Senior NexGen Firewall & Threat Prevention Engineer

Socket.dev; Boston (MA); On-site; USD 110,000 - 315,000; Full time

Job summary

Arrowstreet Capital in Boston is seeking a hands-on Network Security Engineer to own NexGen firewall operations, policy management, and secure remote access. You will tune threat profiles, monitor logs, and drive ongoing improvements across our security posture.

Collaborating with infrastructure, cloud, identity, and application teams, you will implement AI-powered insights in our SIEM, perform packet captures, and participate in change management and incident response.

Qualifications

• Five or more years of hands-on experience in network security, firewall administration, security operations engineering, network engineering, or a closely related technical role.
• Strong working knowledge of NexGen firewall technologies, including next-generation firewalls, management portals, NexGen VPN, L7 application, User based ID's, security profiles, and logging.
• Solid understanding of networking fundamentals, including TCP/IP, subnetting, routing, switching, DNS, DHCP, NAT, VPN, TLS, HTTP/S, and common enterprise network architectures.
• Experience implementing and troubleshooting firewall policies, traffic flows, application identification, URL filtering, threat prevention, decryption, and remote access controls.

Responsibilities

• Administer, maintain, and improve NexGen firewall infrastructure, including policy rules, NAT, security profiles, zones, interfaces, objects, and routing configurations.
• Manage management portal configuration, templates, device groups, policy pushes, configuration backups, and rule-base hygiene across the environment.
• Configure and tune threat prevention, antivirus, anti-spyware, vulnerability protection, URL filtering, DNS security, sandboxing, decryption, and logging profiles.
• Support remote connectivity operations, including authentication flows, client connectivity, portal and gateway configuration, troubleshooting, and user-impacting incidents.
• Leverage advanced AI modeling within our SIEM platform to monitor firewall logs, traffic patterns, system health, policy hits, blocked activity, and IPS security events.
• Troubleshoot network security issues across Layer 3 through Layer 7, including routing, NAT, VPN, application identification, SSL decryption, and policy-matching behavior.
• Perform packet captures, traffic analysis, and root-cause investigations using vendor tools, CLI diagnostics, logging platforms, and network troubleshooting utilities.

Skills

NexGen firewalls

Network security

Documentation

Communication

Incident response

After-hours support

AI concepts

Cloud security experience

Education

PCNSA/PCNSE certification

Tools

Palo Alto Networks

Check Point

Fortinet

VPN technologies

SIEM integrations

Job description

Arrowstreet Capital in Boston is seeking a hands-on Network Security Engineer to own NexGen firewall operations, policy management, and secure remote access. You will tune threat profiles, monitor logs, and drive ongoing improvements across our security posture.

Collaborating with infrastructure, cloud, identity, and application teams, you will implement AI-powered insights in our SIEM, perform packet captures, and participate in change management and incident response.