Network Security-NDR

Network Security-NDR

In this role, we will rely on you to engineer, implement and support network security controls that protect enterprise infrastructure across on-premises, cloud and hybrid environments. You will help strengthen network defenses, improve visibility into traffic and threats, and support secure, resilient connectivity across the organization.

This role requires strong hands-on experience in network security engineering, operational support and continuous improvement. The ideal candidate brings practical expertise with enterprise security technologies, strong troubleshooting ability and experience using Extra Hop to enhance network visibility and threat detection.

What you'll do:

• Engineer, implement, and support enterprise network security solutions while partnering with infrastructure, cloud, architecture, and security operations teams to maintain secure connectivity.
• Develop custom applications, integrations, and automation services that enhance Network Detection and Response (NDR) capabilities, improve network visibility, and reduce analyst workload.
• Build and continuously improve detection analytics, enrichment pipelines, and automated response workflows to identify anomalous and malicious network activity.
• Create automated mechanisms to collect, normalize, enrich, and analyze network telemetry to improve detection fidelity and operational effectiveness.
• Deploy, maintain, and scale security automation solutions using modern software engineering, Dev Ops, Infrastructure-as-Code, and CI/CD practices;
  Administer, optimize, and maintain security technologies including firewalls, VPNs, IDS/IPS, network segmentation controls, and secure access platforms.
• Utilize Extra Hop and other monitoring tools to analyze network traffic, investigate anomalies, identify suspicious activity, and improve overall network visibility. Monitor and analyze network activity and security events to support threat detection, incident response, forensic investigations, and operational troubleshooting.
• Support vulnerability management, risk assessments, audits, compliance activities, and remediation efforts related to network security controls;
  Develop engineering documentation, operational procedures, runbooks, and standards.

Experience you'll need to have:

• Hands-on expertise with enterprise firewalls (Palo Alto, Check Point, Cisco Firepower, Fortinet) including deployment, administration, and troubleshooting.
• Strong network security engineering experience with firewall policy management, rule optimization, and network segmentation.
• Hands-on experience with Extra Hop or NDR for network traffic analysis, anomaly detection, threat investigation, and operational visibility.
• Proficiency in TCP/IP networking fundamentals, including routing, switching, DNS, DHCP, and load balancing.
• Experience with VPN technologies supporting secure remote access and site-to-site connectivity.
• Knowledge of IDS/IPS technologies, network threat detection, and traffic analysis methodologies.
• Strong troubleshooting skills using packet capture and analysis tools to investigate network and security incidents.
• Understanding security controls across on-premises, cloud, and hybrid environments, including segmentation and Zero Trust principles.

Experience that would be great to have:

• 5+ years' experience with AI coding tools such as Git Hub Copilot, Microsoft Copilot, Cursor, or Claude Code.
• Exposure to AI agents, workflow automation, and process orchestration.
• Experience developing APIs, integrations, or automation solutions and familiarity with Dev Ops, CI/CD, Infrastructure-as-Code, and Git-based development.
• Understanding of cybersecurity and cloud technologies, including firewalls, Zero Trust, Azure, AWS, or GCP.
• Familiarity with SIEM platforms, centralized logging, and event correlation to support network security monitoring and investigations.
• Experience with network access control (NAC), micro-segmentation, and Zero Trust security architectures and knowledge of security frameworks such as NIST, ISO 27001, CIS Controls, or similar governance and compliance standards.
• Scripting and automation experience using Python, Power Shell, or Bash to improve…