Cybersecurity Network Engineer

Seminole Hard Rock; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

Seminole Hard Rock is seeking a Network Cybersecurity Engineer to implement and continuously improve security controls across on-premises and cloud environments.

You will deploy, tune, and automate defenses across SASE, perimeter, and cloud networking, linking architecture to measurable security outcomes while working with IAM, infrastructure, and SOC teams.

Responsibilities

• Deploy, configure, and tune secure-access service edge controls including secure web gateway, cloud firewall, CASB, and DLP policy.
• Operate zero-trust network access for workforce and third parties with least-privilege access.
• Operate enterprise browser to enforce least-privilege access to sensitive apps from managed and unmanaged endpoints.
• Tune SSL/TLS inspection, egress policy, and protocol handling to balance security and compatibility.
• Manage traffic steering and PAC configurations to route users to the correct control path globally.
• Manage edge and perimeter defenses: WAF, DDoS, bot management, CDN/DNS for internet-facing properties.
• Security posture for APIs and runtime protection; discover shadow APIs and close gaps.
• Harden DNS, certificate, and TLS posture at the edge with PKI partners.
• Coordinate perimeter changes with franchise and vendor networks to secure remote sites.
• Deploy network detection and response; feed high-fidelity findings to SOC.
• Develop telemetry pipelines for cost-effective analysis of network data.
• Create detections and SIEM content mapping to attacker techniques.
• Investigate network incidents end-to-end; isolate root cause under time pressure.
• Maintain visibility of network assets and attack surface across environments.
• Apply zero-trust segmentation.

Job description

Our team members are the key to our company's success, and their health and well-being, as well as that of their families, is very important to us. We offer a comprehensive benefits package that allows our team members stay healthy, plan for their future and maintain a healthy work-life balance. Benefits may vary with employment status. To see our fill list of Team Member Benefits please visit our career site: www.gotoworkhappy.com/benefits

Job Description:

Overview

At Seminole Hard Rock Support Services, we are on a mission to protect our guests, team members, and enterprise assets through world-class cybersecurity practices. As the Network Cybersecurity Engineer , you will implement, operate, and continuously improve the network security controls that defend traffic in, out, and across the enterprise - from the campus and data center edge to SASE, cloud networks, and the applications they carry - turning architecture and policy into running, automated, measurable defenses.Reporting to the Manager of Cybersecurity Engineering, this role requires a hands-on, security-minded engineer who bridges the worlds of network engineering, cloud operations, and cybersecurity. You will configure and tune the enterprise network security stack - secure access service edge, perimeter and edge defenses, network detection and response, and zero-trust segmentation - and build the integrations and automations that connect it together across on-premises environments and Microsoft Azure (primary), Amazon Web Services, and Google Cloud.This is a builder's role, not an architecture role. You do not define standards from the sidelines; you take reference architectures and network security requirements and make them real: deploying and tuning controls, writing production-grade automation, and instrumenting the telemetry that turns raw network events into actionable insight. Your networking depth lets you treat traffic as evidence, and your fluency with AI and large language models lets you accelerate detection, triage, and analysis of network data far beyond manual effort.You will work across campus, data center, edge, remote access, and cloud network domains, partnering with architecture, IAM, infrastructure, application, and SOC teams to ensure network controls are deployed consistently, operate reliably, and improve continuously across all Seminole Hard Rock business units. You measure your impact in risks reduced, incidents prevented, and manual effort eliminated through automation.

Responsibilities

Secure Access & Edge (SASE)

• Deploy, configure, and tune secure-access service edge controls - secure web gateway, cloud firewall, CASB, and DLP policy - keeping coverage complete and policies current
• Operate zero-trust network access for workforce and third parties, replacing legacy VPN patterns with identity-aware, least-privilege application access
• Operate the enterprise browser to enforce least-privilege, isolated access to sensitive applications from managed and unmanaged endpoints via an enterprise browser platform
• Tune SSL/TLS inspection, tenant restrictions, and egress policy to balance security, privacy, and application compatibility - including protocols sensitive to interception such as NTLM, Kerberos, and certificate-pinned traffic
• Manage traffic steering, forwarding, and PAC configurations so users land on the right control path from any location worldwide

Perimeter, WAF & Application Edge

• Manage edge and perimeter defenses: web application firewall rules, DDoS mitigation, bot management, CDN and DNS policy for internet-facing properties
• Operate API security posture and runtime protection, discovering shadow APIs and closing authentication and data-exposure gaps
• Administer next-generation firewall policy, NAT, and rule lifecycle across data center and property perimeters, driving rule hygiene and least-privilege access
• Harden DNS, certificate, and TLS posture at the edge in partnership with the PKI and infrastructure teams
• Coordinate perimeter changes with franchise, property, and vendor networks so remote sites integrate securely without breaking authentication or application flows

Network Detection, Response & Visibility

• Deploy and tune network detection and response, triaging anomalous east-west and north-south activity and feeding high-fidelity findings to the SOC
• Engineer network telemetry pipelines - flow data, DNS logs, proxy logs, firewall logs, packet metadata - that route, shape, and enrich data for cost-effective analysis
• Develop and tune network-focused detections and SIEM content, mapping coverage to attacker techniques
• Investigate network-layer incidents end-to-end - from packet capture and flow analysis to proxy and firewall log correlation - isolating root cause under time pressure
• Maintain authoritative visibility of network assets and attack surface, continuously reconciling what is connected against what is inventoried

Segmentation, Zero Trust & Cloud Networking

• Apply zero-trust segmentation