IT Senior Network Engineer

Position Summary

The IT Security Engineer is a hands-on technical position responsible for the engineering, implementation, administration, testing, documentation, and continuous improvement of the organization's cybersecurity technologies and controls.

Working under the direction of the IT Security Director, this position translates cybersecurity strategy, risk requirements, and architectural direction into effective technical solutions. The engineer will take ownership of security engineering initiatives from technical research and design through testing, implementation, documentation, validation, and ongoing optimization.

The position will work across endpoint security, identity and access management, security monitoring, vulnerability management, network security, cloud environments, applications, email security, automation, infrastructure, and emerging technologies.

Key Responsibilities

Security Engineering & Implementation

• Design, configure, implement, test, administer, and improve cybersecurity controls and technologies.
• Translate security requirements and architectural direction into technical configurations and solutions.
• Evaluate existing security configurations and identify opportunities for improvement.
• Develop implementation plans, configuration standards, testing procedures, and rollback procedures.
• Validate implemented controls and document results.
• Partner with infrastructure, networking, application, development, and operations teams to implement security requirements.
• Maintain secure configuration baselines and periodically validate deployed controls against those baselines.

Security Monitoring & Detection Engineering

• Engineer and maintain enterprise security monitoring and detection capabilities.
• Develop and tune detection logic for suspicious and malicious activity.
• Develop threat-hunting and investigative queries.
• Onboard security telemetry and ensure appropriate logging coverage.
• Troubleshoot log collection, parsing, normalization, and ingestion issues.
• Develop security dashboards and operational reporting.
• Evaluate detection effectiveness and identify monitoring gaps.
• Maintain documentation describing security telemetry, detection logic, and response procedures.

Identity & Access Security Engineering

• Engineer and maintain identity and access security controls.
• Support multifactor authentication, conditional access, authentication policies, privileged access, and identity protection capabilities.
• Review administrative, service, application, and workload identities.
• Implement and validate least-privilege access controls.
• Investigate suspicious authentication and account activity.
• Assist with privileged-access security and administrative account protection.
• Develop identity-related security monitoring and detection capabilities.
• Test proposed identity-security changes before production implementation.

Vulnerability & Exposure Management

• Administer and improve vulnerability and exposure-management capabilities.
• Manage authenticated, agent-based, and network-based security assessments where applicable.
• Research vulnerabilities, security advisories, attack techniques, and emerging threats.
• Analyze vulnerability severity, exploitability, exposure, asset criticality, and business impact.
• Prioritize remediation activities based on organizational risk.
• Coordinate remediation efforts with system, infrastructure, and application owners.
• Perform post-remediation validation.
• Maintain vulnerability-management documentation, metrics, and technical evidence.
• Identify systemic security weaknesses rather than treating vulnerabilities solely as individual findings.

Incident Response & Technical Investigation

• Serve as a technical escalation point for complex security events and incidents.
• Investigate endpoint, identity, network, cloud, email, and application security events.
• Analyze authentication activity, system behavior, processes, network activity, logs, and other security telemetry.
• Determine the scope and potential impact of security incidents.
• Perform or coordinate authorized containment and remediation actions.
• Collect and preserve technical evidence.
• Identify indicators of compromise and relevant attacker behaviors.
• Develop additional detections based on investigation findings.
• Perform root-cause analysis.
• Document investigations, findings, remediation, and lessons learned.
• Support organizational incident-response activities when required.

Security Architecture & Project Engineering

• Support the IT Security Director in implementing organizational security architecture.
• Review proposed system and application designs for technical security requirements.
• Develop and document security requirements for new technologies.
• Evaluate network connectivity, authentication, authorization, encryption, identity, logging, and monitoring requirements.
• Create and maintain security and data-flow diagrams.
• Validate security boundaries and least-privilege principles.
• Evaluate service and workload identity designs.
• Assist with securely integrating applications, databases, APIs, cloud services, infrastructure, and third-party systems.
• Conduct post-implementation security validation.

Application & Emerging Technology Security

• Participate in application and system security reviews.