Information Security Engineer, Network Security Engineering

Jones Lang LaSalle Incorporated; Houston (TX); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Jones Lang LaSalle Incorporated (JLL) is seeking a hands-on Network Security Engineer in Houston to secure our global network infrastructure. The role requires a security-first mindset and deep expertise in Palo Alto technologies alongside API security, WAF/CDN platforms, and complex troubleshooting across network and application layers.

You will collaborate with global engineering, application, and security teams to ensure intelligence-driven, optimized security controls aligned with industry

Qualifications

• 5+ years of hands-on network security engineering experience in enterprise environments.
• Expert-level Palo Alto Networks knowledge: NGFWs, Panorama, PAN-OS; PCNSE/PCNSC preferred.
• Deep understanding of WAF/CDN platforms (Akamai, Cloudflare, Imperva, F5).
• Strong API security expertise; ensure traffic routes through security tooling.
• Solid HTTP security knowledge: TLS interception, SQLi, XSS, CSRF, rate limiting.

Responsibilities

• Serve as SME for Palo Alto technologies (NGFWs, Cloud NGFW, Panorama).
• Own onboarding, policy tuning, and lifecycle management for WAF and CDN platforms.
• Lead firewall ruleset optimization, IDS/IPS tuning, and DDoS protection configuration.
• Drive global rollout, tuning, and operational management of URL filtering and TLS decryption.
• Lead API security efforts, identify vulnerabilities, and coordinate fixes with apps teams.
• Troubleshoot complex multi-layer network and application issues; analyze packet captures.
• Produce actionable security documentation and executive-ready findings; communicate clearly.
• Analyze existing security architectures to identify gaps and drive improvements.
• Keep defenses current with evolving threat landscape and performance metrics.

Skills

Palo Alto Networks (NGFWs, Panorama, &

API security

WAF/CDN platforms (Akamai, Cloudflare,

Web application security (TLS, SQLi, X

Enterprise-scale network security

Packet capture analysis

Job description

JLL empowers you to shape a brighter way. Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology for our clients. We are committed to hiring the best, most talented people and empowering them to thrive, grow meaningful careers and to find a place where they belong. Whether you’ve got deep experience in commercial real estate, skilled trades or technology, or you’re looking to apply your relevant experience to a new industry, join our team as we help shape a brighter way forward.

ABOUT THE ROLE

This is a hands-on, highly technical role responsible for securing JLL's global network infrastructure. The ideal candidate brings a security-first mindset, a bias towards action, and deep expertise in Palo Alto Networks technologies alongside broad command of API security, WAF/CDN platforms, and complex troubleshooting across network and application layers. You'll work collaboratively with global engineering, application, and security teams to ensure security controls are intelligence-driven, optimized, and aligned to industry best practices.

PRIMARY RESPONSIBILITIES

• Serve as the primary subject matter expert for Palo Alto Networks technologies (NGFWs, Cloud NGFW, Panorama), Web Application Firewall, Content Delivery Network, API Security, IDS/IPS, and DDoS prevention
• Own onboarding, policy tuning, and lifecycle management for WAF and CDN platforms; lead firewall ruleset optimization, IDS/IPS tuning, and DDoS protection configuration
• Partner with internal teams to drive the global rollout, tuning, and operational management of URL filtering and TLS decryption across the network estate
• Lead API security efforts - ensuring API traffic routes through security tooling, identifying vulnerabilities, and working with application teams on fixes
• Lead troubleshooting of complex, multi-layer global network and application issues - from packet captures on inter-continental BGP topologies to WAF false-positive triage
• Partner with business and application teams to produce clear, actionable security documentation, change proposals, and executive-ready findings
• Analyze existing network security architectures, processes, and procedures to identify gaps and drive meaningful improvements
• Configure and report on defensive measures against advanced threat actor tactics; maintain current awareness of the evolving threat landscape and the effectiveness of our defenses against them
• Communicate complex technical problems and solutions clearly to both global engineering teams and C-suite stakeholders
• Champion the broader Security team’s initiatives, not just Network Security Engineering
• Participate in the maintenance and tuning of all network security technologies including WAFs, CDNs, VPNs, and application-aware firewalls
• Leverage and contribute to automation pipelines for global firewall rule deployment and policy management across the network estate
• Utilize security tooling telemetry and data collection automations to produce actionable reporting and metrics for internal teams and executive stakeholders

REQUIRED QUALIFICATIONS

• 5+ years of hands-on network security engineering experience designing and implementing enterprise-scale security solutions
• Expert-level proficiency in Palo Alto Networks - NGFWs, Panorama policy management, and PAN-OS; PCNSE or PCNSC certification strongly preferred
• Expert troubleshooting skills across network and application layers, including packet capture analysis on complex, dynamically routed architectures
• Deep understanding of layer 7 web application technologies and WAF/CDN platforms (e.g. Akamai, Cloudflare, Imperva, F5) - onboarding, policy tuning, break/fix troubleshooting, and operational management
• Solid grounding in API security - ensuring API traffic routes through security tooling, evaluating identified vulnerabilities, and partnering with application teams to drive remediation
• Strong HTTP/application security knowledge: TLS interception, SQL injection, XSS, CSRF, command injection, LFI/RFI, rate limiting, bot detection, geo-blocking, and sinkholing
• Intermediate to advanced network routing and switching knowledge with