Senior Network Security Engineer

Penumbra, Inc.; Alameda (CA); On-site; USD 146,000 - 220,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) with match

Paid parental leave

Job summary

Penumbra, Inc. is seeking a Senior Network Security Engineer to secure on-premises and cloud environments across a hybrid setup. You will establish secure design standards, lead security assessments, and drive incidents response in collaboration with IT, Manufacturing and Engineering teams.

The role emphasizes hands-on engineering, policy maintenance, and staying ahead of evolving threats while ensuring regulatory compliance and company security practices.

Qualifications

• Bachelor's degree in computer science or related field; 10+ years of related experience or equivalent.
• Master's degree preferred in Computer Science or Engineering with emphasis in Computer Security or related field.
• Experience designing, enforcing and testing security controls at scale in a large enterprise.
• Hands-on security experience across cloud platforms (Azure, AWS, GCP) and IaC.

Responsibilities

• Ensure network security of on-premises and cloud-based systems and services.
• Design and enforce secure design standards for services, systems and products.
• Lead security assessments, configuration verification and reporting.
• Coordinate with cross-functional teams to implement security measures in hybrid cloud environments.
• Develop roadmaps, standards, and documentation for network security solutions.

Skills

Network security

Incident response

Regulatory compliance

Cross-functional collaboration

Education

Bachelor's degree in computer science or related field

Master's degree preferred in Computer Security/Engineering

Tools

Palo Alto Firewalls

Cisco ISE

SIEM

SOAR

NAC 802.1X

Job description

As a Senior Network Security Engineer at Penumbra, you will play a critical role in determining the company's long term goals. You will be a key member of the Information Security and Compliance team. This is a highly technical, hands‑on role. The Sr. Network Engineer will collaborate with Security, IT, Manufacturing, and Engineering teams and be responsible for engineering solutions and supporting operational activities across a hybrid cloud environment. The role responsibilities include ensuring compliance with legal and regulatory requirements and maintaining company security policies, standards, and industry’s best practices.

What You’ll Work On

• Ensure the network security of on-premises and cloud-based systems, networks, infrastructure, and services.
• Enforce secure design standards and specifications for services, systems, and products.
• Responsible for network security solutions, control designs, and enforcement across our environment.
• Design and perform security assessments, configuration verification, configuration reporting, and other activities to validate control effectiveness.
• Engage and share results of security audits with the Information Security and business partners to promote changes vital to improve risk posture.
• Collaborate with cross‑functional teams to develop and implement security measures supporting on-prem and cloud systems.
• Develop roadmaps, standards, and documentation for technical solutions and existing configurations. Serve as the subject matter expert across the network security environment.
• Respond to and lead, as appropriate, incident response activities for security incidents.
• Collaborate with IT and line of business teams to integrate security into new and existing systems, processes, and initiatives.
• Manage and configure security services, e.g., firewalls, intrusion detection/prevention systems, threat prevention technologies, VPNs, and other network security appliances.
• Create and maintain documentation for security procedures, designs, and protocols, conduct security training and awareness for staff as appropriate to the role.
• Stay current with emerging security threats and technologies in the security landscape. Ensure compliance with regulatory requirements and industry standards in the Company’s environment.

What You Contribute

• A Bachelor’s degree in computer science or related field with 10+ years of related experience, or equivalent combination of education and experience.
• Master’s degree preferred in Computer Science or Engineering with an emphasis in Computer Security or a related field
• Highly analytical and results and process-oriented mindset strongly desired
• 10+ years of hands‑on design, enforcement and testing/validation of offensive security, defensive security, systems, and solutions engineering in a large enterprise
• 5+ years of hands‑on security experience with cloud platforms, i.e., Azure, AWS or Google Cloud Platform services, automation, or IaC
• 5+ years of hands‑on experience network security experience and expert-level knowledge on security technologies such as Palo Alto Firewalls, Cisco ISE, IPS, CASB, VPN management, SAML/OIDC NAC 802.1X, SIEM, SOAR, Radius/TACACS+, directory services
• Proficient with network topologies, routing protocols, i.e., OSPF, BGP, ISIS, SDN, and tunneling technologies.
• Proficient with diagramming and threat models, ability and competency to design and implement controls at scale based on risks
• Proficient in conducting solutions architecture, security design reviews, passionate about security and privacy research, technologies, and methods.
• Possess an understanding of past and emerging security exploits, threat actor motivations, and trends
• Understanding security and compliance frameworks, security engineering, software delivery, and SDLC in a hybrid environment
• Outstanding ethical standards and integrity.
• Excellent communicator with strong oral, written, and interpersonal communication skills
• High degree of accuracy and attention to detail
• Proficiency with Microsoft Word, Excel, Visio, and PowerPoint
• Excellent organizational skills with the ability to prioritize assignments while handling various projects simultaneously.

Working Conditions

General office environment.Willingness and ability to work on site. May have business travel up to 10%. Requires some lifting and moving of up to 10 pounds Must be able to move between buildings and floors. Must be able to remain stationary and use a computer or other standard office equipment, such as a printer or copy machine, for an extensive period of time each day. Must be able to read, prepare emails, and produce documents and spreadsheets. Must be able to move within the office and access file cabinets or supplies, as needed.Must be able to communicate and exchange accurate information with employees at all levels on a daily basis.

Annual Base Salary Range: $146,000 - $220,000/ year

We offer a competitive compensation package plus a benefits and equity program, when applicable.

Individual total compensation will vary based on factors such as qualifications, skill level, competencies, and work location.

What We Offer

• A collaborative teamwork environment where learning is constant, and performance is rewarded.
• The opportunity to be part of the team that is revolutionizing the treatment of some of the world's most devastating diseases.
• A generous benefits package for eligible employees that includes medical, dental, vision, life, AD&D, short and long-term disability insurance, 401(k) with employer match, paid parental leave, eleven paid company holidays per year, a minimum of fifteen days of accrued vacation per year, which increases with tenure, and paid sick time in compliance with applicable law(s).

Penumbra, Inc., headquartered in Alameda, California, is a global healthcare company focused on innovative therapies. Penumbra designs, develops, manufactures, and markets novel products and has a broad portfolio that addresses challenging medical conditions in markets with significant unmet need. Penumbra sells its products to hospitals and healthcare providers primarily through its direct sales organization in the United States, most of Europe, Canada, and Australia, and through distributors in select international markets. The Penumbra logo is a trademark of Penumbra, Inc.

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, age, disability, military or veteran status, or any other characteristic protected by federal, state, or local laws.

If you reside in the State of California, please also refer to Penumbra's Privacy Notice for California Residents.

For additional information on Penumbra’s commitment to being an equal opportunity employer, please see Penumbra's AAP Policy Statement.