Network Security Engineer

Millennium Consulting; Bengaluru; Presencial; INR 1 200 000 - 1 800 000; Tempo integral

Resumo da oferta

Millennium is seeking a Network Security Engineer to design, implement, and maintain advanced network security controls across global offices, data centers, and cloud environments. You will build logging pipelines and a security data lake to power detection and response.

You will develop security policies, automate perimeter security, monitor alerts, and apply AI to security workflows while collaborating with the Technology, Trading, Legal, Internal Audit, and Compliance teams to uphold policies

Qualificações

• 5+ years of hands-on network security experience, ideally within regulated financial services or buy-side firms.
• Hands-on experience administering enterprise network security infrastructure (firewalls, VPNs, proxies, IDS/IPS, NDR, NAC).
• Proven experience with logging pipelines, data lakes, or SIEM platforms (Splunk, ELK, Sentinel, S3/Athena) and SOAR; breach tooling a plus.
• Hands-on AI experience in security workflows and securing AI models/tools/frameworks.
• Strong networking fundamentals and security controls across DNS, email, and network instrumentation (tcpdump/Wireshark/ngrep).

Responsabilidades

• Design, implement, and maintain network security controls (firewalls, segmentation, VPN, IDS/IPS, NDR, NAC).
• Build and maintain logging pipelines and the security data lake for detection.
• Develop, implement, and maintain security policies across network, email, and DNS security.
• Strengthen perimeter security through automation, monitoring, and alerting.
• Monitor and analyze security logs and events across systems to identify threats and reduce risk.
• Apply AI to security investigations, automation, and reporting while securing AI deployments.
• Provide security engineering support to Security Operations and the wider organization; collaborate with Technology, Trading, Legal, Audit, Compliance.
• Conduct audits and remediation, participate in incident response, and leverage threat intelligence.

Conhecimentos

Network security

Firewalls

VPN

IDS/IPS

NDR

SIEM

AI in security

Cloud security

Python scripting

Windows/Linux

Docker/Kubernetes

Formação académica

Bachelor's degree or higher in CS/CE/Cybersecurity

Ferramentas

Splunk

ELK

Sentinel

S3/Athena

SOAR

tcpdump

Wireshark

ngrep

Docker

Kubernetes

Descrição da oferta de emprego

Network Security Engineer

About Millennium

Millennium is a global, diversified alternative investment firm, founded in 1989. Defined by evolution, innovation and focus, Millennium's mission is to deliver results for our investors. Our people are empowered with both independence and support: the autonomy to pursue ideas with conviction and the backing of a global network committed to collaboration, disciplined risk management and continuous learning. With opportunities to deepen expertise and accelerate development, talent at Millennium is equipped to adapt, evolve and build lasting impact over time. Discover how transformative growth accelerates impact.

Meet the Team

Technology is core to the health and growth of our business. The firm's active, multi-manager business model demands flexible, scalable technology and advanced proprietary systems, including the development of the next generation of analytical and trading capabilities. Millennium's Information Security team protects the firm's people, data, and technology across a complex, fast-moving global trading environment, partnering closely with technology, trading, and business stakeholders to embed security into every aspect of our global operations. As the firm accelerates its use of artificial intelligence, the team is equally focused on applying AI in innovative, entrepreneurial ways to strengthen our own defenses. Within that organization, the Network Security team designs and defends the network infrastructure connecting Millennium's global offices, data centers, and cloud environments, spanning perimeter controls such as firewalls, IDS/IPS, NDR, NAC, proxies, email security, and DNS security, as well as the detection and automation stack behind them, including the security data lake, logging pipelines, and SOAR automations. This is a growing organization that combines deep technical expertise with pragmatic risk management to keep pace with the speed and scale of the firm's business.

What You'll Do

• Design, implement, and maintain network security controls, including firewalls, segmentation, secure remote access, intrusion detection and prevention, network detection and response, and network access control, and support secure network architecture for new offices, data centers, and cloud connectivity.
• Build and maintain the logging pipelines and security data lake that power detection across the environment.
• Develop, implement, and maintain security policies, procedures, and standards across network security, email security, DNS security, and the security data lake.
• Strengthen perimeter security through automation, improved monitoring, vulnerability identification, and actionable alerting and reporting.
• Monitor, manage, and analyze security logs, alerts, and events across multiple systems to identify threats, vulnerabilities, and suspicious activity, and tune network infrastructure to reduce risk while minimizing business disruption.
• Apply AI to the team's own work, accelerating investigation, automation, detection engineering, and reporting, and help secure the firm's use of AI models, tools, and frameworks.
• Provide security engineering and consulting support to Security Operations and the wider Information Security organization, and partner with stakeholders across Technology, Trading, Legal, Internal Audit, and Compliance to support and enforce security policies and controls.
• Conduct system audits and vulnerability assessments, manage remediation efforts and findings from audits, penetration tests, and process reviews, participate in incident response for network-related events, and use threat intelligence to sharpen detection, defense, and response.

What You Bring

• 5+ years of hands-on network security experience, ideally within financial services, hedge funds or other buy-side firms, or another highly regulated industry.
• Hands-on experience administering enterprise network security infrastructure, including firewalls, VPN, proxies, intrusion detection and prevention, network detection and response, and network access control, with a practical understanding of proxy engineering concepts.
• Proven experience as a security engineer with hands-on expertise in logging pipelines, data lakes, or SIEM platforms such as Splunk, ELK, Sentinel, or S3/Athena, plus SOAR automation; experience with breach and attack simulation tooling is a plus.
• Hands-on AI experience, both using AI tooling in day-to-day security work and securing the use, deployment, and governance of AI models, tools, and frameworks.
• Strong command of core networking and infrastructure concepts, including TCP/IP, routing, switching, segmentation, DNS, Wi-Fi, and virtualization, along with email and DNS security controls and packet capture and network analysis tools such as tcpdump, Wireshark, or ngrep.
• Experience securing hybrid on-premises and cloud network architectures, with working knowledge of AWS, GCP, or Azure and proficiency across Windows, Linux, macOS, and container environments such as Docker and Kubernetes.
• Scripting or development skills in Python, PowerShell, Bash, or similar languages, with the ability to troubleshoot complex network and security issues under time pressure, operate independently in a fast-paced, high-stakes environment, and communicate clearly with both deeply technical teams and senior executive stakeholders.
• Bachelor's degree or higher in Computer Science, Computer Engineering, Cybersecurity/Information Security, or a related field, or commensurate work experience; certifications such as CISSP, GCIA, CISM, CCNP Security, Palo Alto PCNSE, or Fortinet NSE are valued.