Network Security Engineer II

The GN&T Network Security team is looking for a highly motivated and experienced Cybersecurity Engineer to join the Network Security Defense team. The Defense teams are responsible for owning the security lifecycle and effectiveness across the Core, Edge, and Access networks, as well as all systems and network functions within GN&T.

In this role, you will be critical in advancing our security posture through real-time Threat Monitoring & Detection using SIEM tools like Splunk, leading Incident Response efforts during a breach, and managing the continuous Vulnerability Management lifecycle across networks and applications. The position also requires expertise in defining and implementing robust Security Architecture, including firewalls, encryption, centralized Identity and Access Management, and Multi-Factor Authentication (MFA).

A strong candidate will also possess advanced Threat Hunting skills, including Advanced Networking & Protocol Analysis, Endpoint & Memory Forensics, Data Science & Querying, and demonstrable experience in Automation & Scripting to enhance our Cybersecurity tooling.

- Maintain formal guidelines, policies, and procedures to ensure smooth and error-free operations.

- Support our partners across the Operations, Engineering, and Planning organizations to ensure secure design patterns are embedded into new deployments and major changes.

- Work with lead engineers on strategic technical challenges.

- Communicate clearly and effectively, articulate complex technical concepts to diverse internal and external audiences.

- Support network security incident response activities, including triage, containment, eradication, and recovery for disruptive threats.

- Serve as a support engineer for security-related investigations, providing analysis and input during active incidents.

- Support root cause analysis and produce clear incident reports outlining timeline, impact, evidence, and remediation recommendations.

- Explore proactive threat hunting across the identity, endpoint, and network telemetry to uncover adversary behavior and reduce dwell time.

- Conduct threat detections using SIEM (Security Information and Event Management) to improve alert fidelity and reduce false positives.

- Work on continuous improvement of network visibility and telemetry collection to strengthen detection and response capabilities.

- Perform regular security control assessments, validating configuration effectiveness, and closing gaps discovered during incidents or hunts.

- Bachelor's degree or one or more years of relevant work experience.

- One or more years of relevant work experience, demonstrated through one or a combination of work and/or military experience, or specialized training.

- Knowledge of incident response lifecycles (NIST or SANS) and experience with automation playbooks using SOAR platforms to automate triage and response actions.

- Experience with risk-based alerting, managing notable events, asset/identity correlation, and defining/tuning correlation searches.

- Ability to work both independently and in collaboration with cross-functional teams.

- Security certifications such as CompTIA Security+, CISSP, CCIP, CISM, CCSP, OSCP (Offensive Security Certified Professional), Ethical Hacking (CEH, OSCP).

- Experience with Splunk SPL (Search Processing Language) searches, including macros, data models, and lookups for efficient threat hunting and investigation.

- Experience with Identity and Access Management (IAM) solutions.

- Ability to build consensus and a common understanding of security objectives, goals, and execution steps.

- Experience with network protocols and information security with networking certifications such as PCNSE, CCNP or CCNA.

- Experience with networks, 4G/5G wireless network functions or virtualization technologies like Openstack and Kubernetes.

- Experience with scripting languages like Python and/or automation tools like Ansible.

- Experience in UNIX or Linux systems engineering expertise with a variety of variants.

- Experience with encryption for data in transit (e.g., IPsec, or TLS) and at rest.

- Effective written, interpersonal, and verbal communication skills.

In this hybrid role, you'll have a defined work location that includes working from home and a minimum of three days per week in the office, which will be set by your manager. Employees are responsible for maintaining compliance with hybrid work policies.

The salary will vary depending on your location and confirmed job-related skills and experience. This is an incentive based position with the potential to earn more. For part-time roles, your compensation will be adjusted to reflect your hours.

The annual salary range for the location(s) listed on this job requisition based on a full-time schedule is: $72,000.00 - $129,000.00.