Staff Network Security Engineer

Jobtailor; Seattle (WA); On-site; USD 140,000 - 190,000; Full time

Job summary

Jobtailor in Seattle is seeking a senior network security engineer to define and enforce security architecture across our networking stack. You will lead security initiatives and mentor engineers while shaping secure-by-design practices.

The role demands hands-on experience with BGP/MPLS, DDoS mitigation, and security automation using IaC, with strong scripting skills and a proven ability to collaborate with cross-functional teams.

Qualifications

• 8-10 years of experience in network security engineering or related roles.
• Ability to communicate with technical and non-technical stakeholders.
• Deep understanding of Layer 2/3/4 networking and security implications.
• Experience with DDoS mitigation and secure network design.
• Proven leadership on cross-functional projects.
• Scripting in Python or Go.

Responsibilities

• Define and enforce network security architecture standards and principles.
• Provide technical leadership to security and network engineering teams.
• Lead network security assessments, including threat modeling and intrusion detection.
• Develop and deploy security automation and IaC tooling.
• Collaborate with network engineers to secure SDN, BGP/MPLS.
• Participate in incident response for network security incidents.
• Drive security reviews for network infrastructure or product changes.
• Promote security best practices via documentation, tooling, and collaboration.

Skills

Network security

Threat modeling

Python/Go scripting

Linux

Incident response

BGP

OSPF/IS-IS

Education

Tools

Corero

Cloudflare

Juniper

Arista

Ciena

Prometheus

Grafana

ELK stack

Git workflows

Job description

Responsibilities

• Define and enforce network security architecture standards and principles
• Provide technical leadership and mentorship to security and network engineering teams
• Lead network security assessments, including threat modeling and intrusion detection
• Develop and deploy advanced security automation, tooling, and infrastructure-as-code
• Collaborate with network engineers to integrate security controls within SDN, BGP/MPLS
• Participate in incident response efforts related to network security incidents
• Drive the security review process for all network infrastructure or product changes
• Promote security best practices through documentation, tooling, and collaboration

Requirements

• 8-10 years of experience in network security engineering, network penetration testing, or security-focused infrastructure roles
• Excellent communication skills to effectively collaborate with both technical and non-technical stakeholders
• Deep understanding of Layer 2/3/4 networking protocols (BGP, OSPF, IS-IS, VRRP, LACP) and their security implications
• Deep understanding of distributed denial-of-service (DDoS) attack vectors and mitigation strategies
• Extensive experience in designing and building secure networks from the ground up
• Experience leading projects and providing technical guidance to cross-functional teams
• Proficiency in scripting/programming languages such as Python or Go
• Familiarity with Corero, Cloudflare, Juniper, Arista, or Ciena network platforms
• Strong Linux experience and familiarity with firewall, routing, and DNS security
• Understanding and experience with Network Intrusion Detection principles and tooling
• Knowledge of MPLS, BGP-LU, and SDN architectures from a security perspective
• Hands‑on experience with observability tools like Prometheus, Grafana, and ELK stack
• Comfortable with Git-based workflows and collaborative development