Information Security Engineer, Network Security Engineering

JLL • Houston, TX

4d • $154,000 - $161,000 • Remote

About The Position

This hands-on, highly technical role is responsible for securing JLL’s global network infrastructure. The Information Security Engineer brings a security-first mindset and deep expertise in Palo Alto Networks technologies, alongside broad knowledge of API security, WAF/CDN platforms, and troubleshooting across network and application layers. The role collaborates with global engineering, application, and security teams to ensure security controls are intelligence-driven, optimized, and aligned with industry best practices.

The position owns and maintains network security technologies and supports global firewall policy deployment, security telemetry, and reporting. It also leads API security efforts, complex incident troubleshooting, security architecture improvements, and communication of technical findings to engineering teams and executive stakeholders. The role is remote in Houston, Texas, and does not provide visa sponsorship.

Requirements

• At least 5 years of hands-on network security engineering experience designing and implementing enterprise-scale security solutions.
• Expert-level proficiency with Palo Alto Networks NGFWs, Panorama policy management, and PAN-OS.
• Expert troubleshooting skills across network and application layers, including packet-capture analysis on complex, dynamically routed architectures.
• Deep understanding of Layer 7 web application technologies and WAF/CDN platforms, including onboarding, policy tuning, break/fix troubleshooting, and operational management.
• Solid grounding in API security, including routing API traffic through security tooling, evaluating vulnerabilities, and partnering with application teams on remediation.
• Strong HTTP and application security knowledge, including TLS interception, SQL injection, XSS, CSRF, command injection, LFI/RFI, rate limiting, bot detection, geo-blocking, and sinkholing.
• Intermediate to advanced network routing and switching knowledge, with a focus on DNS, TCP/IP, IPsec, TLS, GRE, OSPF, and BGP.
• Proficiency in at least one scripting language, with Python preferred, and familiarity with Linux/CLI tooling.
• Working knowledge of public cloud environments such as Azure, AWS, or GCP.
• Experience with at least one SIEM platform for log analysis, behavioral analytics, and rule tuning.
• Strong written and verbal communication skills, including presenting to technical and non-technical audiences.
• Demonstrated ownership in unstructured environments, including making sound decisions with incomplete information, building stakeholder consensus, and delivering security improvements without waiting for top-down direction.
• Must be authorized to work in the United States without sponsorship.

Nice To Haves

• PCNSE or PCNSC certification is strongly preferred.
• Industry certifications such as PCNSE, PCNSC, CCNP/CCIE Security, or GIAC certifications such as GWAPT, GPEN, or similar.
• Experience building metrics pipelines and KPI reporting for security operations.
• Familiarity with interconnecting disparate security technologies to address application and security challenges.

Responsibilities

• Serve as the primary subject matter expert for Palo Alto Networks technologies, including NGFWs, Cloud NGFW, and Panorama, as well as WAF, CDN, API security, IDS/IPS, and DDoS prevention.
• Own onboarding, policy tuning, and lifecycle management for WAF and CDN platforms; optimize firewall rulesets, tune IDS/IPS, and configure DDoS protections.
• Partner with internal teams on the global rollout, tuning, and operational management of URL filtering and TLS decryption.
• Lead API security efforts by ensuring API traffic routes through security tooling, identifying vulnerabilities, and coordinating fixes with application teams.
• Lead troubleshooting of complex global network and application issues, including packet-capture analysis on intercontinental BGP topologies and WAF false-positive triage.
• Work with business and application teams to produce actionable security documentation, change proposals, and executive-ready findings.
• Analyze network security architectures, processes, and procedures to identify gaps and drive improvements.
• Configure and report on defensive measures against advanced threat-actor tactics, maintain awareness of the evolving threat landscape, and assess defense effectiveness.
• Communicate complex technical problems and solutions clearly to global engineering teams and C-suite stakeholders.
• Support initiatives across the broader Security team, beyond Network Security Engineering.
• Participate in the maintenance and tuning of network security technologies, including WAFs, CDNs, VPNs, and application-aware firewalls.
• Leverage and contribute to automation pipelines for global firewall rule deployment and policy management.
• Use security-tooling telemetry and data-collection automations to produce actionable reporting and metrics for internal teams and executive stakeholders.

Benefits

• 401(k) plan with matching company contributions.
• Comprehensive medical, dental, and vision care.
• Paid parental leave at 100% of salary.
• Paid time off and company holidays.
• Early access to earned wages through Daily Pay.
• Supportive culture and comprehensive benefits package prioritizing mental, physical, and emotional health.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed