Cybersecurity Operations Engineer

The Cyber Operations Engineer is responsible for the implementation, administration, monitoring, and continuous improvement of cybersecurity technologies, services, and processes across the University System of New Hampshire (USNH). The position provides operational and engineering support for Information Security Services (ISS) and works collaboratively with infrastructure, identity and access management, application, and campus technology teams to protect institutional information assets and reduce cybersecurity risk.

This role serves as a technical security subject matter expert responsible for threat detection, incident response, vulnerability management, security monitoring, security engineering, and compliance support activities. The Cyber Security Engineer participates in the evaluation, deployment, and optimization of enterprise security solutions and assists in the development of security standards, procedures, and best practices that support the University's strategic security objectives.

The position also serves as the system administrator to the UNH Police Department and the USNH security camera system. The position is expected to administer a M365 tenant of 55 users, manage servers, and assist all USNH campuses with their cameras. The Cyber Security Engineer interfaces with USNH technology teams, business units, and external partners to support a secure computing environment while balancing operational needs, regulatory requirements, and institutional priorities.

Monitor, investigate, and respond to cybersecurity incidents, including compromised accounts, phishing attacks, malware infections, unauthorized access attempts, and other security events. Perform incident triage, containment, eradication, recovery, and post-incident analysis activities. Support threat hunting and security investigations utilizing enterprise security monitoring and endpoint protection platforms. Participate in the development and refinement of incident response procedures and playbooks. Collaborate with internal and external stakeholders during security investigations and incident response activities.

Administer and operate enterprise vulnerability management platforms and services. Conduct vulnerability assessments of servers, workstations, cloud resources, applications, and network infrastructure. Analyze vulnerability findings and coordinate remediation efforts with system owners and technology teams. Develop metrics, dashboards, and reporting to communicate vulnerability trends and remediation progress. Support risk assessments and security reviews of systems, services, and technology initiatives.

Implement, configure, administer, and maintain enterprise security technologies, including but not limited to:
Endpoint Detection and Response (EDR) Security Information and Event Management (SIEM) Identity and Access Management (IAM) Privileged Access Management (PAM) Email Security Platforms Cloud Security Technologies Data Protection and Compliance Solutions. Evaluate emerging technologies and recommend improvements to strengthen the University's cybersecurity posture. Assist with the design and implementation of security controls for on-premises and cloud environments. Develop and maintain security automation and orchestration processes to improve operational efficiency.

Support internal and external audits by gathering evidence, documenting controls, and assisting with remediation activities. Assist in the implementation and validation of security controls required by institutional policies, standards, and regulatory requirements. Maintain security documentation, procedures, standards, and technical runbooks. Participate in security assessments and compliance initiatives across the USNH environment.

Work closely with technology teams to promote secure design and operational practices. Provide technical consultation and guidance regarding cybersecurity risks and controls. Develop and deliver security awareness, training, and educational materials. Create and maintain technical documentation and knowledge base content. Participate in project teams and provide security expertise for technology initiatives.

Participate in on-call rotations and after-hours incident response activities as required. Support…