Network Security Engineer

Millennium Management LLC; Bengaluru; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

Millennium seeks a Network Security Engineer to design and maintain advanced security controls across hybrid environments, including firewalls, VPNs, and DNS protections. You will build the security data lake, optimize detection pipelines, and apply AI to security workflows, collaborating with Technology, Trading, and Compliance teams.

You will safeguard cloud and on-prem networks, develop security policies, and respond to incidents while keeping risk at bay in a fast-paced, regulated setting.

Qualifications

• 5+ years of hands-on network security experience, preferably in regulated finance environments.
• Proven experience administering enterprise network security infrastructure and security controls.
• Hands-on expertise with logging pipelines, data lakes, and SIEM platforms; familiarity with breach simulation tools is a plus.
• Experience securing hybrid on-premises and cloud networks (AWS/GCP/Azure) and scripting skills in Python/PowerShell/Bash.

Responsibilities

• Design, implement, and maintain network security controls across firewalls, VPNs, proxies, and IDS/IPS.
• Build and maintain logging pipelines and a security data lake for detection and response.
• Develop and enforce security policies across network, email, DNS, and data lake.
• Automate perimeter security and improve monitoring and alerting.
• Analyze security logs and events across systems to identify threats and reduce risk.

Skills

Network security

Firewalls

VPN

IDS/IPS

NDR/NAC

Logging pipelines

SIEM

SOAR

AI in security

Cloud security

Windows/Linux/macOS

Docker/Kubernetes

Python/PowerShell/Bash

Education

Bachelor's degree in CS/ENG/Cybersecurity

Security Certifications (CISSP/GCIA/CISM/CCNP Security/PCNSE/NSE)

Tools

Splunk

ELK

Sentinel

S3/Athena

SOAR

tcpdump

Wireshark

ngrep

Docker

Kubernetes

Job description

Network Security Engineer

About Millennium

Millennium is a global, diversified alternative investment firm, founded in 1989. Defined by evolution, innovation and focus, Millennium's mission is to deliver results for our investors. Our people are empowered with both independence and support: the autonomy to pursue ideas with conviction and the backing of a global network committed to collaboration, disciplined risk management and continuous learning. With opportunities to deepen expertise and accelerate development, talent at Millennium is equipped to adapt, evolve and build lasting impact over time. Discover how transformative growth accelerates impact.

Meet the Team

Technology is core to the health and growth of our business. The firm's active, multi-manager business model demands flexible, scalable technology and advanced proprietary systems, including the development of the next generation of analytical and trading capabilities. Millennium's Information Security team protects the firm's people, data, and technology across a complex, fast-moving global trading environment, partnering closely with technology, trading, and business stakeholders to embed security into every aspect of our global operations. As the firm accelerates its use of artificial intelligence, the team is equally focused on applying AI in innovative, entrepreneurial ways to strengthen our own defenses. Within that organization, the Network Security team designs and defends the network infrastructure connecting Millennium's global offices, data centers, and cloud environments, spanning perimeter controls such as firewalls, IDS/IPS, NDR, NAC, proxies, email security, and DNS security, as well as the detection and automation stack behind them, including the security data lake, logging pipelines, and SOAR automations. This is a growing organization that combines deep technical expertise with pragmatic risk management to keep pace with the speed and scale of the firm's business.

What You'll Do

• Design, implement, and maintain network security controls, including firewalls, segmentation, secure remote access, intrusion detection and prevention, network detection and response, and network access control, and support secure network architecture for new offices, data centers, and cloud connectivity.
• Build and maintain the logging pipelines and security data lake that power detection across the environment.
• Develop, implement, and maintain security policies, procedures, and standards across network security, email security, DNS security, and the security data lake.
• Strengthen perimeter security through automation, improved monitoring, vulnerability identification, and actionable alerting and reporting.
• Monitor, manage, and analyze security logs, alerts, and events across multiple systems to identify threats, vulnerabilities, and suspicious activity, and tune network infrastructure to reduce risk while minimizing business disruption.
• Apply AI to the team's own work, accelerating investigation, automation, detection engineering, and reporting, and help secure the firm's use of AI models, tools, and frameworks.
• Provide security engineering and consulting support to Security Operations and the wider Information Security organization, and partner with stakeholders across Technology, Trading, Legal, Internal Audit, and Compliance to support and enforce security policies and controls.
• Conduct system audits and vulnerability assessments, manage remediation efforts and findings from audits, penetration tests, and process reviews, participate in incident response for network-related events, and use threat intelligence to sharpen detection, defense, and response.

What You Bring

• 5+ years of hands-on network security experience, ideally within financial services, hedge funds or other buy-side firms, or another highly regulated industry.
• Hands‑on experience administering enterprise network security infrastructure, including firewalls, VPN, proxies, intrusion detection and prevention, network detection and response, and network access control, with a practical understanding of proxy engineering concepts.
• Proven experience as a security engineer with hands‑on expertise in logging pipelines, data lakes, or SIEM platforms such as Splunk, ELK, Sentinel, or S3/Athena, plus SOAR automation; experience with breach and attack simulation tooling is a plus.
• Hands‑on AI experience, both using AI tooling in day‑to‑day security work and securing the use, deployment, and governance of AI models, tools, and frameworks.
• Strong command of core networking and infrastructure concepts, including TCP/IP, routing, switching, segmentation, DNS, Wi‑Fi, and virtualization, along with email and DNS security controls and packet capture and network analysis tools such as tcpdump, Wireshark, or ngrep.
• Experience securing hybrid on‑premises and cloud network architectures, with working knowledge of AWS, GCP, or Azure and proficiency across Windows, Linux, macOS, and container environments such as Docker and Kubernetes.
• Scripting or development skills in Python, PowerShell, Bash, or similar languages, with the ability to troubleshoot complex network and security issues under time pressure, operate independently in a fast‑paced, high‑stakes environment, and communicate clearly with both deeply technical teams and senior executive stakeholders.
• Bachelor's degree or higher in Computer Science, Computer Engineering, Cybersecurity/Information Security, or a related field, or commensurate work experience; certifications such as CISSP, GCIA, CISM, CCNP Security, Palo Alto PCNSE, or Fortinet NSE are valued.