10888 - Network Security Engineer II

Skills

• agile
• authentication
• bgp
• ccnp
• cism
• cissp
• cmdb
• cybersecurity
• dhcp
• dns
• firewall
• ios
• iso-27001
• network-security
• networking
• nist
• ospf
• qos
• root-cause-analysis
• sdn
• siem
• splunk
• tcp-ip
• threat-hunting
• voip
• vpn
• vulnerability-management
• wan

Must have

1. Experience supporting enterprise networking and cybersecurity environments.
2. Knowledge of networking concepts including routing, switching, WAN technologies, DNS, DHCP, VPNs, and network segmentation.
3. Familiarity with security monitoring, vulnerability management, and incident response practices.
4. Exposure to tools such as Splunk, Rapid7, firewalls, IDS/IPS, and related security technologies.
5. Strong troubleshooting and analytical skills.
6. Ability to collaborate effectively with technical teams, vendors, and business stakeholders.
7. A continuous learning mindset and passion for improving security and infrastructure reliability.
8. Bachelor's degree or equivalent in the field of business, computers, information systems or related degree.
9. 5-7 years relevant work experience in a related network and/or cybersecurity functional role.
10. Extensive knowledge of networking technologies and protocols including TCP/IP, QoS, IPT, VoIP, IOS; Routing and Switching; Routing protocols such as OSPF and BGP; WAN Optimization technologies
11. Hands-on expertise with SIEM platforms (Splunk) — search, dashboards, correlation searches, log ingestion, and alerting
12. Hands-on expertise with vulnerability management platforms (Rapid7 InsightVM/InsightIDR) — scanning, risk scoring, and remediation workflows
13. Demonstrated experience with Wired and wireless local area network ("LAN") segments including infrastructure supporting all Network traffic originating from computing devices (e.g., wireless access po
14. Demonstrated experience with setup and configuration of redundant networking environments.
15. Demonstrated ability to manage IP management components – Domain Name Services (DNS) and Dynamic Host Configuration Protocol (DHCP) components and central, real-time logging components
16. Experience with Remote access components – Virtual private network ("VPN") infrastructure
17. Firewalls, Multi-factor authentication Equipment and Software (e.g., tokens), Intrusion prevention and detection devices
18. Deep knowledge in designing and developing functional SDN and SDDC technology, understanding of security, physical networking is required
19. Working knowledge of security frameworks and compliance standards (e.g., NIST, ISO 27001) and security operations best practices
20. Expertise ensuring Network and Security Components provisioned are included in all IT Life Cycle and IT Service Management Services-related documentation (e.g., asset management and configuration mana

Nice to have

1. Ability to design processes that ensure rapid Incident determination, alert identification and correlation, escalation and resolution for all Network and Security environments on a 24x7x365 basis
2. Industry certifications such as CISSP, CISM, Security+, CCNP Security, or Splunk/Rapid7 product certifications
3. Demonstrated experience with continuous improvements to Networking and Security Solutions
4. Remote access components – Virtual private network ("VPN") infrastructure.
5. Extensive experience with Networking and security problem diagnosis and resolution.
6. Experience with threat hunting, incident response, and security event forensics.
7. Demonstrated experience with server administration.
8. Experience in managing sourcing vendors, deliverables and service delivery outcomes.
9. Preferred experience in managing enterprise network and security management SLA/service delivery metrics.
10. Experience overseeing root cause analysis to proactively prevent problem recurrence and to improve Service Levels.

Full description