Network Security Engineer

Jobtailor; New Jersey; On-site; USD 110,000 - 140,000; Full time

Job summary

Jobtailor in New Jersey seeks a security-focused professional to identify gaps and lead the design, architecture, and implementation of robust security solutions across networks and deployments.

You will partner with Operations, Engineering, and Planning to embed secure patterns, conduct investigations, monitor threats with SIEM, and drive incident response and vulnerability management to enhance the organization’s security posture.

Qualifications

• Bachelor’s degree or 3+ years in network security or related field.
• Experience with SIEM tools such as Splunk, QRadar, Microsoft Sentinel, or Elastic.
• Strong networking fundamentals including TCP/IP and routing protocols.
• Knowledge of firewalls, encryption, IAM, MFA, and secure management networks.
• Experience with threat hunting, incident response, and vulnerability management.
• Experience with NetFlow/IPFIX and anomaly detection.
• Certifications such as CISM, OSCP, Security+ or CCNA/CCNP are a plus.
• Unix/Linux familiarity and DDoS mitigation experience is advantageous.

Responsibilities

• Identify security gaps and lead the design, architecture, and implementation of security solutions
• Partner with Operations, Engineering, and Planning to embed secure design patterns into deployments
• Work with lead engineers on strategic security challenges and investigations
• Provide analysis during active incidents
• Support root cause analysis and produce remediation reports
• Conduct regular security control assessments to close gaps
• Communicate complex concepts to diverse audiences
• Advance security posture through real-time threat monitoring and detection using SIEM
• Lead incident response during breaches
• Manage continuous vulnerability management lifecycle across networks and applications
• Define and implement security architecture covering telemetry, ACLs, stateful firewalls, encryption, IAM, and MFA
• Develop and refine threat detection capabilities in SIEM platforms and other tooling

Skills

Security Architecture

Incident Response

Threat Detection

SIEM Tools

Network Security

Vulnerability Management

Automation Scripting

Communication

Education

Bachelor’s degree or 3+ years in security

Tools

Splunk

QRadar

Microsoft Sentinel

Elastic

NetFlow

IPsec/TLS

IDS

Job description

• Identify security gaps and lead the design, architecture, and implementation of appropriate security solutions
• Partner with Operations, Engineering, and Planning organizations to embed secure design patterns into new deployments and major changes
• Work with lead engineers on strategic security technical challenges and complex investigations
• Provide analysis during active incidents
• Support root cause analysis and produce reports covering timelines, impact, and remediation
• Perform regular security control assessments to validate configuration effectiveness and close gaps found during active hunts
• Communicate complex technical concepts to diverse internal and external audiences
• Advance security posture through real-time threat monitoring and detection using SIEM tools
• Lead incident response efforts during breaches
• Manage the continuous vulnerability management lifecycle across networks and applications
• Define and implement security architecture covering telemetry logs, ACLs, stateful firewalls, encryption, IAM, and MFA
• Develop and refine threat detection capabilities in SIEM platforms and other security tooling

Requirements

• Bachelor’s degree or three or more years of relevant work experience in network security or a related field
• Experience with industry-standard SIEM tools such as Splunk, QRadar, Microsoft Sentinel, or Elastic
• Network fundamentals knowledge, including TCP/IP and general router operations
• Familiarity with Control Plane, Data Plane, and Management Plane concepts
• Conceptual knowledge of securing common routing protocols such as BGP, OSPF, and IS-IS
• Exposure to reviewing NetFlow or IPFIX traffic logs and identifying anomalies or suspicious patterns
• Intermediate knowledge of comprehensive security architecture design and deployment
• Knowledge of firewalls, encryption, IAM, MFA, and hardened management network interfaces
• Networking fundamentals across OSI layers 1–4
• Threat hunting or detection engineering skills
• Network and protocol analysis
• Endpoint forensics
• Data science querying of large datasets
• Automation and scripting experience
• Preferred certifications include CISM, OSCP, Security+, JNCIA, CCNA, JNCIS, or CCNP
• Hands‑on experience with NetFlow, BGP, DNS, and IDS logs at scale is advantageous
• Knowledge of NIST 800-61 and MITRE ATT&CK methodologies is advantageous
• Experience with risk‑based alerting, asset/identity correlation, and Elasticsearch is advantageous
• Unix or Linux expertise, IPsec/TLS encryption, and DDoS mitigation experience are advantageous
• Project management skills and a record of delivering results
• Effective written and verbal communication skills for cross‑functional collaboration

Core Competencies

Demonstrates expertise in security architecture design, incident response, and vulnerability management, with a strong focus on threat detection and monitoring using SIEM tools. Proficient in network security fundamentals and effective communication of complex technical concepts to diverse audiences.

Highest-signal resume keywords

• Security Architecture Design
• Incident Response Management
• SIEM Tools Experience
• Vulnerability Management
• Threat Detection Engineering

ATS Optimization Keywords

Hard Skills

• Network Security
• Threat Hunting
• Data Analysis
• Automation and Scripting
• Endpoint Forensics
• Network and Protocol Analysis
• Security Control Assessments
• Root Cause Analysis
• Configuration Validation
• Security Solutions Implementation

Soft Skills

• Effective Communication
• Cross-Functional Collaboration
• Project Management

Certifications & Qualifications

• CISM
• OSCP
• Security+
• JNCIA
• CCNA
• JNCIS
• CCNP

Industry Keywords

• NIST 800-61
• MITRE ATT&CK
• TCP/IP
• Routing Protocols
• Control Plane
• Data Plane
• Management Plane
• DDoS Mitigation
• IAM
• MFA

Tools & Technologies

• Splunk
• QRadar
• Microsoft Sentinel
• Elastic
• SIEM Platforms
• NetFlow
• BGP
• DNS
• IDS
• IPsec/TLS