Sr. Network Security Engineer

Alameda, CA

$200-215K Base

Must be onsite 3X week

Client will transfer a Visa with 1 year or more remaining.

Job Description:

The Sr. Network Security Engineer will be a member of the Information Security & Compliance team, in this role, the candidate will be highly technical hands-on, analytical, process oriented and possess excellent written and verbal communication skills and collaborate with product teams, be responsible for engineering security solutions and operational support across hybrid cloud environment, ensuring compliance with legal and regulatory requirements, information security policies, standards, and industry best practices.

What You'll Work On

· The ideal candidate will be responsible for ensuring the security of our hybrid environment systems, network, infrastructure and services

· You will be responsible for all network security solutions, controls design and enforcement across our hybrid environment

· You will design and perform security assessments, penetration tests on various enterprise systems and network to simulate probable attack patterns, to validate control effectiveness

· You will engage and share results of attack simulations with IT teams and promote changes vital to improve our risk posture

· You will collaborate with cross-functional teams to develop and implement security measures, manage on-prem and cloud security systems.

· You will enforce secure design standards, specifications for on-prem and cloud-based services, pipelines, and products

· Develop, roadmaps and standards for technical solutions, ensuring they align to the overall enterprise security architecture. Serve as the subject matter expert across hybrid environment.

· Conduct risk assessments, security audits, and system tests to ensure the effectiveness of security measures

· Respond to and, when necessary, lead the incident response activity on all enterprise security incidents.

· Collaborate with IT and line of business teams to integrate security protocols into new and existing deployments

· Manage and configure on-prem and cloud security services/ controls, i.e., firewalls, intrusion detection/ prevention, threat prevention technologies, and all crypto technologies

· Create and maintain documentation for on-prem and cloud security procedures and protocols, conduct security training and awareness for staff

· Stay current with emerging security threats and technologies in the IT landscape. Ensure compliance with regulatory requirements and industry standards across hybrid environment.

What You'll Bring

· Bachelors or Masters+ in Computer Science or Engineering with an emphasis in Computer Security or a related field, or equivalent experience

· 10+ years of hands-on design, enforcement and testing/ validation of offensive security, defensive security, systems and solutions engineering in a large enterprise

· 5+ years of hands-on experience and an expert on cloud security platforms i.e., Azure, AWS or Google Cloud Platform services, automation, Infra as code, scripting (i.e., Python, Go etc..) RegEx, Ariel Query Language

· 5+ years of hands-on experience and an expert on security technologies i.e., Firewalls (Prefer PaloAlto Tech stack),IPS, AFW, PA Threat Prevention Technologies, CASB, Crypto Tech, SAML/ OIDC NAC 802.1X, SIEM, SOAR, Radius/ TACACS+, Directory services

· Proficient with network topologies, routing protocols i.e., OSPF, BGP, ISIS, SDN technologies and tunneling techniques.

· Proficient with tools and threat models, enforce kill chains and script own automations in a large operating environment

· Proficient in conducting solutions architecture, security design reviews, passionate about security and privacy research, technologies, and methods.

· Experienced in designing offensive security test cases and performing manual & automated attack simulations to test control effectiveness

· Possess an understanding of past and emerging security exploits, threat actor motivations, and trends

· Understanding security and compliance frameworks, security engineering, software delivery, and SDLC in a hybrid environment

· Outstanding ethical standards and integrity. Highly reciprocal and excellent communicator (written & verbal)