Network Security Engineer

Unity Systems; Boston (MA); On-site; USD 100,000 - 130,000; Full time

Job summary

Unity Systems is seeking a Network Security Engineer to join our information security team in Boston. This in-person role, requiring on-site presence four days a week, is ideal for candidates with over 6 years of experience in network, email, endpoint, and cloud security.

The role includes designing and managing network security solutions, analyzing network traffic for threats, and implementing email encryption protocols. A strong understanding of security principles and hands-on experience with various technologies is essential.

Qualifications

• 6+ years of experience in network security and information security.
• Strong background in networking and infrastructure.
• Ability to automate and script for operational efficiency.

Responsibilities

• Design, implement, and manage network security solutions.
• Analyze network traffic for potential security threats.
• Develop and enforce network security policies and standards.

Skills

Networking

Security Principles

Cloud Security

Cryptography

Vulnerability Management

Job description

Overview

KKR is seeking a network security engineer to join our information security team in Boston or New York. This is an in-person role with expectations to be on-site 4 days a week in Boston.

This role is ideal for an engineer with 6+ years of experience developing, and building solutions with expertise across network, email, endpoint, data, identity and cloud security. Experience in financial systems, cloud (AWS/Azure), or AI security is highly valued.

Responsibilities

• Network Security: Design, implement, and manage network security solutions, including firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and network access control (NAC).
• Network Security: Analyze network traffic for potential security threats and vulnerabilities.
• Network Security: Develop and enforce network security policies, procedures, and standards.
• Email Security: Configure and manage secure email gateways to protect against phishing, spam, malware, and other email-based threats.
• Email Security: Implement and maintain email encryption protocols.
• Email Security: Conduct regular security assessments and audits of email systems.
• Email Security: Deploy and manage endpoint security solutions, including antivirus, antimalware, EDR (Endpoint Detection and Response), and DLP (Data Loss Prevention) tools.
• Email Security: Ensure endpoint devices are compliant with security policies and have the latest security patches and updates.
• Email Security: Respond to and mitigate endpoint security incidents.
• Vulnerability Management: Develop and manage vulnerability management programs, including regular scanning, assessment, and remediation.
• Vulnerability Management: Collaborate with IT teams to prioritize and address vulnerabilities based on risk and impact.
• Vulnerability Management: Track and report on the status of vulnerability remediation efforts.
• Vulnerability Management: Implement and manage security controls across various cloud platforms (e.g., AWS, Google Cloud, Microsoft Azure).
• Vulnerability Management: Ensure the security of cloud-based infrastructure, applications, and services.

Qualifications

• Experienced security professional with a strong background in networking, infrastructure, and security, ideally gained in organizations of various sizes and through working in multiple roles with diverse technologies and products.
• Understanding of core principles of how modern infrastructure technologies operate (such as virtualization of computing and networking, containers, cloud computing, SaaS, PaaS etc) and the security aspects of these technologies
• Solid understanding of the operation of LAN/WAN IP-based networks (TCP/IP, routing/switching, VLANs, NAT, DNS, DHCP)
• Understanding of principles of applied cryptography - symmetric/asymmetric encryption, hashing, SSL/TLS, SSH, PKI, IPSec, site-to-site/remote access VPN, disk encryption, HSM
• Understanding of attack vectors against modern enterprises: phishing, ransomware, malware, DoS/DDoS, drive-by, MITM, various type of injection (i.e. SQL), cross-site scripting, etc.; methods of defense from these attacks
• Knowledge of common security principles, concepts, and methods (authentication, authorization, single sign-on, network segregation, DMZ, Zero Trust, defense-in-depth, penetration testing, sandboxing etc.)
• Ability and desire to code, script and automate in order to improve own and team\'s operational efficiency
• Understanding of aspects of application delivery in principle and firewalling/load balancing in particular