Security Operations Engineer

Security Operations Engineer

FedPoint – Portland, NH (remote/hybrid)

FedPoint is seeking an experienced Security Operations Engineer to help protect enterprise systems, networks, and data across both traditional and cloud environments. This role strengthens our security operations capabilities, improves incident response maturity, and supports a scalable cloud security framework aligned with regulatory and industry best practices.

Hybrid role requiring two days per week in the office.

• Perform day‑to‑day security operations, including monitoring, detection, investigation, and response to cybersecurity threats.
• Implement and maintain security technologies across endpoint, network, identity, and cloud environments.
• Support and administer tools including EDR, DLP, secure web gateway, email security, IDPS, firewalls, SIEM, and identity protection solutions.
• Configure and maintain cloud web filtering tools, including policy design, SAML integration, and performance monitoring.
• Install, configure, and support Network Access Control (NAC) solutions in enterprise environments.
• Conduct and oversee forensic investigations to determine root cause and prevent recurrence of security incidents.
• Review vulnerability findings, assess risk, and partner with infrastructure and application teams to drive remediation.
• Lead and mentor IT Security and Infrastructure Engineers on threat detection, prevention, and incident response best practices.

• Support the enterprise Vulnerability Management Program and ensure alignment with risk tolerance and operational priorities.
• Classify and prioritize vulnerabilities based on criticality, exposure, and business impact.
• Provide operational guidance to IT teams on interpreting scan results and applying effective mitigation strategies.
• Support automated and manual patching processes, including systems requiring customized remediation timelines.
• Track remediation progress, produce reports, and ensure accountability across stakeholders.
• Facilitate regular patch review meetings to identify blockers and align remediation with business constraints.

• Partner with Security Compliance and Policy teams to develop, maintain, and execute the incident response program.
• Serve as an on‑call cybersecurity escalation point during security incidents.
• Detect, analyze, triage, and remediate threats across the enterprise.
• Analyze SOC alerts, anomalies, and false positives, escalating issues as appropriate.
• Leverage threat intelligence to correlate indicators of compromise and communicate risk to leadership and technical teams.
• Maintain situational awareness through daily monitoring of internal and external cybersecurity alerts.

• Minimum of 5 years of hands‑on cybersecurity experience supporting cloud, endpoint, identity, and network security technologies.
• Bachelor’s degree in Cybersecurity, Information Technology, or related field, or equivalent professional experience.
• Experience administering cloud web filtering solutions, including architecture, deployment, policy design, and troubleshooting.
• Experience supporting federal or highly regulated environments.
• Strong working knowledge of network protocols and security fundamentals (DNS, TCP/IP, SSL/TLS, VPN).
• Hands‑on experience installing and deploying NAC solutions in enterprise environments.
• Strong knowledge of NAC, segmentation, Zero Trust architectures, and network‑based enforcement models.
• Ability to balance security architecture design with hands‑on engineering and troubleshooting.
• Proficiency with tools such as EDR, DLP, secure web gateways, email security platforms, IDPS, firewalls, SIEM, and identity protection solutions.
• Proficiency in Windows or Linux system administration, scripting (Power Shell, Python, Bash), and integrating cloud‑native security technologies.
• Analytical, troubleshooting, and communication skills with ability to collaborate across technical and business teams.
• Proven ability to resolve Zscaler onboarding and adoption challenges in large enterprise environments.

• Hands‑on experience with Zscaler and Fore Scout…