Senior Network Security Engineer

Description

The company is hiring a Senior Network Security Engineer to design and run the full-packet capture infrastructure behind threat detection across its global network perimeter.

The company is looking for strong Python developers who understand network packet capture and can build reliable automation, APIs and data pipelines around enterprise capture systems.

You will own the capture layer that security operations and forensic response teams use to investigate advanced threats at scale. The role sits in the Perimeter Reliability Engineering team and combines network visibility, security forensics and platform automation.

Job family group: Technology. Job family: Systems & Engineering. Full time.

Responsibilities

• Write production-grade Python for PCAP archival, Arkime API integrations, telemetry extraction and event-driven packet extraction.
• Design and own full-packet capture infrastructure across the company's global perimeter, including TAP aggregation, out-of-band offload networks and high-throughput NVMe and ZFS storage.
• Deploy, tune and scale Arkime at enterprise level, including capture daemon settings, BPF filter design and OpenSearch index lifecycle management.
• Build hardware-accelerated capture with SmartNICs and kernel-bypass frameworks such as DPDK, PFRING ZC and AFXDP, keeping packet loss at zero under high throughput.
• Run and extend Zeek to extract deep protocol metadata, and feed the results into SIEM and threat intelligence platforms.
• Lead forensic work on complex network incidents with Wireshark, tshark and tcpdump, rebuilding attack timelines and session activity.
• Connect capture platforms to AI and machine learning threat detection, including TLS fingerprinting and alert-to-packet correlation.
• Create Grafana dashboards and alerts with Prometheus and InfluxDB to track capture rates, packet loss, storage use and cluster health.

Requirements

• Strong Python development experience, including object-oriented design, async workflows, data processing and API integrations, applied to PCAP lifecycle automation, Arkime API scripting and OpenSearch query pipelines.
• Solid grasp of packet capture concepts, including raw socket capture, packet sniffing, BPF filters, pcap header structures and network flow analysis.
• 7+ years in infrastructure or network security engineering, including 3-4 years focused on packet capture, network forensics or network visibility.
• Expert-level experience deploying and operating Arkime, including capture daemon tuning and multi-site OpenSearch cluster architecture.
• Hands-on experience designing packet capture infrastructure with TAP, SPAN and ERSPAN architectures, aggregation fabrics and NVMe and ZFS storage tiering.
• Protocol analysis with Wireshark, tshark and tcpdump, including advanced filters and full session reconstruction.
• Linux performance tuning, including kernel parameters, NUMA topology awareness, CPU pinning and NIC queue optimization.
• A Bachelor's degree in a relevant field or equivalent practical experience. A Master's degree is preferred.

Conditions

Full time, based in Hungary.

Hybrid working model, with up to 2 days working from home per week.

Salary range: 17,157,800 Ft to 28,767,800 Ft.

The company welcomes applicants from all backgrounds and provides its EEO Policy Statement and Know Your Rights poster for review.

Benefits

• Competitive pay package.
• Cafeteria program.
• Home office allowance for hybrid staff.
• Paid parental leave for maternity and paternity.
• Private medical care program and onsite medical rooms.
• Voluntary pension fund contributions.
• Group life insurance.
• Employee assistance program.
• Learning and development access, including online course libraries and upskilling platforms such as Udemy and Degreed.
• Flexible work arrangements.
• Career progression across geographies and business lines.
• Employee communities with networking opportunities.
• Beneficial: Experience building custom packet parsing tools, PCAP inspection utilities or network automation frameworks in Python, such as Scapy, PyShark, dpkt or socket programming.
• Beneficial: Experience with kernel-bypass and SmartNIC capture technologies, including DPDK, PFRING ZC and AFXDP.
• Beneficial: Zeek deployment and custom script development for protocol analysis and security data enrichment.
• Beneficial: Ansible experience for configuration management and infrastructure-as-code deployment of capture environments.
• Beneficial: Knowledge of machine learning network anomaly detection and flow-level feature engineering for security.
• Beneficial: Active contribution to open-source packet capture projects such as Arkime, Zeek or Suricata.