Senior Security Engineer - Network Security

Relativity ODA LLC; Illinois; Hybrid; USD 140,000 - 200,000; Full time

Job summary

Relativity ODA LLC is seeking a Senior Security Engineer focused on Network Security to drive design, deployment, and optimization of security controls across on‑prem, cloud, and hybrid environments. You will lead threat hunting efforts, integrate telemetry into analytics platforms, and advance automated response capabilities.

You will collaborate with IT, Eng, and Security teams to reduce the attack surface, strengthen segmentation, and improve detection and response times across Relativity's

Qualifications

• Strong expertise in network security design, deployment, and optimization across on‑prem and cloud environments.
• Experience leading threat hunting engagements and purple team exercises with documented outcomes.
• Fluency in automation of configurations, detections, and responses using APIs, IaC, and policy‑as‑code.

Responsibilities

• Lead design, deployment, and optimization of network security controls across mixed environments.
• Engineer and maintain firewalls, network detection/response, and secure access technologies.
• Develop detections for command‑and‑control, lateral movement, and data exfiltration; automate responses.

Skills

Network security

Threat hunting

Automation

Cross-functional collaboration

Tools

SIEM

EDR

VPN

Job description

Posting Type

Hybrid/Remote

Job Overview

The Senior Security Engineer, Network Security, is a technically deep, hands‑on practitioner who elevates the enterprise security function through technical project leadership, cross‑functional collaboration, and mentorship. Operating within a layered defense‑in‑depth program, this engineer takes ownership of complex security technology initiatives spanning design, deployment, and optimization of AI‑enabled security technologies at all layers. With a focus on advancing automated orchestration of security operations, detection and response capabilities, and hardening rigor, this role serves as a technical escalation point and force multiplier for the security engineering team. The Senior Security Engineer works closely with the Senior Manager of Enterprise Security, and cross‑functional engineering teams to reduce the organization's attack surface, enable threat landscape adaptability, and improve detection and response times across Relativity's technical ecosystem.

This role will have a primary focus on network security engineering, including the design, deployment, and optimization of controls across on‑premises, cloud, and hybrid network environments. The engineer will strengthen segmentation, secure access, traffic visibility, threat detection, and network resilience by integrating network security technologies, automation, and telemetry into the broader defense‑in‑depth and security operations ecosystem.

Job Description and Requirements

Network Security Engineering

• Lead the design, deployment, configuration, and optimization of network security controls across on‑premises, cloud, and hybrid environments.
• Engineer and maintain capabilities such as firewalls, network detection and response, secure web gateways, DNS security, SASE/SSE, VPN or ZTNA, adaptive access policies, and cloud‑native network security controls.
• Design and validate network segmentation and access‑control patterns that reduce attack paths and limit lateral movement.
• Integrate network telemetry, including flow, DNS, proxy, firewall, and packet‑derived data, into SIEM, analytics, and automated response workflows.
• Develop detections and conduct investigations for command‑and‑control activity, lateral movement, anomalous traffic, unauthorized access, and data exfiltration.
• Automate network security configuration, validation, and response through APIs, scripting, infrastructure as code, and policy‑as‑code practices.
• Partner with Infrastructure, Cloud, and Engineering teams on secure connectivity, architecture reviews, control implementation, and remediation.
• Define and monitor network‑security measures such as control coverage, telemetry health, segmentation effectiveness, detection efficacy, and remediation performance.

Layered Defense/Defense in Depth

• Lead the design, deployment and optimization security controls spanning perimeter, network, host, application, identity and data layers, ensuring and maintaining effectiveness of controls at each.
• Contribute to and enforce security control standards and design patterns aligned to industry‑recognized frameworks, serving as a subject matter expert during implementation and review.
• Validate that telemetry from each layer feeds the central analytics platforms and supports 360‑degree visibility and appropriate attack surface coverage.
• Continuously assess effectiveness of enterprise security controls as the ecosystem expands and the threat landscape evolves; propose and implement supplemental or extended coverage.
• Proactively partner with IT, Engineering and other stakeholders to embed security controls natively, serving as a technical lead on cross‑functional initiatives.
• Provide technical recommendations on security control design aligned to vulnerabilities, risks, issues, and events; support lead‑level decisions with well‑documented analysis.
• Lead purple‑team exercises and control‑efficacy testing to verify depth and resilience under attack conditions.
• Ensure redundant, complementary security capabilities to prevent bypasses and ensure failure redundancy through all security layers.

Threat Hunting

• Lead structured threat hunting engagements and purple team exercises in partnership with the Purple Team, analyzing security telemetry to surface anomalous and malicious behavior and communicating findings to relevant stakeholders.
• Develop, execute and document structured hunts mapped to MITRE ATT&CK and ATLAS techniques and current threat intelligence.
• Perform exposure analysis on identified vulnerabilities, zero‑day, alert telemetry, threat intelligence feeds and notifications from partners and customers and conclude on exploitability risk and/or exposure.
• Maintain awareness of the evolving threat landscape, adversary TTP's, and emerging vulnerabilities and their relevance to Relativity's technical ecosystem and organizational trajectory.
• Standardize and document hunt methodology, hypotheses, and outcomes; contribute to the maturation of the threat hu