Network Security Engineer

• Identify security gaps and lead the design, architecture, and implementation of appropriate security solutions
• Partner with Operations, Engineering, and Planning organizations to embed secure design patterns into new deployments and major changes
• Work with lead engineers on strategic security technical challenges and complex investigations
• Provide analysis during active incidents
• Support root cause analysis and produce reports covering timelines, impact, and remediation
• Perform regular security control assessments to validate configuration effectiveness and close gaps found during active hunts
• Communicate complex technical concepts to diverse internal and external audiences
• Advance security posture through real-time threat monitoring and detection using SIEM tools
• Lead incident response efforts during breaches
• Manage the continuous vulnerability management lifecycle across networks and applications
• Define and implement security architecture covering telemetry logs, ACLs, stateful firewalls, encryption, IAM, and MFA
• Develop and refine threat detection capabilities in SIEM platforms and other security tooling

• Bachelor’s degree or three or more years of relevant work experience in network security or a related field
• Experience with industry-standard SIEM tools such as Splunk, QRadar, Microsoft Sentinel, or Elastic
• Network fundamentals knowledge, including TCP/IP and general router operations
• Familiarity with Control Plane, Data Plane, and Management Plane concepts
• Conceptual knowledge of securing common routing protocols such as BGP, OSPF, and IS-IS
• Exposure to reviewing Net Flow or IPFIX traffic logs and identifying anomalies or suspicious patterns
• Intermediate knowledge of comprehensive security architecture design and deployment
• Knowledge of firewalls, encryption, IAM, MFA, and hardened management network interfaces
• Networking fundamentals across OSI layers 1–4
• Threat hunting or detection engineering skills
• Network and protocol analysis
• Endpoint forensics
• Data science querying of large datasets
• Automation and scripting experience
• Preferred certifications include CISM, OSCP, Security+, JNCIA, CCNA, JNCIS, or CCNP
• Hands‑on experience with Net Flow, BGP, DNS, and IDS logs at scale is advantageous
• Knowledge of NIST 800-61 and MITRE ATT&CK methodologies is advantageous
• Experience with risk‑based alerting, asset/identity correlation, and Elasticsearch is advantageous
• Unix or Linux expertise, IPsec/TLS encryption, and DDoS mitigation experience are advantageous
• Project management skills and a record of delivering results
• Effective written and verbal communication skills for cross‑functional collaboration

Demonstrates expertise in security architecture design, incident response, and vulnerability management, with a strong focus on threat detection and monitoring using SIEM tools. Proficient in network security fundamentals and effective communication of complex technical concepts to diverse audiences.

• Security Architecture Design
• Incident Response Management
• SIEM Tools Experience
• Vulnerability Management
• Threat Detection Engineering

• Network Security
• Threat Hunting
• Data Analysis
• Automation and Scripting
• Endpoint Forensics
• Network and Protocol Analysis
• Security Control Assessments
• Root Cause Analysis
• Configuration Validation
• Security Solutions Implementation

• Effective Communication
• Cross-Functional Collaboration
• Project Management

• CISM
• OSCP
• Security+
• JNCIA
• CCNA
• JNCIS
• CCNP

• NIST 800-61
• MITRE ATT&CK
• TCP/IP
• Routing Protocols
• Control Plane
• Data Plane
• Management Plane
• DDoS Mitigation
• IAM
• MFA

• Splunk
• QRadar
• Microsoft Sentinel
• Elastic
• SIEM Platforms
• Net Flow
• BGP
• DNS
• IDS
• IPsec/TLS