Senior Network Security Engineer

Annual Compensation Range: $120-150K DOE

A Ledgent Technology local client is on the hunt for a Senior Network Security Engineer to help strengthen and modernize our enterprise security environment. This is a highly technical role for someone who enjoys working directly within systems and networks, proactively identifying risks, and implementing practical security improvements that support business operations.

This is not a governance, compliance, or policy-only position. The ideal candidate is a security practitioner with a strong networking foundation who understands how enterprise environments function and can effectively balance security, performance, and operational continuity.

The successful candidate will partner closely with infrastructure, architecture, and IT operations teams to improve security controls, enhance visibility, reduce risk, and implement long-term security initiatives.

• Design, implement, and maintain enterprise security controls, standards, and hardening practices.
• Participate in infrastructure, cloud, and application architecture reviews to ensure security requirements are incorporated early in the design process.
• Evaluate and deploy security technologies that enhance protection without negatively impacting business operations.
• Review existing security configurations, firewall rules, and access controls to identify opportunities for improvement and risk reduction.
• Develop and implement security guardrails that support a "do no harm" approach to business operations.

• Manage and optimize centralized logging, monitoring, and security analytics platforms.
• Conduct proactive threat hunting and security investigations across systems and networks.
• Perform vulnerability assessments, prioritize findings, and coordinate remediation efforts with technical teams.
• Develop, tune, and improve detection rules, alerts, and security monitoring capabilities.
• Analyze security trends and recommend improvements to organizational security posture.

• Lead security incident investigations through detection, containment, eradication, recovery, and post-incident review.
• Develop and maintain incident response playbooks, operational procedures, and runbooks.
• Support endpoint security technologies including EDR, antivirus, and endpoint hardening initiatives.
• Collaborate with infrastructure teams to address and remediate security threats and vulnerabilities.

• Monitor and assess newly discovered devices and network activity.
• Investigate anomalous communications and coordinate mitigation efforts.
• Design and support network segmentation strategies, including VLAN implementation and access controls.
• Review and optimize firewall policies to reduce risk while maintaining business functionality.
• Provide technical guidance on enterprise network security architecture.
• Support implementation and maintenance of network security standards and best practices.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent professional experience.
• 5+ years of experience in cybersecurity, network security engineering, infrastructure security, or a related field.
• Strong understanding of enterprise networking concepts including routing, switching, TCP/IP, network protocols, VLANs, segmentation, and firewall administration.
• Experience with identity and access management technologies, including Active Directory, Microsoft Entra , MFA, and identity lifecycle management.
• Hands-on experience with endpoint security tools, EDR platforms, vulnerability scanners, antivirus solutions, and security monitoring technologies.
• Experience with SIEM platforms, centralized logging, and security operations workflows.
• Ability to evaluate security controls, identify gaps, and recommend practical remediation strategies.
• Experience conducting security investigations, audits, and remediation planning.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work effectively across infrastructure, architecture, and support teams.

• Experience supporting large-scale enterprise security environments.
• Experience with enterprise network security platforms, next-generation firewalls, and centralized security management tools.
• Expertise in threat hunting, detection engineering, and SIEM rule development.
• Experience implementing network segmentation and VLAN strategies.
• Experience with Data Loss Prevention (DLP) technologies and data protection controls.
• Experience with modern identity and access management platforms, including single sign-on and identity governance solutions.
• Experience with email security, collaboration platform security, and information governance technologies.
• Experience with Privileged Access Management (PAM) solutions.
• Industry certifications such as CISSP, GSEC, CEH,…