Network Cyber Security Engineer

• Identify technology gaps and lead the design, architecture, and implementation of security solutions
• Create formal guidelines, policies, and procedures
• Implement strategic solutions in a highly scalable environment
• Partner with Operations, Engineering, and Planning organizations to embed secure design patterns into deployments and major changes
• Work independently on strategic technical challenges
• Mentor junior engineers and delegate technical documentation and tasks
• Communicate complex technical concepts to internal and external audiences
• Lead network security incident response, including triage, containment, eradication, and recovery
• Build and refine incident playbooks and response runbooks for ransomware, phishing, insider threat, DDoS, and other scenarios
• Provide escalation support and expert analysis during active security investigations
• Conduct root cause analysis and produce incident reports covering timeline, impact, evidence, and remediation recommendations
• Perform proactive threat hunting across identity, endpoint, and network telemetry
• Create and tune SIEM threat detections to improve alert fidelity and reduce false positives
• Improve network visibility and telemetry collection
• Perform security control assessments and address gaps found during incidents or threat hunts

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field or four or more years of work experience
• Four or more years of relevant experience, demonstrated through work and/or military experience, or specialized training
• Ability to write complex, optimized Splunk SPL searches, including macros, data models, and lookups
• Knowledge of incident response life cycles such as NIST or SANS
• Experience designing, testing, and maintaining SOAR automation playbooks
• Experience with risk-based alerting, notable events, asset/identity correlation, and correlation searches
• Security certifications such as CompTIA Security+, CISSP, CCIP, CISM, CCSP, OSCP, or CEH
• Experience with Identity and Access Management solutions
• Experience with network protocols and information security
• Networking certifications such as PCNSE, CCNP, or CCNA
• Experience with networks, 4G/5G wireless network functions, Open Stack, or Kubernetes
• Experience with Python or Ansible
• UNIX or Linux systems engineering expertise
• Experience with encryption for data in transit and at rest
• Strong analytical skills and attention to detail
• Effective written, interpersonal, and verbal communication skills
• Must be within commuting distance of one of the listed office locations
• Minimum three days per week in the office under hybrid work policies

Demonstrates expertise in designing and implementing security solutions, including incident response and threat detection, while effectively communicating complex technical concepts. Proficient in mentoring junior engineers and collaborating with cross-functional teams to enhance security practices.

• Security Solutions Design
• Incident Response Lifecycle Knowledge
• Splunk SPL Search Optimization
• SOAR Automation Playbook Development
• Network Protocols and Information Security

• Security Control Assessments
• Threat Hunting
• SIEM Threat Detections
• Encryption for Data in Transit and at Rest
• Python Programming
• Ansible Automation
• UNIX Systems Engineering
• Linux Systems Engineering
• Network Visibility Improvement
• Root Cause Analysis

• Analytical Skills
• Attention to Detail
• Effective Communication

• CompTIA Security+
• CISSP
• CCIP
• CISM
• CCSP
• OSCP
• CEH
• PCNSE
• CCNP
• CCNA

• Incident Response
• NIST
• SANS
• Identity and Access Management
• Risk-Based Alerting
• DDoS
• Ransomware
• Phishing
• Insider Threat
• Telemetry Collection

• Splunk
• SOAR Solutions
• 4G/5G Wireless Networks
• Open Stack
• Kubernetes