Senior Security Operations Engineer

Annual Compensation: $160,000 - $190,000

Position Type: Remote

About VIP

Vermont Information Processing (VIP) is the leading technology provider to the beverage industry, delivering route accounting, warehouse, delivery, sales, and business management platforms trusted by distributors, bottlers, and more than 1,600 suppliers for over 50 years.

Backed by Warburg Pincus, VIP is investing heavily in security as a first-class discipline across a growing family of companies. This is an opportunity to join at a pivotal moment, with executive sponsorship, a funded roadmap, and visible impact at the board level.

About the Role

VIP is seeking a Senior Security Operations Engineer to serve as the senior hands-on security engineer and technical lead for our growing security program.

You will work alongside a junior security analyst, a 24x7 managed SOC, and external security partners to strengthen and mature security operations across VIP headquarters, private cloud environments, and newly acquired business units. This role combines security engineering, incident response, vulnerability management, identity security, and security operations leadership.

The ideal candidate is both strategic and hands-on, equally comfortable tuning detections, leading incident response efforts, improving security controls, and partnering with executive leadership on the organization's security posture.

What You'll Do

• Lead network segmentation initiatives, redesigning internal security zones and eliminating overly permissive network paths.
• Enhance visibility into east-west network traffic and support VIP's ongoing Palo Alto security architecture initiatives.
• Own and evolve the relationship between VIP's SIEM, SOC, and security tooling ecosystem.
• Build and improve detection, monitoring, and response capabilities across headquarters, cloud environments, and acquired business units.
• Lead vulnerability management efforts across Windows, macOS, Linux, and cloud environments using a risk-based remediation approach.
• Partner with IT and infrastructure teams to strengthen identity and access management capabilities through Okta, privileged access management platforms, and least-privilege controls.
• Improve security around remote access, vendor access, and customer VPN connectivity.
• Serve as the internal technical lead during security incidents, coordinating investigation, containment, and evidence preservation efforts alongside DFIR and vCISO partners.
• Conduct tabletop exercises and security readiness activities to strengthen incident response capabilities.
• Mentor and develop junior security team members while helping establish operational security best practices across the organization.
• Help extend security standards and controls across newly acquired business units.

What You'll Bring

• 7+ years of hands-on experience in security engineering, security operations, network security, or related cybersecurity disciplines.
• Deep practical experience with enterprise firewall technologies, network segmentation, and security architecture design.
• Experience working with SIEM platforms, security monitoring technologies, and managed SOC environments.
• Hands-on experience with endpoint detection and response (EDR) platforms and incident investigation workflows.
• Demonstrated experience responding to and managing real-world security incidents.
• Strong understanding of identity and access management concepts, privileged access controls, and authentication technologies.
• Experience developing and improving vulnerability management and remediation programs.
• Strong analytical, troubleshooting, and risk-prioritization skills.
• Excellent written and verbal communication skills, including the ability to communicate effectively with executives, technical teams, and external partners.
• Ability to operate effectively in a lean, high-impact security team environment.

Nice to Have

• Experience integrating acquired companies or managing security across multi-entity organizations.
• Experience with Palo Alto Networks firewalls and security platforms.
• Experience with Okta, QRadar, CrowdStrike, Nessus, Vulcan, BeyondTrust, or Devolutions.
• Exposure to IBM i (AS/400) or other long-lived enterprise platforms.
• Scripting and automation experience using Python, PowerShell, or similar technologies.
• CISSP, GIAC (GCIA, GCIH, GDSA), PCNSE, or similar security certifications.

Benefits Include

• Health Insurance
• Vision and Dental Expense Reimbursement
• 401(k) Match & Employer Contributions
• Life and Disability Insurance
• Health Savings and Flexible Spending Accounts
• Paid Parental Leave
• Discounted Gym Memberships
• Combined Time Off and Floating Holidays
• Flex and Remote Work Schedules
• On-site Child Care Center (VT)
• On-site Fitness Center (VT)
• On-site Health Clinic (VT)

Legal & Compliance

Equal Employment Opportunity

Vermont Information Processing is an Equal Opportunity Employer. VIP is committed to providing a workplace free of discrimination and harassment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, pregnancy, veteran or military status, or any other characteristic protected by applicable federal, state, or local law. Employment decisions are based on legitimate, job-related factors.

Pay Equity & Transparency

VIP is committed to fair, equitable, and transparent pay. The compensation listed above reflects the anticipated pay for this role. Actual compensation will depend on job-related factors such as experience, skills, qualifications, and work location, and may be adjusted to comply with applicable state and local pay-transparency laws. VIP does not base compensation decisions on any legally protected characteristics and reviews its pay practices to support pay equity across the organization.

Reasonable Accommodation

VIP provides reasonable accommodations to qualified individuals with disabilities throughout the application and employment process. If you need an accommodation to apply for or participate in an interview, please contact [email protected].

Work Authorization

Applicants must be legally authorized to work in the location of the position.