Network Cyber Security Engineer

Description

The GN&T network security team is hiring a cybersecurity engineer for its Network Security Defense group. That group owns the security lifecycle and effectiveness across the core, edge and access networks, along with every system and network function inside GN&T.

You would help raise the security posture through live threat monitoring and detection in SIEM tools such as Splunk, lead incident response when a breach occurs, and run ongoing vulnerability management across networks and applications. The role also covers designing security architecture (firewalls, encryption, central identity and access management, and multi-factor authentication) and hunting for threats using advanced networking and protocol analysis, endpoint and memory forensics, data querying, and automation scripts for security tooling.

Responsibilities

• Find gaps in technology and lead the design, architecture and rollout of suitable security solutions.
• Write formal guidelines, policies and procedures that keep operations smooth and accurate.
• Deliver strategic solutions in a environment built to scale.
• Work with the operations, engineering and planning groups so secure design is built into new deployments and major changes.
• Take ownership of hard strategic technical problems with little direction.
• Spot chances to mentor junior engineers and hand off technical documentation and tasks to support the team and wider organization.
• Explain complex technical ideas clearly to both internal and external audiences.
• Lead network security incident response, from triage through containment, eradication and recovery, for disruptive threats.
• Build and improve incident playbooks and runbooks so high-impact cases such as ransomware, phishing, insider threat and DDoS follow repeatable steps.
• Act as escalation point for security investigations, giving expert analysis and direction during live incidents.
• Run root cause analysis and write clear incident reports covering timeline, impact, evidence and fixes.
• Proactively hunt for threats across identity, endpoint and network telemetry to expose attacker activity and cut dwell time.
• Build and tune SIEM detections to improve alert accuracy and cut false positives.
• Expand network visibility and telemetry collection to strengthen detection and response.
• Regularly assess security controls to confirm configurations work and close gaps found in incidents or hunts.

Requirements

• A bachelor's degree in computer science, cybersecurity or a related field, or four or more years of work experience.
• Four or more years of relevant experience, gained through work, military service, specialized training, or a mix of these.
• Skill in writing complex, optimized Splunk SPL searches, including macros, data models and lookups, for efficient hunting and investigation.
• Knowledge of NIST or SANS incident response lifecycles, with experience designing, testing and maintaining SOAR automation playbooks that automate triage and response.
• Experience with risk-based alerting, handling notable events, asset and identity correlation, and defining and tuning correlation searches.
• Even better if you have one or more of the following:
• Security certifications such as CompTIA Security+, CISSP, CCIP, CISM, CCSP, OSCP or CEH.
• Experience with identity and access management solutions.
• Ability to build consensus and shared understanding of security goals, objectives and execution steps.
• Experience with network protocols and networking certifications such as PCNSE, CCNP or CCNA.
• Experience with networks, 4G/5G wireless network functions, or virtualization technologies such as OpenStack and Kubernetes.
• Experience with scripting in Python and/or automation with Ansible.
• Experience engineering UNIX or Linux systems across multiple distributions.
• Experience with encryption for data in transit (such as IPsec or TLS) and data at rest.
• Experience resolving conflicts and negotiating so design, strategy and decisions consistently meet security requirements.
• Strong analytical skills and close attention to detail, with a proven record of managing and delivering results.
• Clear written, interpersonal and verbal communication.

Conditions

Hybrid role with a defined work location that includes working from home and assigned office days at one of the offices listed for the position.

You must live within commuting distance of one of those offices to be eligible to apply.

Minimum of three days per week in the office, set by your manager.

You are responsible for following the hybrid work policies.

Scheduled hours are 40 per week.

Benefits

• Medical, dental and vision coverage, short and long term disability, basic and supplemental life insurance, AD&D insurance, identity theft protection, pet insurance, and group home and auto insurance.
• Matched 401(k) savings plan.
• Up to 8 company-paid holidays and up to 6 personal days per year.
• Paid parental leave, adoption assistance and tuition assistance, plus other incentives.
• Premium pay may be available depending on the role, such as overtime, shift differential, holiday pay and allowances.
• Newly hired employees get up to 15 days of vacation per year, rising with additional service.
• Part-time staff may qualify for some of these benefits depending on their individual circumstances.
• Pay depends on your location and confirmed job-related skills and experience. This is an incentive-based role with potential to earn more. Part-time pay is adjusted to hours worked.
• Annual salary range for full-time work in the listed location(s): $101,000.00 - $194,000.00.