Network Security Engineer

Pelham Berkeley Search; New York (NY); Hybrid; USD 130,000 - 140,000; Full time

Benefits offered by this job

Annual bonus

401(k) match

Hybrid work in NYC

Job summary

Pelham Berkeley Search is seeking a Network Security Engineer for a high-profile asset management client in New York City. This hands-on role focuses on Threat Vulnerability Management, network security, and the ongoing administration of security tools in a demanding, professional environment.

You will work on TVM, SIEM, and firewall-related projects, coordinate with Information Security, monitor alerts from Carbon Black, Defender, and McAfee, and support cloud security on AWS/Azure.

Qualifications

• Bachelor’s degree in Computer Science or related field.
• Hands-on experience with vulnerability management and TVM.
• Experience with next-gen firewalls and Palo Alto.
• Proficiency in endpoint protection and security tooling.
• Strong analytical and incident response skills.
• Experience with AWS/Azure in production.

Responsibilities

• Secure enterprise network via TVM, SIEM, and logging.
• Implement and tune firewall rules and security controls.
• Respond to security alerts from SOC and security tools.
• Coordinate vulnerability remediation and audits.
• Participate in penetration testing and risk assessments.

Skills

TVM experience

SIEM operations

Firewall administration

Palo Alto Firewalls

Endpoint security

Cloud security

AD / GPO

Incident response

Education

Bachelor's degree in Computer Science or related

Tools

Palo Alto Panorama

Carbon Black

McAfee

Microsoft Defender

LogRhythm

Job description

Network Security Engineer

Work Eligible: US Citizen/Green card,... No H1-B, No F-1 OPT,...

Must be local to NYC area

High Profile mid-sized Asset Management Firm seeks Network Security Engineer with strong Threat Vulnerability Management experience.

In a very hands-on capacity you will be responsible for the support and administration of several core network security tools... interesting projects, very professional and high-end environment.

You will be responsible for the administration, engineering, and support of security initiatives related to Threat Vulnerability Management and Network Security.

This is a full-time direct hire role with a targeted base salary of 130,000 - 140,000 plus an annual bonus and a great benefits package (8% company retirement contribution, 4 weeks vacation,...).

In summary:

• Work closely with Information Security to ensure a secure enterprise network environment through the enforcement of network security controls, threat and vulnerability management (TVM), and logging and monitoring for applications, servers and network devices through the SIEM process.
• Leverage and implement tools that automate and support Network Security, TVM and SIEM processes, helping to develop capabilities to early detect and quickly respond to potential cybersecurity breaches and incidents.
• Implement appropriate changes, updates, and upgrades in response to vulnerabilities and incursions; help to gather evidence for audits and to remediate audit issues.
• Support the process owners for Network Security, Threat Vulnerability Management and and SIEM by actively participating in risk assessments
• Participate in the organization and coordination of penetration testing.
• Review and respond to alerts generated by the Cyber Security Operations Center teams.
• Review, respond and resolve alerts originating Carbon Black products to ensure appropriate system processing and applications requirements are met.
• Ensure Microsoft Defender / McAfee alerts are monitored and resolved.
• Assist and deploy standard firewall rules.
• Implement appropriate changes, updates, and upgrades in response to vulnerabilities and incursions.
• Provide day-to-day support of network security systems in a backup capacity.
• Follow run books for deployments and/or system upgrades during and off-hours.
• Participate in metric collection to demonstrate situational awareness to management regarding current threats and risks.

Requirements include:

• Experience with Vulnerability Management solutions and relevant work experience with tools that provide vulnerability detection and reporting, logging and monitoring, and other cybersecurity solutions such as IPS/IDS, anti-virus and DLP.
• Working knowledge of next-gen firewall administration and configuration; some related Palo Alto Firewall administration (Panorama), network security, operations and management best practices preferred
• Endpoint management and best practices: McAfee Endpoint Protection, Microsoft Defender, CarbonBlack, and LogRhythm.
• Understanding of network design, infrastructure, Active Directory and Group Policy
• Knowledge of enterprise patching / updates is a must
• Working knowledge of security protocols, authentication, authorization and security.
• Strong hands-on experience with public cloud platforms (AWS/Azure) in production environments.
• Preferred certifications or professional training: ITIL Foundation and any training with Palo Alto, Carbon Black, Tenable/Nessus and/or LogRhythm
• Ability to resolve security alerts in a timely manner and elevate events that could lead to a security breach.
• Analytical skills to troubleshoot events and correlate user or system activity.
• Hands-on experience deploying firewall rules to meet business and technical requirements.
• Completed Bachelor’s degree with Computer Science or related (math, engineering,...) course of study.

Good Project Management skills

Completed Bachelor’s degree with Computer Science or related (math, engineering,...) course of study.

This is a hybrid role onsite ~3 days per week in NYC