Security Engineer, Network Security

Saronic Technologies; San Diego (CA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical Insurance

Dental and Vision Insurance

Time Off

Parental Leave

Competitive Salary

401(k) plan

Stock Options

Life and Disability Insurance

Pet Insurance

Office perks

Job summary

Saronic Technologies is seeking a Security Engineer to own end-to-end network security across enterprise, on-prem, cloud, and vessel communications. You will spearhead firewalls, segmentation, VPN/ZTNA, and device hardening while collaborating with IT, cloud security, and mission teams to secure all paths from operator to vessel.

You will design secure AWS network architectures, manage cryptography and key management for platform communications, and help scale security as operations expand in

Qualifications

• 5+ years of hands-on enterprise network security experience, or an equivalent combination of experience and demonstrated ability.

Responsibilities

• Own firewalls, segmentation and microsegmentation, wireless, DNS, VPN/ZTNA, and device hardening across a multi-site footprint (enterprise, on-prem, cloud, vessel comms).
• Design secure network architecture in AWS (VPC segmentation, private connectivity, egress control).
• Secure vessel networking and communications, including LTE/5G, RF, SATCOM, mesh, and cryptography/key management for platform communications.

Skills

Enterprise network security

Zero Trust / SASE / ZTNA

Network automation

Security architecture

Collaborative teamwork

Job description

Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.

Job Overview

Security at Saronic is a force multiplier, not a blocker. We’re looking for a Security Engineer to own network security end to end, including the corporate enterprise, our on-prem and production environments, our AWS cloud, and the communications and cryptography that keep autonomous vessels connected in contested, bandwidth-limited environments. Today this work is handled part-time by engineers with other primary duties; you will own it.

You’ll partner with Information Technology, Enterprise Technology, Internal Apps, Infrastructure, Software, Mission Operations, Forward Deployed Engineers, Cloud Security, Product Security, and Security Operations and the teams building our vessels and their communications to secure every path from the operator to the vessel.

This is an opportunity to design network security across a uniquely broad surface (enterprise, on-prem, cloud, and vessel comms), solve genuinely hard problems in securing constrained maritime links, and build the automation that keeps segmentation enforced as the footprint scales.

Responsibilities

• Enterprise & On-Prem Network Security: Own firewalls, segmentation and microsegmentation, wireless, DNS, VPN/ZTNA, and device hardening across a growing multi-site footprint, including corporate offices, data centers, and on-prem and production environments (i.e., Palo Alto, Cisco, Aruba; GlobalProtect, Tailscale/WireGuard, IPsec). Move the enterprise toward zero-trust access and retire flat-network and legacy-VPN patterns.

• Cloud Network Security: Design secure network architecture in AWS (commercial and GovCloud): VPC segmentation, private connectivity, and egress control.

• Vessel Communications & Cryptography: Secure all vessel networking and communications, including cellular (LTE/5G), RF and radio links, SATCOM, mesh networking, and line-of-sight and beyond-line-of-sight connectivity, along with the command-and-control paths to and from vessels and platforms such as Echelon. Own cryptography and key management for platform communications, protect data in transit and at rest, and design resilient, secure links over intermittent, contested, low-bandwidth, and high-latency conditions.

• Network Observability & NOC: Increase network visibility and observability (flow logs, telemetry, and monitoring) across enterprise, on-prem, and cloud, and partner with Information Technology to support the build-out of the Network Operations Center (NOC).

• Automation & Monitoring: Automate network security (segmentation-as-code, configuration validation) and support network-based

Qualifications

• 5+ years of hands-on enterprise network security experience, or an equivalent combination of experience and demonstrated ability

Preferred Qualifications

• Zero Trust / SASE / ZTNA architecture
• Network observability and visibility tooling, and experience standing up or supporting a Network Operations Center (NOC)
• Secure design of SATCOM, RF, cellular, or mesh links; software-defined radio and spectrum awareness; COMSEC and cryptographic key management
• Network automation at scale through scripting and Infrastructure-as-Code
• Experience in defense, maritime, aerospace, or other high-assurance environments

Physical Demands

• Prolonged periods of sitting at a desk and working on a computer
• Occasional standing and walking within the office
• Manual dexterity to operate a computer keyboard, mouse, and other office equipment
• Visual acuity to read screens, documents, and reports
• Occasional reaching, bending, or stooping to access file drawers, cabinets, or office supplies
• Lifting and carrying items up to 20 pounds occasionally (e.g., office supplies, packages)

Benefits

• Medical Insurance: Comprehensive health insurance plans covering a range of services
• Saronic pays 100% of the premium for employees and 80% for dependents
• Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care
• Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents
• Time Off: Generous PTO and Holidays
• Parental Leave: Paid maternity and paternity leave to support new parents
• Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses
• Retirement Plan: 401(k) plan with company match
• Stock Options: Equity options to give employees a stake in the company’s success
• Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage
• Pet Insurance: Discounted pet insurance options including 24/7 Telehealth helpline
• Additional Perks: Free lunch benefit and unlimited free drinks and snacks in the office

Saronic CCAA Notice for Candidates and California Employees

If this role is based in the United States, it requires access to export-controlled information or items that require “U.S. Person” status. As defined by U.S. law, individuals who are any one of the following are considered to be a “U.S. Person”: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3).

Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits. We are also committed to providing reasonable accommodations for qualified individuals with disabilities.