Lead Network Security Assessment Engineer

Overview

Lead Network Security Assessment Engineer. Client seeks a Lead Network Security Assessment Engineer to drive complex, enterprise-wide security assessments and provide technical leadership across network security initiatives. This role combines deep technical expertise with leadership responsibilities, guiding assessment strategy, mentoring engineers, and influencing remediation efforts across the organization. The ideal candidate brings strong experience in large-scale environments and has the ability to lead threat hunting initiatives, coordinate across teams, and ensure consistent security assessment practices aligned with the client's risk posture.

• Provide expert-level network security engineering services to review, assess, hunt for known flaws and threat indicators, and document findings identified through red team testing and accelerated resolution of Security Operational Readiness Tests (SORTS) across the enterprise network infrastructure.
• Perform systematic security assessment of current configurations, threat hunting against known vulnerabilities and adversary tactics, techniques, and procedures (TTPs), identify security gaps, and deliver actionable findings aligned to operational standards and risk tolerance.
• Coordinate with cross-functional teams to align assessment practices with risk posture and remediation priorities.

• Minimum 7 years of enterprise network security engineering experience with demonstrated assessment and/or threat hunting expertise.
• Must hold at least two of: CCIE (Security or Enterprise), CCNP Security, Check Point CCSE, F5 301B, AWS Advanced Networking Specialty.
• At least one designated team member must hold a recognized threat hunting or threat intelligence credential (GCIA, GCIH, GCFE, GCTI, or equivalent).
• Experience conducting or supporting formal security assessments, red team remediation engagements and/or remediation required.

• Security leadership, advanced threat hunting, security architecture.
• Firewall, segmentation, and network infrastructure security (Cisco ACI, FTD, Check Point).
• Routing and switching security (BGP, OSPF, AWS networking).
• Threat hunting, CVE analysis, and vulnerability assessment.
• Security tools: F5, Blue Coat, Gigamon, Extra Hop, DNS/IPAM.
• Identity/access control (Cisco ISE) and network security governance.

Location:

Chicago, IL (hybrid). Salary: $100.00 - $125.00/hr this is a contract position. Benefits and eligibility requirements apply per company policy.