Senior Security Engineer - Network Security

Relativity; Illinois; Hybrid; USD 130,000 - 195,000; Full time

Job summary

Relativity is seeking a Senior Security Engineer focused on Network Security to lead the design, deployment, and optimization of security controls across on‑prem, cloud, and hybrid environments. You will build detections and drive rapid investigations for anomalous activity, while advancing automation and telemetry integration.

The role emphasizes cross‑functional collaboration, mentorship, and hands‑on leadership in security operations, with a strong focus on reducing attack surfaces and

Qualifications

• 4-8 years of hands-on enterprise security engineering experience with a focus on network security.
• Demonstrated expertise in threat hunting, forensics, and detection engineering; scripting knowledge preferred.
• Strong knowledge of MITRE, NIST, and related frameworks; ability to translate findings for technical and non-technical audiences.
• Experience integrating security controls across on-prem, cloud and hybrid environments.

Responsibilities

• Lead design, deployment, and optimization of network security controls across on-prem, cloud, and hybrid environments.
• Develop detections and investigations for C2, lateral movement, and data exfiltration.
• Automate network security configurations using code, APIs, and IaC practices.
• Collaborate with Infrastructure, Cloud, and Engineering teams on secure connectivity and remediation.
• Lead security initiatives end-to-end and mentor junior engineers.

Skills

Access Management

Application Security

Endpoint Security

Network Security

Penetration Testing

Security Architecture

Security Operations

SIEM

Vulnerability Management

Education

Bachelor’s in Computer Science or Information Security, or equivalent experience

Job description

Posting Type Hybrid/Remote Job Overview The Senior Security Engineer, Network Security, is a technically deep, hands-on practitioner who elevates the enterprise security function through technical project leadership, cross-functional collaboration, and mentorship. Operating within a layered defense-in-depth program, this engineer takes ownership of complex security technology initiatives spanning design, deployment, and optimization of AI-enabled security technologies at all layers. With a focus on advancing automated orchestration of security operations, detection and response capabilities, and hardening rigor, this role serves as a technical escalation point and force multiplier for the security engineering team. The Senior Security Engineer works closely with the Senior Manager of Enterprise Security, and cross-functional engineering teams to reduce the organization’s attack surface, enable threat landscape adaptability, and improve detection and response times across Relativity’s technical ecosystem. This role will have a primary focus on network security engineering, including the design, deployment, and optimization of controls across on-premises, cloud, and hybrid network environments. The engineer will strengthen segmentation, secure access, traffic visibility, threat detection, and network resilience by integrating network security technologies, automation, and telemetry into the broader defense-in-depth and security operations ecosystem.

Job Description and Requirements

Network Security Engineering

• Lead the design, deployment, configuration, and optimization of network security controls across on-premises, cloud, and hybrid environments.
• Engineer and maintain capabilities such as firewalls, network detection and response, secure web gateways, DNS security, SASE/SSE, VPN or ZTNA, adaptive access policies, and cloud-native network security controls.
• Design and validate network segmentation and access-control patterns that reduce attack paths and limit lateral movement.
• Integrate network telemetry, including flow, DNS, proxy, firewall, and packet-derived data, into SIEM, analytics, and automated response workflows.
• Develop detections and conduct investigations for command-and-control activity, lateral movement, anomalous traffic, unauthorized access, and data exfiltration.
• Automate network security configuration, validation, and response through APIs, scripting, infrastructure as code, and policy-as-code practices.
• Partner with Infrastructure, Cloud, and Engineering teams on secure connectivity, architecture reviews, control implementation, and remediation.
• Define and monitor network-security measures such as control coverage, telemetry health, segmentation effectiveness, detection efficacy, and remediation performance.

Layered Defense / Defense in Depth

• Lead the design, deployment and optimization security controls spanning perimeter, network, host, application, identity and data layers, ensuring and maintaining effectiveness of controls at each layer.
• Contribute to and enforce security control standards and design patterns aligned to industry-recognized frameworks, serving as a subject matter expert during implementation and review.
• Validate that telemetry from each layer feeds the central analytics platforms and supports 360-degree visibility and appropriate attack surface coverage.
• Continuously assess effectiveness of enterprise security controls as the ecosystem expands and the threat landscape evolves; propose and implement supplemental or extended coverage.
• Proactively partner with IT, Engineering and other stakeholders to embed security controls natively, serving as a technical lead on cross-functional initiatives.
• Provide technical recommendations on security control design aligned to vulnerabilities, risks, issues, and events; support lead-level decisions with well-documented analysis.
• Lead purple-team exercises and control-efficacy testing to verify depth and resilience under attack conditions.
• Ensure redundant, complementary security capabilities to prevent bypasses and ensure failure redundancy through all security layers.

Threat Hunting

• Lead structured threat hunting engagements and purple team exercises in partnership with the Purple Team, analyzing security telemetry to surface anomalous and malicious behavior and communicating findings to relevant stakeholders.
• Develop, execute and document structured hunts mapped to MITRE ATT&CK and ATLAS techniques and current threat intelligence.
• Perform exposure analysis on identified vulnerabilities, zero-day, alert telemetry, threat intelligence feeds and notifications from partners and customers and conclude on exploitability risk and/or exposure.
• Maintain awareness of the evolving threat landscape, adversary TTP’s, and emerging vulnerabilities and their relevance to Relativity’s technical ecosystem and organizational trajectory.
• Standardize and document hunt methodology, hypotheses, and outcomes; contribute to the maturation of the threat hunting program in partnership with the Purple Team.
• Convert successful hunts, exposure analysis, purple team findings and alerts into durable, automated detections and containment logic and improved coverage.

AI-Enabled Security Operations

• Build and maintain SOAR workflows that automate enrichment, triage, containment, and routine response actions; contribute to the broader automation roadmap.
• Measure and continuously improve the impact of automation on time-based detection, containment and response times to reduce threat actor dwell time.
• Identify, evaluate and operationalize AI/ML capabilities for semantic anomaly detection, behavioral analytics, alert triage, and prioritization; provide recommendations to stakeholders on platform and tooling decisions.

Data Security

• Implement and manage data classification, discovery, and data security posture management across cloud and on-premises stores.
• Deploy and tune data loss prevention controls across endpoints, network, email, cloud and SaaS surfaces.
• Investigate data key risk indicators associated with data access, exfiltration, and integrating data telemetry into central analytics (SIEM).

Leadership & Mentorship

• Serve as a technical mentor and day-to-day escalation point for junior and mid-level security engineers, providing guidance on technical approach, tooling, and professional development.
• Lead technical design and implementation efforts for assigned security initiatives, producing clear documentation, runbooks, and knowledge artifacts for the broader team.
• Participate in hiring processes including technical interviews and candidate assessments.
• Represent the security engineering team in cross-functional technical discussions, translating security requirements and findings clearly for both engineering peers and non-technical stakeholders.

Minimum qualifications

• 4-8 years of hands-on experience in enterprise security engineering, with a focus on network security.
• Hands-on experience with common security tools such as EDR, XDR, SIEM, CNAPP, CSPM, CWP, etc. and strong knowledge of applicable security technologies at all layers of the OSI model.
• Demonstrated experience in threat hunting, digital forensics, and/or detection engineering experience, including writing automation scripts and rules for security enforcement and observability.
• Solid knowledge of industry standard common security benchmarks and frameworks (e.g., MITRE, NIST, etc.)
• Demonstrated expertise in at least one scripting/automation language (Python, Bash, or PowerShell) applied to modern containerized services, CLI based commands, and/or security specific use cases.
• Demonstrated experience owning and driving complex security initiatives end-to-end, including cross-functional coordination, stakeholder communication, and delivery of technical outcomes.
• Ability to communicate technical findings clearly to both engineering peers and non-technical stakeholders.
• Relevant certification such as Network+, CCSA, ITS-NS, CCT, FCF, PCCET, or equivalent.
• Prior experience mentoring or providing technical guidance to junior engineers.

Preferred qualifications

• Bachelor’s in Computer Science, Information Security, or equivalent experience.
• Experience with AI-enabled SecOps (e.g., detection: UEBA, ML-based alert prioritization, or AI-assisted threat hunting workflows)
• Working knowledge of common cloud environments such as AWS, Azure or GCP.
• Experience contributing endpoint or network security controls to CI/CD pipelines and infrastructure-as-code environments.
• Experience supporting compliance and audit requirements (SOC 2, ISO 27001, HIPAA) from a technical control perspective.

Relativity is committed to competitive, fair, and equitable compensation practices. This position is eligible for total compensation which includes a competitive base salary, an annual performance bonus, and long-term incentives. The expected salary range for this role is between following values: $130,000 and $195,000 The final offered salary will be based on several factors, including but not limited to the candidate's depth of experience, skill set, qualifications, and internal pay equity. Hiring at the top end of the range would not be typical, to allow for future meaningful salary growth in this position.

Required Skills: Access Management, Application Security, Endpoint Security, Network Security, Penetration Testing, Security Architecture Design, Security Information, Security Information and Event Management (SIEM), Security Operations, Vulnerability Management

We’re solving big data challenges in the legal tech industry, and we’re always looking for more people to join us on the journey. At Relativity, you’ll learn cross-functional skills to grow your career and have the chance to make a big impact on our customers, our industry, and our communities. We admire and value our employees, so it’s no surprise that our hiring process is designed to help us really get to know you – and for you to get to know us, too.