Senior Network Security Engineer: NexGen Firewall Specialist

Arrowstreet Capital, Limited Partnership; Boston (MA); On-site; USD 110,000 - 315,000; Full time

Job summary

Arrowstreet Capital, Limited Partnership is seeking a hands-on Network Security Engineer to administer NexGen firewalls, VPN security policies, and threat prevention in a demanding enterprise environment.

The role focuses on tuning, troubleshooting, and lifecycle management, with collaboration across infrastructure and security teams, plus AI-powered monitoring within SIEM to detect threats and optimize performance. The position requires after-hours support and meticulous documentation.

Qualifications

• Five+ years hands-on experience in network security and firewall administration.
• Extensive knowledge of NexGen firewall technologies and VPN.
• Strong networking fundamentals and incident response experience.
• Experience with change management and documentation.
• Ability to communicate with cross-functional teams.

Responsibilities

• Administer and improve NexGen firewall infrastructure, including policies and NAT.
• Manage policy pushes, backups, and hygiene across the environment.
• Configure threat prevention, URL filtering, DNS security, and logging profiles.
• Support remote connectivity and VPN configuration.
• Leverage AI/ML within SIEM to monitor, detect, and contextualize threats.

Skills

NexGen firewalls

Firewall administration

Network security engineering

Troubleshooting

Security monitoring

AI/AIOps familiarity

VPN security

Education

Bachelor's degree in Computer Science/IT or related

PCNSA/PCNSE or equivalent certifications

Tools

Palo Alto Networks

Checkpoint

Fortinet

SIEM tooling

Job description

Arrowstreet Capital, Limited Partnership is seeking a hands-on Network Security Engineer to administer NexGen firewalls, VPN security policies, and threat prevention in a demanding enterprise environment.

The role focuses on tuning, troubleshooting, and lifecycle management, with collaboration across infrastructure and security teams, plus AI-powered monitoring within SIEM to detect threats and optimize performance. The position requires after-hours support and meticulous documentation.