10888 - Network Security Engineer II

Hyundai Autoever America; Joliet (IL); On-site; USD 95,000 - 125,000; Full time

Job summary

Hyundai AutoEver America seeks a Network and Cybersecurity Engineer II to manage on-site network and security operations across LAN/WAN, VPN, and security platforms. You will lead incident response, vulnerability management, and contract-driven service delivery while coordinating with vendors and facility teams.

Required are strong expertise in Splunk, Rapid7, and enterprise networking, plus experience with NIST/ISO security standards.

Qualifications

• Bachelor's degree or equivalent in the field of business, computers, information systems or related degree.
• 5-7 years relevant work experience in a related network and/or cybersecurity functional role.
• Extensive knowledge of networking technologies and protocols including TCP/IP, QoS, IPT, VoIP, IOS; Routing and Switching; Routing protocols such as OSPF and BGP; WAN Optimization technologies
• Hands-on expertise with SIEM platforms (Splunk) — search, dashboards, correlation searches, log ingestion, and alerting
• Hands-on expertise with vulnerability management platforms (Rapid7 InsightVM/InsightIDR) — scanning, risk scoring, and remediation workflows
• Demonstrated experience with Wired and wireless local area network ("LAN") segments including infrastructure supporting all Network traffic originating from computing devices
• Demonstrated experience with setup and configuration of redundant networking environments.
• Demonstrated ability to manage IP management components – DNS and DHCP components and central, real-time logging components
• Experience with Remote access components – VPN infrastructure
• Firewalls, Multi-factor authentication Equipment and Software (e.g., tokens), Intrusion prevention and detection devices
• Deep knowledge in designing and developing functional SDN and SDDC technology, understanding of security, physical networking is required
• Working knowledge of security frameworks and compliance standards (e.g., NIST, ISO 27001) and security operations best practices
• Expertise ensuring Network and Security Components provisioned are included in all IT Life Cycle and IT Service Management Services‑related documentation (e.g., asset management and configuration management, i.e. CMDB)

Responsibilities

• Develop and provide Network and Security architecture
• Provide Network and Security documentation standards and requirements
• Develop business and functional requirements for Projects relating to Network and Cybersecurity Management Services
• Manage circuit provisioning for new WAN connectivity, including obtaining favorable circuit pricing
• Work with Client's facility personnel to build necessary facility requirements
• Order and expedite delivery of Network and Security equipment, circuits and services
• Manage the performance of public carriers to meet Client requirements (e.g., schedules, projects) and SLAs
• Coordinate and oversee third-party installation activities (e.g., Network carrier circuit installation activities, router installation)
• Approve router configuration files, firewall rules, and IP addressing schemas and standards
• Provide requirements for physical and logical Network traffic segmentation
• Administer, tune, and monitor SIEM (Splunk) for security event correlation, alerting, log aggregation, and compliance reporting
• Lead vulnerability management using Rapid7 (InsightVM/InsightIDR) — scanning, prioritization, remediation tracking, and reporting
• Manage and respond to security incidents, perform threat detection, triage, containment, and root cause analysis across the enterprise
• Administer and optimize firewalls, IDS/IPS, VPN, multi-factor authentication, and endpoint/network security controls
• Manage technical third‑party relationships for facility cable management services
• Support activities related to Client‑planned or third‑party planned and unplanned outages
• Monitor Service Provider's end-to-end support of Network and Security Services
• Manage Service Provider overall performance & SLAs and quality in accordance with contract
• Ensure that Patch Monitoring and Deployments are performed timely and in accordance with service levels
• Provide on‑site support to compliment service provider's remote management services
• Oversee infrastructure hardware and software acquisition, installation, and changes
• Ensure high availability of infrastructure via service level management
• Ensure that Incident Management and upgrades are resolved
• Identify change requests in lieu of performance improvements, security hardening, and cost efficiencies

Skills

TCP/IP & Routing

SIEM expertise

Vulnerability management

LAN/WAN networking

VPN & DNS/DHCP

Security frameworks

IT Life Cycle & CMDB

Education

Bachelor's degree or equivalent in IT or related field

Tools

Splunk

Rapid7 InsightVM/InsightIDR

VPN solutions

Job description

10888 - Network and Cybersecurity Engineer II

Location: Joliet , IL (5 days on-site)

Company Overview

Hyundai AutoEver America (HAEA) is the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis.

HAEA offers a truly global and collaborative environment. Here, you'll drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group.

At HAEA, we understand that IT is the cornerstone of today's fast-evolving digital world. By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai's Global Headquarters and North American operations.

If you're passionate about technology and eager to make a real impact at a world-class company, Hyundai AutoEver America is the place to grow your career. Join us and be part of the transformation that's driving the future of automotive innovation.

Website: http://www.haeaus.com

Role Overview

The selected Network Security Engineer will ensures Service Provider delivery of managed services across Network and Cybersecurity functions meet HAEA's Network, Security & Business requirements. This position requires in-depth knowledge of HAEA's Network Infrastructure (LAN/Switches, DNS – DHCP, WAN, Load Balancers, VOIP, VPN, etc.) and enterprise security operations (SIEM, vulnerability management, threat detection and response) to address complex incidents and problems and to provide a stable, reliable, and secure infrastructure. This position is also responsible for ensuring that Network and Security Infrastructure meets availability requirements, contracted service levels, and cybersecurity compliance standards. The person is also responsible for managing vendor technical performance, network/security-specific contracts and suppliers, prioritizing customer business requests, and managing project schedules and budgets.

Key Responsibilities

• Develop and provide Network and Security architecture
• Provide Network and Security documentation standards and requirements
• Develop business and functional requirements for Projects relating to Network and Cybersecurity Management Services
• Manage circuit provisioning for new WAN connectivity, including obtaining favorable circuit pricing
• Work with Client's facility personnel to build necessary facility requirements
• Order and expedite delivery of Network and Security equipment, circuits and services
• Manage the performance of public carriers (and other third parties) to meet Client requirements (e.g., schedules, projects) and SLAs
• Coordinate and oversee third-party installation activities (e.g., Network carrier circuit installation activities, router installation)
• Approve router configuration files, firewall rules, and IP addressing schemas and standards
• Provide requirements (e.g., security, performance) for physical and logical Network traffic segmentation
• Administer, tune, and monitor SIEM (Splunk) for security event correlation, alerting, log aggregation, and compliance reporting
• Lead vulnerability management using Rapid7 (InsightVM/InsightIDR) — scanning, prioritization, remediation tracking, and reporting
• Manage and respond to security incidents, perform threat detection, triage, containment, and root cause analysis across the enterprise
• Administer and optimize firewalls, IDS/IPS, VPN, multi-factor authentication, and endpoint/network security controls
• Manage technical third‑party relationships for facility cable management services (e.g., physical wiring between servers and wiring closet and between wiring closet and desktop)
• Support activities related to Client‑planned or third‑party planned and unplanned outages
• Monitor Service Provider's end-to-end support of Network and Security Services
• Manage Service Provider overall performance & SLAs and quality in accordance with contract
• Ensure that Patch Monitoring and Deployments are performed timely and in accordance with service levels
• Provide on‑site support to compliment service provider's remote management services
• Oversee infrastructure hardware and software acquisition, installation, and changes
• Ensure high availability of infrastructure via service level management
• Ensure that Incident Management and upgrades are resolved
• Identify change requests in lieu of performance improvements, security hardening, and cost efficiencies

Basic Qualifications

• Bachelor's degree or equivalent in the field of business, computers, information systems or related degree.
• 5-7 years relevant work experience in a related network and/or cybersecurity functional role.
• Extensive knowledge of networking technologies and protocols including TCP/IP, QoS, IPT, VoIP, IOS; Routing and Switching; Routing protocols such as OSPF and BGP; WAN Optimization technologies
• Hands‑on expertise with SIEM platforms (Splunk) — search, dashboards, correlation searches, log ingestion, and alerting
• Hands‑on expertise with vulnerability management platforms (Rapid7 InsightVM/InsightIDR) — scanning, risk scoring, and remediation workflows
• Demonstrated experience with Wired and wireless local area network ("LAN") segments including infrastructure supporting all Network traffic originating from computing devices (e.g., wireless access points, desktop devices, local file and print servers, peripherals, and other End User devices)
• Demonstrated experience with setup and configuration of redundant networking environments.
• Demonstrated ability to manage IP management components – Domain Name Services (DNS) and Dynamic Host Configuration Protocol (DHCP) components and central, real‑time logging components
• Experience with Remote access components – Virtual private network ("VPN") infrastructure
• Firewalls, Multi-factor authentication Equipment and Software (e.g., tokens), Intrusion prevention and detection devices
• Deep knowledge in designing and developing functional SDN and SDDC technology, understanding of security, physical networking is required
• Working knowledge of security frameworks and compliance standards (e.g., NIST, ISO 27001) and security operations best practices
• Expertise ensuring Network and Security Components provisioned are included in all IT Life Cycle and IT Service Management Services‑related documentation (e.g., asset management and configuration management, i.e. CMDB)

Preferred Qualifications

• Ability to design processes that ensure rapid Incident determination, alert identification and correlation, escalation and resolution for all Network and Security environments on a 24x7x365 basis
• Industry certifications such as CISSP, CISM, Security+, CCNP Security, or Splunk/Rapid7 product certifications
• Demonstrated experience with continuous improvements to Networking and Security Solutions
• Remote access components – Virtual private network ("VPN") infrastructure.
• Extensive experience with Networking and security problem diagnosis and resolution.
• Experience with threat hunting, incident response, and security event forensics.
• Demonstrated experience with server administration.
• Experience in managing sourcing vendors, deliverables and service delivery outcomes.
• Preferred experience in managing enterprise network and security management SLA/service delivery metrics.
• Experience overseeing root cause analysis to proactively prevent problem recurrence and to improve Service Levels.