Senior Network Security Engineer

Point72; New York (NY); On-site; USD 110,000 - 170,000; Full time

Job summary

An established industry player is seeking a Senior Network Security Engineer to lead the charge in enhancing their network security infrastructure. This pivotal role involves architecting advanced security solutions, managing complex configurations, and ensuring compliance with regulatory standards. You will collaborate with IT teams to secure cloud integrations and conduct risk assessments, all while fostering a security-first culture within the organization. If you're a proactive professional with a passion for network security and a commitment to excellence, this opportunity is tailored for you.

Qualifications

• 7+ years of experience in network security with advanced technical skills.
• Expertise in network security tools like Palo Alto Networks and SASE solutions.

Responsibilities

• Lead engineer for network security solutions including NDR and DDoS protection.
• Ensure compliance with PCI DSS, HIPAA, and GDPR standards.

Skills

Network Security

Palo Alto Networks

Cloud Security

SASE

DDoS Protection

Compliance (PCI DSS, HIPAA, GDPR)

Risk Assessment

Communication Skills

Tools

Palo Alto Firewalls

Prisma Access

Darktrace

ExtraHop

zScaler

NetSkope

Job description

Join to apply for the Senior Network Security Engineer role at Point72.

A Career with Point72’s Technology Team

As Point72 reimagines the future of investing, our Technology group is constantly improving our company’s IT infrastructure, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts experimenting, discovering new ways to harness the power of open-source solutions, and embracing enterprise agile methodology. We encourage professional development to ensure you bring innovative ideas to our products while satisfying your own intellectual curiosity.

The mission of our Information Security team is to ensure the development, implementation, and management of a comprehensive program that effectively protects the confidentiality, integrity, and availability of Point72 information assets. Our team is comprised of security professionals with expertise in a diverse portfolio of security disciplines.

What you’ll do

• Serve as the lead engineer and architect for a range of network security solutions, including NDR (Network Detection and Response), NAC (Network Access Control), Always-On DDoS Protection, Web Application Firewalls (WAF), Network Firewalls (Palo Alto Networks), SASE/VPN, Web Browser Isolation, Zero Trust (ZTNA)/Network Segmentation, and related platforms. This includes leading the deployment and ensuring the success of both new and ongoing initiatives.
• Manage advanced configurations and the global architecture of Palo Alto Firewalls and Prisma Access SASE solutions to enhance secure remote access.
• Collaborate with IT teams to ensure secure integration of cloud platforms such as AWS, Azure, and GCP, implementing network security controls such as access controls, encryption, and segmentation.
• Ensure compliance with regulatory standards, including PCI DSS, HIPAA, and GDPR, by implementing policies, conducting audits, and working closely with GRC teams.
• Perform regular risk assessments of network infrastructure, including penetration testing and vulnerability management, and recommend remediation strategies in collaboration with respective teams.
• Provide training on network security best practices to staff, including developing materials and conducting workshops to build a security-first culture across the organization.

What’s Required

We are looking for a highly technical, proactive and action-oriented candidate with extensive expertise in networking and security. In addition to advanced technical skills, the right candidate must also have the ability to collaborate with various engineering and application development teams to align on security requirements, influence decision-making, build relationships, and communicate strategy effectively while protecting the company’s critical assets.

• Minimum of 7 years of experience in network security
• Expertise in network security tools and technologies, including firewalls (Palo Alto Networks, IDS/IPS, WAF, NDR, SASE, DDoS Protection).
• Demonstrated experience with Secure Access Service Edge (SASE) and Cloud Access Security Broker (CASB) solutions such as Prisma Access, zScaler, or NetSkope.
• Advanced knowledge of network detection and response (NDR) platforms such as Darktrace, ExtraHop, or Vectra, including deployment and management best practices.
• Strong understanding of cloud networking, including AWS, Azure, or GCP environments, and their associated security controls.
• Excellent communication and analytical skills, with the ability to convey complex technical concepts to diverse audiences.
• Commitment to the highest ethical standards.