Senior Network Security Engineer

Penumbra, Inc.; Berkeley (CA); On-site; USD 146,000 - 220,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Life and AD&D insurance

401(k) with employer match

Paid parental leave

Holidays and vacation

Paid sick time

Job summary

Penumbra, Inc. in Alameda, CA, seeks a Senior Network Security Engineer to join the Information Security and Compliance team.

This hands-on role focuses on securing on‑premises and cloud environments, designing secure systems, and driving security across IT, manufacturing, and engineering projects. The ideal candidate has 10+ years in security design and implementation, strong cloud and network tool experience, and excellent communication skills.

Qualifications

• Bachelor’s degree in computer science or related field; 10+ years of related experience.
• Master’s degree preferred in Computer Science or Engineering with emphasis in Computer Security or related field.
• Highly analytical and results- and process-oriented mindset.
• 10+ years of hands-on design, enforcement and testing/validation of security in a large enterprise.
• 5+ years of hands-on security experience with cloud platforms (Azure, AWS or GCP) and IaC.
• 5+ years of hands-on security experience with network security technologies (e.g., Palo Alto Firewalls, Cisco ISE, IPS, CASB, VPN management, SAML/OIDC NAC 802.1X, SIEM, SOAR, Radius/TACACS+).
• Proficient with network topologies (OSPF, BGP, ISIS, SDN) and tunneling.
• Proficient in threat modeling and risk-based control implementation.
• Understanding of security frameworks, SDLC in a hybrid environment; strong integrity and communication skills.

Responsibilities

• Ensure network security of on‑premises and cloud-based systems and services.
• Enforce secure design standards for services, systems, and products.
• Design and implement network security solutions and controls across the environment.
• Perform security assessments, configuration verification, and reporting to validate control effectiveness.
• Lead security audits and communicate results with stakeholders to improve risk posture.
• Collaborate with cross-functional teams to integrate security into systems and processes.
• Develop roadmaps, standards, and documentation; serve as SME for network security.
• Lead incident response activities for security incidents when appropriate.
• Maintain documentation and train staff on security procedures.

Skills

Network security

Cloud platforms

Palo Alto Firewalls

Cisco ISE

SIEM/SOAR

VPN management

Threat modeling

Security architecture

SDLC in hybrid env

Security design

Education

Bachelor's degree in CS or related field

Master's degree in CS/Engineering (security emphasis)

Tools

Azure

AWS

GCP

PowerPoint

Job description

As a Senior Network Security Engineer at Penumbra, you will play a critical role in determining the company's long term goals. You will be a key member of the Information Security and Compliance team. This is a highly technical, hands‑on role. The Sr. Network Engineer will collaborate with Security, IT, Manufacturing, and Engineering teams and be responsible for engineering solutions and supporting operational activities across a hybrid cloud environment. The role responsibilities include ensuring compliance with legal and regulatory requirements and maintaining company security policies, standards, and industry’s best practices.

What You’ll Work On

• Ensure the network security of on-premises and cloud-based systems, networks, infrastructure, and services.
• Enforce secure design standards and specifications for services, systems, and products.
• Responsible for network security solutions, control designs, and enforcement across our environment.
• Design and perform security assessments, configuration verification, configuration reporting, and other activities to validate control effectiveness.
• Engage and share results of security audits with the Information Security and business partners to promote changes vital to improve risk posture.
• Collaborate with cross‑functional teams to develop and implement security measures supporting on-prem and cloud systems.
• Develop roadmaps, standards, and documentation for technical solutions and existing configurations. Serve as the subject matter expert across the network security environment.
• Respond to and lead, as appropriate, incident response activities for security incidents.
• Collaborate with IT and line of business teams to integrate security into new and existing systems, processes, and initiatives.
• Manage and configure security services, e.g., firewalls, intrusion detection/prevention systems, threat prevention technologies, VPNs, and other network security appliances.
• Create and maintain documentation for security procedures, designs, and protocols, conduct security training and awareness for staff as appropriate to the role.
• Stay current with emerging security threats and technologies in the security landscape. Ensure compliance with regulatory requirements and industry standards in the Company’s environment.

What You Contribute

• A Bachelor’s degree in computer science or related field with 10+ years of related experience, or equivalent combination of education and experience.
• Master’s degree preferred in Computer Science or Engineering with an emphasis in Computer Security or a related field
• Highly analytical and results and process-oriented mindset strongly desired
• 10+ years of hands‑on design, enforcement and testing/validation of offensive security, defensive security, systems, and solutions engineering in a large enterprise
• 5+ years of hands‑on security experience with cloud platforms, i.e., Azure, AWS or Google Cloud Platform services, automation, or IaC
• 5+ years of hands‑on experience network security experience and expert-level knowledge on security technologies such as Palo Alto Firewalls, Cisco ISE, IPS, CASB, VPN management, SAML/OIDC NAC 802.1X, SIEM, SOAR, Radius/TACACS+, directory services
• Proficient with network topologies, routing protocols, i.e., OSPF, BGP, ISIS, SDN, and tunneling technologies.
• Proficient with diagramming and threat models, ability and competency to design and implement controls at scale based on risks
• Proficient in conducting solutions architecture, security design reviews, passionate about security and privacy research, technologies, and methods.
• Possess an understanding of past and emerging security exploits, threat actor motivations, and trends
• Understanding security and compliance frameworks, security engineering, software delivery, and SDLC in a hybrid environment
• Outstanding ethical standards and integrity.
• Excellent communicator with strong oral, written, and interpersonal communication skills
• High degree of accuracy and attention to detail
• Proficiency with Microsoft Word, Excel, Visio, and PowerPoint
• Excellent organizational skills with the ability to prioritize assignments while handling various projects simultaneously.

Working Conditions

General office environment.Willingness and ability to work on site. May have business travel up to 10%. Requires some lifting and moving of up to 10 pounds Must be able to move between buildings and floors. Must be able to remain stationary and use a computer or other standard office equipment, such as a printer or copy machine, for an extensive period of time each day. Must be able to read, prepare emails, and produce documents and spreadsheets. Must be able to move within the office and access file cabinets or supplies, as needed.Must be able to communicate and exchange accurate information with employees at all levels on a daily basis.

Annual Base Salary Range: $146,000 - $220,000/ year

We offer a competitive compensation package plus a benefits and equity program, when applicable.

Individual total compensation will vary based on factors such as qualifications, skill level, competencies, and work location.

What We Offer

• A collaborative teamwork environment where learning is constant, and performance is rewarded.
• The opportunity to be part of the team that is revolutionizing the treatment of some of the world's most devastating diseases.
• A generous benefits package for eligible employees that includes medical, dental, vision, life, AD&D, short and long-term disability insurance, 401(k) with employer match, paid parental leave, eleven paid company holidays per year, a minimum of fifteen days of accrued vacation per year, which increases with tenure, and paid sick time in compliance with applicable law(s).

Penumbra, Inc., headquartered in Alameda, California, is a global healthcare company focused on innovative therapies. Penumbra designs, develops, manufactures, and markets novel products and has a broad portfolio that addresses challenging medical conditions in markets with significant unmet need. Penumbra sells its products to hospitals and healthcare providers primarily through its direct sales organization in the United States, most of Europe, Canada, and Australia, and through distributors in select international markets. The Penumbra logo is a trademark of Penumbra, Inc.

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, age, disability, military or veteran status, or any other characteristic protected by federal, state, or local laws.

If you reside in the State of California, please also refer to Penumbra's Privacy Notice for California Residents.

For additional information on Penumbra’s commitment to being an equal opportunity employer, please see Penumbra's AAP Policy Statement.