Senior Network Security Engineer

Jobtailor; Mechanicsville (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

VDOT is seeking a senior Network and Security Engineer to implement and support the agency's IT network, cloud, and security infrastructure in Mechanicsville, Virginia. You will monitor security events, coordinate incident response, and help maintain security standards across a highly regulated environment.

The role requires extensive experience in enterprise networking, Azure, and vulnerability management, with hands-on work on SIEM tools and incident investigations.

Qualifications

• 8+ years of experience in Enterprise Networking.
• 5+ years in Enterprise Security.
• 3+ years in Azure Networking.
• 3+ years in WAF/NGFW.
• 3+ years managing 300+ network devices.
• Experience with incident response, investigations, log analysis, threat intel, and security monitoring.
• Experience with SIEM products (e.g., Splunk, Microsoft Sentinel).
• Experience in vulnerability management and scanning tools (Nessus, Tenable).
• Experience with Active Directory, MFA, CA, and certificate management.
• Knowledge of SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust.
• Experience with Cisco ISE, NAC, 802.1X, RADIUS, TACACS.
• Experience with Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, GlobalProtect, F5 BIG-IP.

Responsibilities

• Implements and supports VDOT’s IT network, cloud, and computing infrastructure.
• Performs daily activities related to securing VDOT's infrastructure.
• Monitors security events using SIEM technologies and coordinates incident response activities.
• Develops and maintains network security standards and operational documentation.
• Responsible for conducting proactive threat hunting and anomaly detection.
• Leads investigation and containment of network security incidents.

Skills

Enterprise Networking

Enterprise Security

Azure Networking

WAF/NGFW

Incident Response

SIEM Technologies

Vulnerability Management

Active Directory

MFA

Conditional Access

Zero Trust

NIST CSF

NIST 800-53

Cisco ISE

Palo Alto

Azure WAF

Cisco VPN

Global Protect

F5 BIG-IP

Tools

SIEM Tools

Nessus

Tenable

Cisco ISE

Palo Alto

F5 Distributed Cloud

Azure WAF

Cisco VPN

Global Protect

F5 BIG-IP

Job description

• Implements and supports VDOT’s IT network, cloud, and computing infrastructure
• Performs daily activities related to securing VDOT's infrastructure
• Monitors security events using SIEM technologies and coordinates incident response activities
• Develops and maintains network security standards and operational documentation
• Responsible for conducting proactive threat hunting and anomaly detection
• Leads investigation and containment of network security incidents

Requirements

• 8 Years of experience in Enterprise Networking
• 5 Years of experience in Enterprise Security
• 3 Years of experience in Azure Networking
• 3 Years of experience in WAF/NGFW
• 3 Years of experience supporting environments with 300+ Network Devices
• Experience with Incident response, Security investigations, Log analysis, Threat intelligence, and Security monitor
• Experience with SIEM products (e.g. Splunk, Microsoft Sentinel)
• Experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable)
• Experience in Active Directory, MFA, Conditional Access, and Certificates
• Knowledge of SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles
• Experience with Cisco ISE, NAC, 802.1X, RADIUS, TACACS
• Experience with Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP
• Experience working in highly regulated environments and leading technical troubleshooting during outages
• Ability to communicate technical issues to technical and executive audiences and mentor junior engineers
• Certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700)

Core Competencies

Demonstrates extensive experience in Enterprise Networking and Security, with a strong focus on Azure Networking and vulnerability management. Proficient in incident response, security monitoring, and the implementation of security standards in highly regulated environments.

Highest-signal resume keywords

• Enterprise Networking
• Enterprise Security
• Azure Networking
• Incident Response
• SIEM Technologies

ATS Optimization Keywords

Hard Skills

• Threat Hunting
• Anomaly Detection
• Log Analysis
• Vulnerability Management
• Network Security Standards
• Security InvestigationsSecurity Monitoring
• Active Directory
• MFA
• Conditional Access

Soft Skills

• Technical Communication
• Mentoring

Certifications & Qualifications

• Azure Security Engineer (AZ-500)
• Azure Network Engineer (AZ-700)

Industry Keywords

• SEC530
• CIS Benchmarks
• NIST CSF
• NIST 800-53
• Zero Trust Principles
• 300+ Network Devices
• Regulated Environments

Tools & Technologies

• SIEM Products
• Nessus
• Tenable
• Cisco ISE
• Palo Alto
• F5 Distributed Cloud
• Azure WAF
• Cisco VPN
• Global Protect
• F5 BIG-IP