Lead Network Security Engineer

NYU Langone Hospitals; New York (NY); On-site; USD 121,792 - 166,950; Full time

Benefits offered by this job

Comprehensive benefits package

Generous time-off program

Wellness program

Job summary

NYU Langone Hospitals seeks a Lead Engineer - Network Security to design and implement network security solutions. This role involves managing security devices, conducting vulnerability assessments, and ensuring compliance with regulations. Ideal candidates will have a Bachelor's/Master’s in computer science or Information Security and at least 5 years of relevant experience. The position offers a salary range of $121,792.21 - $166,950.00 annually, with a comprehensive benefits package including financial security, generous time off, and wellness programs.

Qualifications

• Bachelor's or Master's degree in computer science, Information Security, or related field.
• 5 or more years of relevant experience.
• Excellent troubleshooting skills with Fortinet, F5, and Palo Alto.

Responsibilities

• Design and implement secure network architectures.
• Configure, manage, and monitor network security devices.
• Support responses to security incidents and conduct investigations.

Skills

Fortinet troubleshooting

F5 troubleshooting

Palo Alto troubleshooting

Network architecture design

Incident response planning

Education

Bachelor's or Master’s degree in computer science or Information Security

Tools

Fortinet security devices

F5 firewalls

Palo Alto firewalls

Cisco ASA firewalls

Job description

Position Summary

We have an exciting opportunity to join our team as a Lead Engineer - Network Security Systems. Reporting to the Director of Network Security Systems Engineering, the Lead Engineer is responsible for overseeing and managing the design and implementation of network security solutions, providing 2nd and 3rd level support for all network security issues or outages, ensuring smooth operation of the network infrastructure, and maintaining close vendor relationships to support current technology solutions and provide roadmap strategies for all network security systems.

Job Responsibilities

• Design and implement secure network architectures, considering factors like redundancy, scalability, and fault tolerance, and assess existing network infrastructure for security vulnerabilities and propose necessary improvements.
• Configure, manage, and monitor network security devices, including firewalls, VPNs, IDS/IPS, and load balancers, ensuring proper access controls, segmentation, and hardening of network devices.
• Support responses to security incidents, conduct thorough investigations, and implement necessary remediation measures. Create incident response plans and playbooks to enhance incident handling efficiency.
• Implement and enforce network security policies, procedures, and guidelines, ensuring compliance with industry regulations and standards related to network security.
• Conduct regular network vulnerability assessments and penetration testing, collaborating with IT teams to prioritize and remediate identified vulnerabilities.
• Implement and manage network security monitoring tools to detect and respond to security threats in real-time, configuring alerts and notifications to proactively address potential security incidents.
• Collaborate with cross‑functional teams to promote a security‑first mindset across the organization.
• Stay up to date with the latest security threats, trends, and best practices, and participate in industry conferences and forums to share knowledge and gain insights.

Minimum Qualifications

• Bachelor's or Master’s degree in computer science, Information Security, or a related field.
• 5 or more years of relevant experience.
• Excellent Fortinet, F5, and Palo Alto troubleshooting skills with the ability to identify issues and determine solutions.
• Ability to focus, manage time and work efficiently.
• Experience and desire to work in a team environment with other engineers.
• Ability to effectively communicate with all levels of the organization.

Additional Position Specific Responsibilities

• Design, maintain, and monitor extensive firewall, Fortinet, and F5 environments per hospital standards.
• Implement and support multi‑vendor firewall platforms featuring Palo Alto series firewalls and Cisco ASA.
• Conduct daily maintenance and checks of all firewall, Fortinet, and F5 related equipment.
• Maintain and organize reporting information and documentation for management review.
• Maintain high to detailed levels of documentation as required for all Palo Alto and F5 environments.
• Perform routine maintenance functions for all systems including OS upgrades, hardware fixes, etc.
• Provide second and third level support for all firewall and F5 systems.

Preferred Qualifications

• At least 5 years working with network firewalls, Fortinet, or Palo Alto NGFW experience preferred.
• Proficiency with Fortinet, F5 Access Policy Manager (APM), F5 Enterprise Manager (EM), Palo Alto Firewalls, and Cisco ASA firewalls.

NYU Langone Health provides a salary range to comply with New York state law on salary transparency: $121,792.21 - $166,950.00 annually. Actual salaries depend on experience, specialty, education, and hospital need.

At NYU Langone Health, we are committed to supporting our workforce and their loved ones with a comprehensive benefits and wellness package. The benefits include financial security benefits, a generous time‑off program, employee resource groups, and a holistic wellness program focusing on physical, mental, nutritional, sleep, social, financial, and preventive care.

NYU Langone Health is an equal‑opportunity employer and committed to inclusion in all aspects of recruiting and employment. All qualified individuals are encouraged to apply and will receive consideration. We require applications to be completed online.

View Know Your Rights: Workplace discrimination is illegal.

To view the Pay Transparency Notice, please click here.