Network Security Operations Engineer

General

Summary:

Reporting to the Chief Information Security Officer (CISO), the Network Security Operations Engineer (NSOE) is responsible for the operational management, security, reliability, and continuous improvement of the University's network security infrastructure. The position is responsible for the day-to-day operation of enterprise network security technologies, ensuring the confidentiality, integrity, availability, and resilience of university systems while partnering with Infrastructure, Network Services, and other IT teams.

Primary responsibilities include ownership of enterprise firewall services, network security segmentation, VPN and Network Access Control (NAC) security services, security event monitoring within the Network and Security Operations Center (NSOC), and technical leadership for network security incident response in coordination with the Information Security Office and Network Services. The role requires after-hours support for critical security events.

Success in this role is measured by maintaining secure, resilient, and reliable network security services while continuously improving operational maturity, reducing organizational risk, and delivering exceptional service to the university community.

• Lead technical coordination of network security incidents at the Network and Security Operations Center (NSOC), overseeing security event monitoring, investigation, and response in accordance with enterprise incident response protocols.
• Maintain secure, resilient firewall policies and configurations that protect university resources while enabling business operations.
• Maintain the security configuration and operational effectiveness of network segmentation, VPN, and Network Access Control (NAC) technologies in partnership with Network Services.
• Analyze, investigate, and coordinate response to network security events and alerts generated through enterprise monitoring platforms.
• Maintain accurate operational documentation supporting service continuity, disaster recovery, audits, and knowledge transfer.
• Maintain operational visibility across on-premises, cloud, and hybrid environments to ensure consistent enforcement of network security controls.
• Leverage automation, security monitoring platforms, and enterprise security tools, including SIEM, to proactively monitor, analyze, and respond to threats while enabling rapid containment of security incidents and vulnerabilities.
• Maintain an ongoing assessment of network security maturity, documenting risks, technical debt, and recommending remediation priorities through annual gap assessments and the University's Plan of Action and Milestones (POAM).
• Lead technical incident response activities in coordination with the Information Security Office.
• Conduct post-incident reviews to identify gaps, refine security controls, minimize future risk, and track corrective actions through completion.
• Partner with Network Services and ISO to translate complex technical issues into clear operational communications for leadership and campus stakeholders.
• Develop and maintain network status dashboards, outage notifications, and service bulletins to keep the community informed of operational changes.
• Participate in and contribute technical expertise to security risk assessments, audits, and penetration testing activities.
• Lead the operational coordination of network security vulnerability remediation by identifying, prioritizing, tracking, and validating remediation activities in partnership with Desktop Services, Systems Administration, and Infrastructure teams.
• Support mail security operations, including monitoring and tuning of email threat protection, anti-phishing, and anti-spoofing controls (SPF, DKIM, DMARC).
• Evaluate emerging threats and translate threat intelligence into improvements to security controls and operational practices.
• Participate in an on-call rotation and provide after-hours support for critical security incidents, network upgrades, and emergency response.
• Train, mentor, and supervise student employees to support their professional development.
• Build trusted partnerships across the university by delivering responsive, collaborative, and solutions oriented security services.
• Continuously improve network security operations by identifying opportunities to automate manual processes, reduce technical debt, enhance operational efficiency, and strengthen the University's overall security posture.
• Perform other duties as assigned.

• Bachelor's degree (BS) in Cybersecurity, Information Technology, Networking, or a related field, plus five (5) years of cumulative hands-on experience in network and security operations
• Operational experience administering enterprise firewall platforms and network security controls in a production environment.
• Demonstrated competency in network segmentation, VPN, and Network Access Control (NAC) concepts and operations.
• Demonstrated experience using enterprise SIEM platforms for…