Network Security Engineer

Planet Art’s vision is to be the leading seller of personalized and make-on-demand products worldwide. We provide consumers with unmatched tools and content and an unparalleled end-to-end customer experience that results in high-quality, meaningful finished products and memorable celebrations of life events.

The company’s brands include the popular Free Prints and Free Prints Photobooks apps and the industry leading Simplyto Impress card and stationery site, as well as Personal Creations, Cafe Press and ISeeMe! Visit  to learn more about our brands.

We have more than 500 team members across multiple offices, primarily in Calabasas CA, San Diego CA, Woodridge IL, Minneapolis, MN and Pleasanton, CA. We also have team members in two company-owned offices in China, as well as in Europe.

Planet Art is looking for a Network Security Engineer to support the company’s Security Department. The successful candidate will assess network and server security, monitor security events, and investigate alerts across Cisco technologies, Palo Alto firewalls, Windows and Linux servers, and endpoint security tools. This role requires an understanding of SIEM log collection and monitoring, EDR configuration, and SOC alert triage.

The engineer will work with infrastructure teams to address security risks; direct configuration of network devices and firewalls is outside the scope of this position.

PLEASE NOTE:

Candidates must be local to or willing to relocate to the (office) area as we operate on a hybrid work model (3 days onsite, 2 remote)

• Review Cisco and Palo Alto firewall policies, access controls, segmentation, VPNs, and security logs.
• Assess Windows and Linux server hardening, patching, authentication, permissions, and audit logging.
• Verify SIEM collection of firewall, network, server, and endpoint logs; investigate logging gaps.
• Monitor SIEM and Endpoint Detection and Response (EDR) alerts for suspicious activity.
• Triage alerts: validate detections, distinguish false positives, assess severity, and escalat…
• Correlate network, server, identity, and endpoint events to identify affected systems and timelines.
• Configure EDR policies, detection settings, exclusions, and alerts through approved change procedures.
• Coordinate incident containment and remediation with infrastructure teams; track issues to resolution.
• Document investigations and response procedures; evaluate AI use in analysis and detection.
• Develop, test, and maintain security tools for log analysis, alert triage, and automation.
• Recommend security improvements to the teams responsible for network and server configuration.

• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent experience.
• 3–5 years of experience in network security, security operations, incident response, or a related role.
• Working knowledge of Cisco technologies and Palo Alto firewalls, including interpreting configurations, policies, and logs; understanding of TCP/IP, DNS, NAT, VPNs, and segmentation.
• Understanding of Windows and Linux server security, including hardening, patching, authentication, permissions, and audit logging.
• Knowledge of Security Information and Event Management (SIEM), including log collection, forwarding, ingestion, parsing, correlation, and alert monitoring.
• Experience with EDR configuration and investigation, including policies, detection settings, exclusions, endpoint telemetry, and response capabilities.
• Ability to triage alerts as a SOC analyst would, gather evidence, prioritize threats, and escal…
• Strong analytical, troubleshooting, and communication skills, with the ability to collaborate across security, network, and…