Network Security Engineer

Hirewell; Chicago (IL); In loco; USD 110.000 - 170.000; Tempo pieno

Descrizione del lavoro

Hirewell is seeking a hands-on Security & Network Engineer to strengthen our security infrastructure, network environment, and endpoint protection. You’ll secure enterprise systems, support incident response, and help maintain compliance with industry security standards.

You will manage Palo Alto firewalls, deploying policies and decryption. You’ll own CrowdStrike Falcon administration and contribute to SIEM, identity protection, and cloud security initiatives.

Competenze

• : 5+ years of experience in network engineering, security engineering, or a related infrastructure security role.
• Strong hands-on experience administering Palo Alto Networks firewalls, including security policies, Panorama, and GlobalProtect. Prisma Access experience is a plus.
• Practical experience with CrowdStrike Falcon, including policy management, endpoint protection, and alert triage.
• Experience with at least one of the following: Falcon NG-SIEM/LogScale, Identity Protection, or Cloud Security.
• Solid networking fundamentals, including TCP/IP, routing and switching, VPN technologies (IPsec/SSL), DNS, and network segmentation.
• Experience supporting security compliance frameworks, ideally PCI DSS. Familiarity with SOC 2 or NIST CSF is also valuable.
• Experience administering Microsoft Entra ID (Azure AD), SAML-based SSO, and MFA.
• Strong troubleshooting, documentation, and communication skills, including the ability to maintain runbooks, network diagrams, and security control documentation.

Mansioni

• Security Infrastructure: Manage and optimize Palo Alto Networks next‑gen firewalls, including security policies, NAT, threat prevention, URL filtering, WildFire, and decryption policies.
• Endpoint & Threat Protection: Own day‑to‑day administration of CrowdStrike Falcon, including endpoint deployment and health, prevention policies, alert investigation, and coordination with managed detection and response teams.
• Security Monitoring: Support security monitoring and detection capabilities, including Falcon NG‑SIEM (LogScale), identity threat protection, and cloud security tools.
• Network Engineering: Maintain and troubleshoot LAN/WAN infrastructure, VPNs, routing and switching, DNS, and network segmentation.
• Incident Response: Help lead technical investigations during security incidents, participate in tabletop exercises, and implement improvements based on findings.
• Compliance & Risk: Support security assessments and audits by maintaining technical evidence, documenting controls, and contributing to ongoing risk assessments and security reviews.
• Identity & Access Management: Support MFA, SSO, Microsoft Entra ID, SAML, and conditional access policies. Assist with identity security improvements and platform evaluations.

Conoscenze

Security engineering

Network engineering

Incident response

Cloud security

Identity & access management

Troubleshooting

Documentation

Communication

Strumenti

Palo Alto firewalls

Panorama

GlobalProtect

Prisma Access

CrowdStrike Falcon

Falcon NG-SIEM/LogScale

Microsoft Entra ID / Azure AD

SAML-based SSO

MFA

Descrizione del lavoro

Authorized to work in the United States without sponsorship

Must have Palo Alto and CrowdStrike experience

About the Role

We’re looking for a hands‑on Security & Network Engineer to help manage and improve our security infrastructure, network environment, and endpoint protection. This role will focus on securing enterprise systems, strengthening network defenses, supporting incident response, and helping maintain compliance with industry security standards.

What You’ll Do

• Security Infrastructure: Manage and optimize Palo Alto Networks next-generation firewalls, including security policies, NAT, threat prevention, URL filtering, WildFire, and decryption policies. Support Panorama, GlobalProtect, and Prisma Access administration and deployment.
• Endpoint & Threat Protection: Own day‑to‑day administration of CrowdStrike Falcon, including endpoint deployment and health, prevention policies, alert investigation, and coordination with managed detection and response teams.
• Security Monitoring: Support security monitoring and detection capabilities, including Falcon NG-SIEM (LogScale), identity threat protection, and cloud security tools. Help evaluate and adopt emerging security capabilities and AI‑driven tools.
• Network Engineering: Maintain and troubleshoot LAN/WAN infrastructure, VPNs, routing and switching, DNS, and network segmentation. Contribute to infrastructure resilience, disaster recovery, and network improvement initiatives.
• Incident Response: Help lead technical investigations during security incidents, participate in tabletop exercises, and implement improvements based on findings.
• Compliance & Risk: Support security assessments and audits by maintaining technical evidence, documenting controls, and contributing to ongoing risk assessments and security reviews.
• Identity & Access Management: Support MFA, SSO, Microsoft Entra ID, SAML, and conditional access policies. Assist with identity security improvements and platform evaluations.

What We’re Looking For

• 5+ years of experience in network engineering, security engineering, or a related infrastructure security role.
• Strong hands‑on experience administering Palo Alto Networks firewalls, including security policies, Panorama, and GlobalProtect. Prisma Access experience is a plus.
• Practical experience with CrowdStrike Falcon, including policy management, endpoint protection, and alert triage.
• Experience with at least one of the following: Falcon NG-SIEM/LogScale, Identity Protection, or Cloud Security.
• Solid networking fundamentals, including TCP/IP, routing and switching, VPN technologies (IPsec/SSL), DNS, and network segmentation.
• Experience supporting security compliance frameworks, ideally PCI DSS. Familiarity with SOC 2 or NIST CSF is also valuable.
• Experience administering Microsoft Entra ID (Azure AD), SAML-based SSO, and MFA.
• Strong troubleshooting, documentation, and communication skills, including the ability to maintain runbooks, network diagrams, and security control documentation.