Senior Network Security Engineer – Network Governance

Euroclear; Kraków; On-site; PLN 280,000 - 420,000; Full time

Job summary

Euroclear is seeking a senior network security engineer to govern and design enterprise network security controls. You will ensure policies are translated into concrete requirements and aligned with risk and regulatory needs.

The role collaborates with engineering, risk management, and audit teams to drive continuous improvement. You will operate at governance level while also hands‑on with firewall, segmentation and secure connectivity across on‑prem, cloud and hybrid environments.

Qualifications

• Senior network security experience in large, complex environments.
• Experience translating policy into technical requirements for network teams.
• Familiar with governance frameworks (NIST, ISO 27001) and regulatory expectations.

Responsibilities

• Define and maintain network security policies, standards and guidelines.
• Govern lifecycle of network security controls (firewalls, segmentation, VPN).
• Review designs, changes and exceptions for network security.
• Participate in governance boards and risk-based reviews.
• Collaborate with engineering, cloud and security architects on secure-by-design initiatives.
• Mentor junior engineers and influence stakeholders with expertise.

Skills

Network security

Governance

Policy development

Audits & compliance

Risk management

Stakeholder communication

Security architecture

English proficiency

Tools

Palo Alto

Check Point

Fortinet

Tufin

Algosec

Job description

JOB DESCRIPTION

We are committed to ensuring the security and integrity of our infrastructure.

We are looking for a senior network security engineer to play a key role in the governance, design, and continuous improvement of network security controls across the enterprise.

This role sits at the intersection of security architecture, policy, risk management, and operational oversight, ensuring that network security is consistently implemented, documented, and aligned with regulatory and business requirements.

The position requires both deep technical expertise and the ability to operate at a governance and stakeholder level, working closely with engineering teams, risk management, audit, and architecture functions.

Key Responsibilities

Network Security Governance & Policy

• Define, maintain, and evolve network security policies, standards, and guidelines (e.g. firewalling, segmentation, remote access, encryption, traffic inspection).
• Translate security policies into clear technical requirements for network and security engineering teams.
• Ensure alignment with enterprise frameworks (e.g. NIST, ISO 27001), regulatory requirements (e.g. DORA), and internal risk management processes.
• Act as a subject matter expert on network security governance during audits, risk assessments, and regulatory reviews.

Oversight of Network Security Controls

• Govern the lifecycle of network security controls, including:
  • Firewalls (on‑prem, cloud, hybrid)
  • Network segmentation and zoning
  • Secure connectivity (VPN, interconnects, third parties)
• Review and approve designs, changes, and exceptions related to network security.
• Oversee firewall rule governance, including recertification, exception handling, and risk‑based reviews.
• Participate in governance boards and ensure network controls are followed.

Risk Management & Compliance

• Identify, assess, and document network‑related risks, ensuring appropriate mitigation plans and timelines.
• Support and contribute to:
  • Risk acceptance processes
  • Issues and remediation tracking
  • Audit evidence production
• Ensure findings from audits and assessments are translated into concrete, actionable improvements.

Architecture & Engineering Collaboration

• Work closely with:
  • Network engineers
  • Cloud and platform teams
  • Security architects
• Support secure‑by‑design initiatives for new platforms, cloud services, and connectivity models.

Continuous Improvement & Automation

• Drive improvements in governance processes, including:
  • Rule review automation
  • Control monitoring
  • Metrics and reporting (KPIs, KRIs)
• Promote consistency, reusability, and documentation across network security controls.
• Contribute to simplification and standardisation of the network security landscape.

Mentoring & Leadership

• Act as a senior reference point for network security topics.
• Coach and guide junior engineers and peers on best practices.
• Influence stakeholders through expertise rather than authority.

Technical Expertise

• Strong experience in network security engineering in large, complex environments.
• Deep understanding of:
  • Firewalls (NGFW, cloud‑native firewalls)
  • Network segmentation concepts
  • Secure network architectures (on‑prem, cloud, hybrid)
  • Virtual Networks (ACI)
• Familiarity with at least one major firewall vendor (e.g. Palo Alto, Check Point, Fortinet) and one network security policy management tools (Tufin or Algosec).

Governance & Risk

• Proven experience in security governance, risk management, or control ownership.
• Comfortable working with:
  • Policies and standards
  • Risk registers and remediation plans
  • Auditors and compliance teams
• Ability to balance security, risk, and business enablement.

Nice to Have

• Experience in regulated environments (financial services, infrastructure, critical services).
• Exposure to DORA, SWIFT CSP, or similar regulatory frameworks.
• Experience with cloud security platforms and network security automation tools.
• Certifications such as CISSP, CCSP, PCNSE,CCNP, CCIE or equivalent.

Soft Skills

• Customer service oriented.
• You are a very good communicator in English, both verbal and written, and able to discuss and defend the security interests with individuals and groups of IT (security) experts.
• You are a team player who communicates in an open, respectful and constructive way with his customers and peers, both verbally and in writing. You will take ownership and ensure that organizational quality standards are met.
• Attention to (good) time management with the right sense for prioritization.
• Reliable, stress resistant and flexible.
• Pragmatic mindset: governance‑focused without being bureaucratic.
• Ability to challenge designs constructively and influence decisions.

You will become part of a young, dynamic and eager to learn team of engineers on IT Security. We are working with the latest technologies and a continuous mindset to improve.

Please note that this is a permanent position, and we do not offer freelance/contract arrangement for the role.

About The Team

Group Technology Services (GTS) plans, builds and runs the global infrastructure of Euroclear, and is additionally responsible for the IT service management to the operating entities of the various Group markets. Group Technology Services operates its IT systems and IT services in such a way that, at an appropriate and benchmarked cost level, it can deliver the agreed levels of service to support the requirements of the business processes, for both normal operations and during disaster recovery.