Job Description

We are looking for an Engineer, Network Security to join our growing team. In this role, you will report directly to the Manager, Network Security. This SME role entails safeguarding all networks, including internal, customer-facing, and Telcom networks. You will actively engage in day-to-day security engineering and operations, serving as a technical authority in network security and possessing a deep understanding of security architecture. You will collaborate closely with IT and Network; and also contribute to diverse projects, demonstrating strong interpersonal skills to cultivate inter-organizational relationships. You will have effective management of project activities, including milestones and timelines, is also expected.

The primary functions of the Network Security Team include:

• Design, deploy, configure, and maintain Palo Alto firewalls
• Manage and administer Azure and GCP firewalls
• Conduct regular reviews and audits of firewall configurations
• Design, implement, and maintain DDoS mitigation solutions
• Management of network authentication technologies like RADIUS and TACACS+
• Manage network protection technologies like IDS and Honeypots

This position requires a strong background and understanding of all network and cloud security domains and works in both the Protect and Respond areas of the NIST CSF Framework. You will be required to make strong cyber security decisions while using a business risk analysis approach. Brightspeed is a cloud-first (Azure, GCP, and SaaS) company with a significant data center presence. This model will require you to consider security across a diverse portfolio of assets and networks. Brightspeed is also in a Zero Trust journey, which means the individual should be able to execute a multi-year program while ensuring network security and moving along the maturity curve. 

As an Engineer, Network Security, your duties and responsibilities will include:

• Design, implement, and lead the comprehensive enterprise cybersecurity network protection programs, leveraging advanced expertise in Palo Alto firewalls
• Conduct thorough reviews and design meticulous firewall rules to ensure strict adherence to corporate security policies
• Design, review, and execute robust network security solutions aimed at safeguarding the integrity of Brightspeed networks
• Serve as the SME of the Network Security team, accountable for ensuring the overall security posture of Brightspeed networks. This includes spearheading device hardening initiatives, monitoring baseline configurations, meeting compliance standards, implementing security best practices, and overseeing remediation efforts.
• Assume ownership of all network protection applications and platforms, overseeing their management, upgrades, configurations, changes, and support
• Collaborate closely with the SOC and incident response teams to effectively resolve network security incidents
• Document, implement, and maintain all network security devices to uphold robust security standards while developing and implementing appropriate strategies for information security policies, standards, and procedures
• Engage proactively in organizational projects as needed, offering valuable insights and specialized expertise in network security domains
• Demonstrate exceptional interpersonal skills, including strong verbal and written communication abilities, enabling effective collaboration with diverse stakeholders
• Oversee the management of the enterprise's Network Security Systems, encompassing Firewalls (including cloud firewalls), DDOS mitigations, RADIUS, and TACACS+ authentication support
  Participate in an on-call rotation to ensure 24/7 coverage of network security operations
• Stay current on emerging cybersecurity threat landscape, vulnerabilities, and trends, and recommend proactive measures to enhance our security posture
• Foster a culture of mentorship by guiding Network Security Analysts and actively participating in knowledge-sharing initiatives

Qualifications

WHAT IT TAKES TO CATCH OUR EYE:

• Bachelor’s degree in Computer Science, Engineering, Cyber Security, or related field
• Demonstrated expertise with firewall management and architecture spanning over 5+ years, with expertise in Palo Alto firewalls
• Extensive background encompassing over 5+ years of hands-on experience in the Network Security field with versatility across various domains of network security
• Proficiency in network security hardening methodologies
• Experience in securing Office 365, Azure AD, and Email is essential
• Proficiency with TACACS+, RADIUS, and DDOS mitigations
• Ability to thrive in a fast-paced environment with multiple competing priorities
• Meticulous attention to detail to ensure adherence to policies and standard procedures
• Proven expertise in implementing security measures within GCP and Azure environments
• Exceptional verbal and written communication skills
• Proficient in TCP/IP routing and switching, as well as network design best practices
• Experience in mitigating DDoS attacks, coupled with proficiency in DDoS attack defense, countermeasures, and packet analysis
• Moderate understanding of BGP, OSPF, Switching topologies, and Cloud networking
• Familiarity with zero-trust architectures is advantageous
• Knowledge of incident response procedures is advantageous
• Scripting experience is beneficial

BONUS POINTS FOR:

• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Certified Cloud Security Professional (CCSP)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Ethical Hacker (CEH)

#LI-SS1

See more jobs at Brightspeed

Apply for this job