Lead, Network Security Automation Engineer

Job Classification

Technology – Information Security

Are you interested in building capabilities that enable the organization with innovation, speed, agility, scalability, and efficiency? The Global Technology team takes great pride in our culture where digital transformation is built into our DNA! When you join our organization at Prudential, you’ll unlock an exciting and impactful career – all while growing your skills and advancing your profession at one of the world’s leading financial services institutions.

As a Lead, Information Security Operations within Information Security Governance & Standards on the Network Security team in the Information Security Office (ISO), you will design and automate end-to-end network security workflows, including request intake, risk evaluation, approval, provisioning, and third-party integrations. The role also builds governance decision-making metrics, KRIs, and KPIs tied to service execution and request activity, with reporting delivered through Service Now or SPLUNK extracts.

Additionally, you will perform complex risk analysis on service requests using CMDB data, data types, third-party access scenarios, and data sensitivity factors, and report on controls such as Policy Decision Point (PDP), Policy Enforcement Point (PEP), and micro-segmentation enforcement effectiveness. The network security automation engineer designs, builds, and maintains technical solutions specifically focused on IT Service Management (ITSM) and IT Operations Management (ITOM).

This role automates workflows and engineers telemetry-driven data collection, metrics, scheduled reports, and dashboard views to enhance operational transparency, support governance decision-making, inform future-state workflow design, and modernize comparable processes across legacy, on-premises, and cloud-based environments.

• User Experience Enhancement:
  Dive into the Service Portal to build and customize clean, intuitive user interfaces that improve the network security and controls exception user experience. Examples include simplifying the end user information requirements and automating risk-driven calculations and CMDB look-up information for firewall or network controls exception processes.
• Advanced Scripting:
  Write, test, and review upgrade-safe, high-performing client-side and server-side JavaScript, Python, Go Lang, Power Shell, and automation from Microsoft Power Automate tools. Policy editing including Business Rules, Client Scripts, Script Includes, and UI Policies.
• Workflow Design:
  Build and automate complex, end-to-end business processes using Flow Designer and Integration Hub.
• System Testing & QA:
  Run and configure automated test suites within the Automated Test Framework (ATF) to ensure new features deploy smoothly without breaking existing functionality.
• CMDB Integration:
  The database lookup of CMDB elements of sensitive data types, controls and other applications for the accurate request submission process.
• Collaboration:
  
  Work with the network security team to absorb and leverage knowledge of business and security systems/processes to identify operational risks and build antifragile Information Security capabilities and improve Service Now processes to address service-request-based risk.

• Bachelor of Computer Science or Engineering or experience in related fields.
• Ability to engage with others with minimal guidance and effectively leverage diverse ideas, experiences and perspectives to the benefit of the organization.
• Experience with agile development methodologies such as sprints, use of tools like Git Hub and Artifactory and the use of Dev Ops pipelines and code quality testing tools.
• Knowledge of business concepts and information security tools and processes that are needed for making sound decisions in the context of the company's business.
• Ability to learn new skills and knowledge on an on-going basis through self-initiative and tackling challenges.
• Excellent problem solving, communication and collaboration skills.
• Advanced experience and/or expertise with several of the following:

• NIST and ISO 27000 Standards
• Information Security Control…