Hybrid Security Network Engineer – SIEM/EDR

PlanetArt; Woodridge (IL); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health, Dental, Vision Insurance

Life Insurance

401(k) with matching

Paid Time Off & Holidays

Employee Product Discounts

Job summary

PlanetArt is seeking a Network Security Engineer to join the Security Department. You will assess network and server security, monitor security events, and investigate alerts across Cisco technologies, Palo Alto firewalls, Windows and Linux servers, and endpoint security tools.

This role operates on a hybrid model (3 days onsite, 2 remote) and requires local relocation eligibility. You’ll work with infra teams to address security risks, implement SIEM/EDR configurations, and help triage

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent experience.
• 3–5 years of experience in network security, security operations, incident response, or a related role.
• Working knowledge of Cisco technologies and Palo Alto firewalls, including interpreting configurations, policies, and logs; understanding TCP/IP, DNS, NAT, VPNs, and segmentation.
• Understanding of Windows and Linux server security, including hardening, patching, authentication, permissions, and audit logging.
• Knowledge of Security Information and Event Management (SIEM), including log collection, forwarding, ingestion, parsing, correlation, and alert monitoring.
• Experience with EDR configuration and investigation, including policies, detection settings, exclusions, endpoint telemetry, and response capabilities.
• Ability to triage alerts as a SOC analyst would, gather evidence, prioritize threats, and escal…
• Strong analytical, troubleshooting, and communication skills, with the ability to collaborate across security, network, and infrastructure teams.
• Understanding of how artificial intelligence (AI) can be integrated into security workflows, including validating AI-generated findings, protecting sensitive data, and maintaining analyst oversight.
• Ability to develop, test, and document security scripts and tools using Python, PowerShell, or similar languages, including integrations with security tool APIs.
• Preferred: Splunk experience, including SPL searches, dashboards, and configuring and tuning alerts, thresholds, schedules, and notifications.

Responsibilities

• Review Cisco and Palo Alto firewall policies, access controls, segmentation, VPNs, and security logs.
• Assess Windows and Linux server hardening, patching, authentication, permissions, and audit logging.
• Verify SIEM collection of firewall, network, server, and endpoint logs; investigate logging gaps.
• Monitor SIEM and Endpoint Detection and Response (EDR) alerts for suspicious activity.
• Triage alerts: validate detections, distinguish false positives, assess severity, and escalat…
• Correlate network, server, identity, and endpoint events to identify affected systems and timelines.
• Configure EDR policies, detection settings, exclusions, and alerts through approved change procedures.
• Coordinate incident containment and remediation with infrastructure teams; track issues to resolution.
• Document investigations and response procedures; evaluate AI use in analysis and detection.
• Develop, test, and maintain security tools for log analysis, alert triage, and automation.
• Recommend security improvements to the teams responsible for network and server configuration.

Skills

Cisco/Palo Alto knowledge

SIEM understanding

EDR configuration

SOC incident response

Network/server security

TCP/IP/DNS/VPN knowledge

Python/PowerShell scripting

AI in security workflows

Analytical troubleshooting

Cross-team collaboration

Education

Bachelor’s degree in Computer Science/Cybersecurity

Tools

Splunk

EDR tools

Job description

PlanetArt is seeking a Network Security Engineer to join the Security Department. You will assess network and server security, monitor security events, and investigate alerts across Cisco technologies, Palo Alto firewalls, Windows and Linux servers, and endpoint security tools.

This role operates on a hybrid model (3 days onsite, 2 remote) and requires local relocation eligibility. You’ll work with infra teams to address security risks, implement SIEM/EDR configurations, and help triage