Lead, Network Security Analyst

Description

The Global Technology team builds capabilities that help the organization move faster, scale and work more efficiently, and digital transformation is part of how it operates. The company is a large financial services institution.

This role sits in the Network Security Strategy & Analysis team, which is part of the ISO Infrastructure Security team. You will work as a senior individual contributor, assessing enterprise network security, finding risk and technical debt, and building practical strategies for Zero Trust, network segmentation, network access control and modernization of network security.

You will work with Network Engineering, Network Security Operations, Infrastructure, Cloud, Identity, Architecture and other security teams to turn your analysis into prioritized roadmaps and measurable risk reduction. You will explain hard concepts, influence stakeholders and tackle very complex problems that require judging risk, controls, architecture and business impact.

The team does not run day-to-day administration or operations of network security platforms. Instead, it uses analysis to harden the environment and reduce risk. Success depends on technical depth, strategic thinking, sound analytical judgment and leading work through influence across teams.

Job classification: Technology - Information Security.

Responsibilities

• Lead detailed assessments of current network security architecture, controls, processes and technical debt across campus, data center, cloud and remote-access environments.
• Build strategic recommendations, target architectures, transition roadmaps and ranked risk-reduction plans for Zero Trust, segmentation, NAC, ZTNA, firewalls, proxies and related capabilities.
• Review architecture, configuration, telemetry, asset, vulnerability and control data to surface material risks, systemic gaps and ways to harden the environment.
• Lead workstreams and give technical guidance to less experienced team members. You will not manage people directly.
• Work with the engineering and operations teams that own these technologies to confirm findings, agree remediation approaches, set milestones and see agreed actions through.
• Take part in security architecture and design reviews, recording requirements, assumptions, risks, compensating controls and recommended decisions.
• Help create reusable reference architectures, security patterns, engineering requirements, decision frameworks and assessment methods that align with enterprise standards.
• Explain network security risks and trade-offs to technical teams, business stakeholders and senior leaders using concise, evidence-based recommendations.
• Define outcome-based metrics and contribute to executive reporting on risk reduction, control maturity, roadmap progress and technical debt retirement.
• Assess emerging technologies and industry practices and advise where they should shape network security strategy.
• Serve as the network security subject matter expert within the ISO Infrastructure Security team.

Requirements

• Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity or a related field, or equivalent experience.
• Advanced experience in network security engineering, architecture, advisory or strategy within a large, complex enterprise.
• Ability to structure ambiguous problems, plan analysis, weigh options and give clear recommendations with little guidance.
• Ability to lead complex work, mentor others and draw on varied ideas, experiences and perspectives.
• Strong business judgment, balancing security risk, operational feasibility, customer impact, cost and delivery constraints.
• Experience with agile delivery or program management methods and cross-functional execution.
• Strong problem solving, written communication, executive presentation, facilitation and collaboration skills.
• Advanced experience in several of the following: enterprise network architecture and controls across campus, branch, data center, cloud, internet edge and remote access; firewalls, secure web gateways, proxies, ZTNA, VPN, DNS security, WAF, load balancers and network detection, including Check Point, Cisco and Zscaler; Zero Trust principles, NIST SP 800-207, identity-aware access, least privilege, continuous verification and policy-based access; network and microsegmentation design, trust zones, application dependency analysis and east-west controls; NAC design, including discovery, profiling, authentication, authorization, 802.1X, exception handling and phased adoption; architecture reviews, threat modeling, risk assessments, control design, compensating controls and remediation planning; information security policies, standards and procedures, NIST frameworks, ISO 27000, NIST 800-53 and CIS Controls; security analytics using SIEM, network telemetry, configuration data, asset inventories, vulnerability data and CMDB or IPAM sources; metrics, KRIs, KPIs, maturity assessments, business cases and multi-year roadmaps.
• Preferred: CISSP, CCSP, CISM, SANS GIAC or a comparable security certification.
• Preferred: advanced network or security certifications from Cisco, Check Point, Zscaler, GIAC or an equivalent provider.
• Preferred: experience leading large-scale Zero Trust, segmentation, NAC, firewall modernization or ZTNA transformation programs.

Conditions

Salary range is $114,500.00 to $188,900.00. Actual pay may vary within this range based on location, candidate experience and skills.

Equal opportunity employer; this role is open to all qualified candidates.

Benefits

• Market-competitive base salary with a yearly bonus opportunity at every level.
• Discretionary annual incentive program. Any award depends on individual and organizational performance and the program's rules.
• Medical, dental, vision, life and disability insurance, paid time off and leave of absence, including parental and military leave.
• 401(k) plan with company match of up to 4%.
• Company-funded pension plan.
• Wellness reimbursement of up to $1,600 a year for items that support personal wellbeing.
• Work/life resources covering parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health and career development.
• Education benefit to help finance traditional college enrollment toward an approved degree and many accredited certificate programs.
• Employee stock purchase plan: shares bought at 85% of the lower of the beginning or end price of the purchase period.
• Some benefits may not apply to part-time employees scheduled for fewer than 20 hours a week.