Senior Security Engineer - Network Security

Description

The company needs a hands-on senior engineer who leads technical projects in enterprise security and works across teams. This role sits inside a layered defense-in-depth program and owns complex work covering design, rollout and tuning of AI-enabled security technology at every layer.

The main focus is network security across on-premises, cloud and hybrid environments. You will tighten segmentation, secure access, traffic visibility, threat detection and resilience by bringing network controls, automation and telemetry into the wider defense and security operations setup.

The role works closely with the Senior Manager of Enterprise Security and engineering teams across the company. The aim is to shrink the attack surface, adapt quickly to the threat landscape, and cut detection and response times across the company's technical environment.

The work is Hybrid/Remote.

Responsibilities

• Lead the design, rollout, configuration and tuning of network security controls in on-premises, cloud and hybrid environments.
• Build and run firewalls, network detection and response, secure web gateways, DNS security, SASE/SSE, VPN or ZTNA, adaptive access policies and cloud-native network controls.
• Design and test segmentation and access patterns that cut attack paths and limit lateral movement.
• Feed flow, DNS, proxy, firewall and packet data into the SIEM, analytics and automated response.
• Write detections and investigate command-and-control, lateral movement, unusual traffic, unauthorized access and data exfiltration.
• Automate network configuration, validation and response using APIs, scripts, infrastructure as code and policy as code.
• Work with Infrastructure, Cloud and Engineering teams on secure connectivity, architecture reviews, control rollout and fixes.
• Set and track network security measures: control coverage, telemetry health, segmentation effectiveness, detection quality and remediation speed.
• Lead design, rollout and tuning of controls across the perimeter, network, host, application, identity and data layers, and keep each layer effective.
• Help write and enforce control standards and design patterns based on recognized frameworks, and act as the subject matter expert during build and review.
• Confirm that telemetry from every layer reaches the central analytics platforms and gives full visibility and coverage of the attack surface.
• Regularly assess how well enterprise controls hold up as the environment grows and threats change, then propose and build extra coverage.
• Work proactively with IT, Engineering and other stakeholders to build security into systems, and lead cross-functional technical work.
• Give technical advice on control design based on vulnerabilities, risks, issues and events, and back lead-level decisions with clear written analysis.
• Lead purple team exercises and control testing to check depth and resilience under attack.
• Put redundant, complementary controls in place so that no single failure or bypass leaves a layer open.
• Lead structured threat hunts and purple team exercises with the Purple Team, analyze security telemetry for odd and malicious behavior, and report findings to stakeholders.
• Build and document structured hunts mapped to MITRE ATT&CK and ATLAS techniques and current threat intelligence.
• Assess exposure to vulnerabilities, zero-days, alerts, threat intelligence feeds and partner and customer notices, and state the exploitability risk or exposure.
• Track the threat landscape, adversary TTPs and new vulnerabilities, and judge how they affect the company's technical environment and direction.
• Standardize and document hunt methods, hypotheses and results, and help the threat hunting program mature alongside the Purple Team.
• Turn successful hunts, exposure analysis, purple team results and alerts into lasting automated detections, containment logic and wider coverage.
• Build and maintain SOAR workflows that automate enrichment, triage, containment and routine response, and contribute to the automation roadmap.
• Measure how automation affects detection, containment and response times, and keep improving it to shorten attacker dwell time.
• Find, assess and put AI/ML tools into use for semantic anomaly detection, behavioral analytics, alert triage and prioritization, and advise stakeholders on platform and tool choices.
• Set up and manage data classification, discovery and data security posture management across cloud and on-premises stores.
• Deploy and tune data loss prevention across endpoints, network, email, cloud and SaaS.
• Investigate key risk indicators for data access and exfiltration, and bring data telemetry into the central SIEM.
• Act as technical mentor and day-to-day escalation point for junior and mid-level security engineers, guiding their approach, tools and growth.
• Lead technical design and rollout for assigned security initiatives, and write clear documentation, runbooks and knowledge materials for the team.
• Take part in hiring, including technical interviews and candidate assessments.
• Represent the security engineering team in cross-functional technical discussions, explaining security needs and findings clearly to engineers and non-technical stakeholders.

Requirements

• 4-8 years of hands-on enterprise security engineering experience, with a focus on network security.
• Hands-on use of common security tools such as EDR, XDR, SIEM, CNAPP, CSPM and CWP, and solid knowledge of security technologies across all OSI layers.
• Experience in threat hunting, digital forensics and/or detection engineering, including writing automation scripts and rules for enforcement and observability.
• Solid knowledge of common security benchmarks and frameworks such as MITRE and NIST.
• Demonstrated expertise in at least one scripting or automation language (Python, Bash or PowerShell) applied to containerized services, CLI commands and/or security use cases.
• Proven record of owning complex security initiatives end to end, including cross-functional coordination, stakeholder communication and delivering technical results.
• Ability to explain technical findings clearly to engineering peers and non-technical stakeholders.
• Relevant certification such as Network+, CCSA, ITS-NS, CCT, FCF, PCCET or equivalent.
• Prior experience mentoring or giving technical guidance to junior engineers.
• Preferred: Bachelor's in Computer Science, Information Security or equivalent experience.
• Preferred: Experience with AI-enabled SecOps, such as UEBA, ML-based alert prioritization or AI-assisted threat hunting.
• Preferred: Working knowledge of common cloud environments such as AWS, Azure or GCP.
• Preferred: Experience adding endpoint or network controls to CI/CD pipelines and infrastructure-as-code environments.
• Preferred: Experience supporting compliance and audit work (SOC 2, ISO 27001, HIPAA) from a technical control perspective.

Conditions

Hybrid/Remote work.

Total compensation includes a competitive base salary, an annual performance bonus and long-term incentives.

Expected base salary range: $130,000 to $195,000.

Final pay depends on experience, skills, qualifications and internal pay equity. Offers at the top of the range are not typical, to leave room for future salary growth.

The company is committed to fair and equitable pay.

Benefits

• Annual performance bonus.
• Long-term incentives.