10888 - Network Security Engineer II

Hyundai Autoever America•Joliet, IL

18d•Onsite

About The Position

The Network and Cybersecurity Engineer II ensures that service providers deliver managed network and cybersecurity services that meet HAEA’s network, security, and business requirements. The role requires in-depth knowledge of HAEA’s network infrastructure—including LAN and switches, DNS/DHCP, WAN, load balancers, VoIP, and VPN—and enterprise security operations such as SIEM, vulnerability management, threat detection, and incident response. The engineer addresses complex incidents and problems and helps maintain a stable, reliable, and secure infrastructure that meets availability requirements, contracted service levels, and cybersecurity compliance standards. The position also manages vendors’ technical performance, network- and security-specific contracts and suppliers, customer business-request priorities, and project schedules and budgets. It provides on-site support alongside service providers’ remote management services and oversees infrastructure acquisition, installation, changes, service levels, incident resolution, upgrades, and improvement requests.

Requirements

Bachelor’s degree or equivalent in business, computers, information systems, or a related field.
5–7 years of relevant work experience in a related network and/or cybersecurity role.
Extensive knowledge of networking technologies and protocols, including TCP/IP, QoS, IPT, VoIP, IOS, routing and switching, OSPF, BGP, and WAN optimization technologies.
Hands-on expertise with Splunk SIEM, including search, dashboards, correlation searches, log ingestion, and alerting.
Hands-on expertise with Rapid7 InsightVM/InsightIDR, including scanning, risk scoring, and remediation workflows.
Demonstrated experience with wired and wireless LAN segments and infrastructure supporting traffic from computing devices, servers, peripherals, and other end-user devices.
Demonstrated experience setting up and configuring redundant networking environments.
Ability to manage IP-management components, including DNS and DHCP, and central real-time logging components.
Experience with remote-access components, including VPN infrastructure.
Experience with firewalls, multi-factor authentication equipment and software, and intrusion prevention and detection devices.
Deep knowledge of designing and developing functional SDN and SDDC technology; understanding of security and physical networking.
Working knowledge of security frameworks and compliance standards such as NIST and ISO 27001, and security operations best practices.
Expertise ensuring network and security components are included in IT lifecycle and IT service-management documentation, including asset management, configuration management, and CMDB.

Nice To Haves

Ability to design processes for rapid incident determination, alert identification and correlation, escalation, and resolution across network and security environments on a 24x7x365 basis.
Industry certifications such as CISSP, CISM, Security+, CCNP Security, or Splunk/Rapid7 product certifications.
Demonstrated experience with continuous improvements to networking and security solutions.
Experience with VPN infrastructure.
Extensive experience diagnosing and resolving networking and security problems.
Experience with threat hunting, incident response, and security-event forensics.
Demonstrated experience with server administration.
Experience managing sourcing vendors, deliverables, and service-delivery outcomes.
Preferred experience managing enterprise network and security management SLA/service-delivery metrics.
Experience overseeing root-cause analysis to prevent problem recurrence and improve service levels.

Responsibilities

Develop and provide network and security architecture.
Establish network and security documentation standards and requirements.
Develop business and functional requirements for network and cybersecurity management-services projects.
Manage circuit provisioning for new WAN connectivity and obtain favorable circuit pricing.
Work with client facility personnel to establish necessary facility requirements.
Order and expedite network and security equipment, circuits, and services.
Manage public carriers’ and other third parties’ performance to meet client requirements, schedules, projects, and SLAs.
Coordinate and oversee third-party installation activities, including carrier circuit and router installations.
Approve router configuration files, firewall rules, and IP-addressing schemas and standards.
Define security and performance requirements for physical and logical network traffic segmentation.
Administer, tune, and monitor Splunk SIEM for security-event correlation, alerting, log aggregation, and compliance reporting.
Lead vulnerability management using Rapid7 InsightVM/InsightIDR, including scanning, prioritization, remediation tracking, and reporting.
Manage and respond to security incidents; perform threat detection, triage, containment, and root-cause analysis across the enterprise.
Administer and optimize firewalls, IDS/IPS, VPN, multi-factor authentication, and endpoint and network security controls.
Manage technical third-party relationships for facility cable management services.
Support client-planned and third-party-planned or unplanned outages.
Monitor service providers’ end-to-end support of network and security services.
Manage service-provider performance, SLAs, and quality in accordance with contracts.
Ensure patch monitoring and deployments are completed on time and in accordance with service levels.
Provide on-site support to complement service providers’ remote management services.
Oversee infrastructure hardware and software acquisition, installation, and changes.
Maintain high infrastructure availability through service-level management.
Ensure incidents and upgrades are resolved.
Identify change requests that improve performance, strengthen security, or reduce costs.