication methods, and identity protection.
• Familiarity with email security, mail flow, and integration with security platforms.
• Ability to assess and improve security posture across Microsoft cloud environments.
• Hands-on experience with SIEM, EDR, IDS/IPS, firewalls, and vulnerability management tools.
• Ability to analyze alerts, investigate incidents, and track threats across platforms.
• Understanding of alert tuning, noise reduction, and detection and response fundamentals.
• Familiarity with vulnerability assessments and risk analysis.
• Basic understanding of cryptographic concepts and their practical applications.
• Experience with incident response processes, including triage, containment, investigation, and recovery.
• Ability to analyze complex incidents, determine root cause, and drive remediation.
• Understanding of the incident response lifecycle and ways to reduce impact and improve future response.
• Certifications are not required.

Nice To Haves

• Familiarity with virtualization platforms such as Hyper-V or VMware.
• Understanding of how virtualized environments affect security isolation, snapshotting, and investigation workflows.
• Comfort using virtualization tools to test and validate security configurations.
• Understanding of firewall technologies, rule creation, and policy management.
• Ability to implement firewall rules aligned with best practices and troubleshoot traffic to identify misconfigurations or threats.
• Understanding of public versus private DNS architecture.
• Knowledge of common DNS record types, including A, CNAME, MX, SPF, DKIM, and TXT, and their role in email security.
• Comfort troubleshooting DNS issues using command-line and diagnostic tools.
• Working knowledge of NIST, CIS, and ISO frameworks.
• Familiarity with compliance-driven environments and mapping technical controls to regulatory requirements.
• Ability to support implementation and validation of controls for CMMC, HIPAA, or CJIS.
• Relevant certifications such as Security+, Microsoft Security (SC-series), or similar foundational cybersecurity and cloud certifications.
• Advanced certifications such as CISSP or CCSP for experienced candidates.

Responsibilities

• Act as the escalation point for complex security incidents and investigations.
• Design, implement, and optimize security tools and platforms, including SIEM, EDR, and vulnerability management.
• Lead advanced incident response investigations, containment, and remediation.
• Develop automation and improve processes to reduce manual effort and increase efficiency.
• Research and evaluate new security tools and technologies.
• Tune alerts, reduce false positives, and improve detection capabilities.
• Support compliance initiatives through technical control implementation and validation.
• Collaborate with internal teams to ensure security solutions are properly deployed and maintained.
• Create and maintain documentation, standards, and repeatable processes.
• Contribute to the ongoing maturity of the Security Operations program.

Benefits

• Health, dental, and vision coverage with generous employer contributions.
• Company-sponsored life, STD/LTD disability, and workers’ compensation coverage.
• 401(k) with a 4% match starting day one.
• Generous PTO starting at 16 days, plus paid holidays; 20 days on the one-year anniversary.
• Fully paid parental leave.
• Smartphone stipend for on-call rotation.
• Weekly company lunches, coffee, and snacks.
• Pet-friendly office.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed