Network Operations Security Engineer (US - Remote)

AXON-Networks•Irvine, CA

4d•$120,000 - $175,000•Remote

About The Position

The Network Operations Security Engineer is the designated Security Champion for Network Operations. This embedded, production-focused security engineering role translates enterprise security requirements, vulnerabilities, and threat information into operational controls and coordinated remediation across production networks, cloud infrastructure, Kubernetes-based services, and device-management environments. The engineer partners with centralized Information Security, Engineering, DevOps, NOC, and Support to reduce operational security risk while maintaining service reliability and customer availability. The role does not own the enterprise information security program and does not replace Engineering or system owners in implementing technical fixes. The position is fully remote within North America. AXON Networks is unable to offer visa sponsorship. The annual salary range is $120,000–$175,000 USD.

Requirements

At least 5 years of experience in network/infrastructure security engineering, production operations, cloud infrastructure, SRE, or a closely related technical role.
Strong understanding of TCP/IP, routing, DNS, TLS, firewalls, segmentation, access controls, and troubleshooting in production environments.
Practical experience assessing vulnerabilities, CVEs, exposures, and risk, and planning and validating remediation; familiarity with vulnerability and cloud security tools.
Experience with production incidents, change management, rollback planning, operational readiness, and cross-functional engineering coordination.
Working knowledge of cloud environments, containers/Kubernetes, monitoring/logging, and infrastructure security concepts.
Ability to communicate technical risk and operational tradeoffs clearly to Engineering, Operations, and Information Security.

Nice To Haves

Experience in telecom, broadband, ISP, CPE, gateway, router, ONT, Wi-Fi, ACS, TR-069, TR-369/USP, or fleet/device-management environments.
GCP or OCI experience.
Kubernetes workload security experience.
Experience with IAM, infrastructure-as-code, CI/CD, or DevSecOps collaboration.
Familiarity with Tenable, Qualys, Rapid7, Wiz, Orca, Prisma Cloud, Trivy, SIEM, or comparable tools.
Automation or scripting experience with Python, Bash, or APIs.
Relevant certifications such as Security+, CISSP, CCSP, or GIAC.

Responsibilities

Represent Network Operations in the Security Champions Council and communicate security requirements, emerging threats, standards, and priorities to operational teams.
Coordinate with centralized Information Security on risk classification, remediation deadlines, escalations, exceptions, evidence, and technical guidance.
Promote security awareness, practical controls, and repeatable secure operating practices within NOC, Support, and Operational Excellence.
Assess the production impact and applicability of reported CVEs, scanner findings, misconfigurations, and exposures with asset and service owners.
Coordinate remediation plans with Engineering, DevOps, Cloud Operations, and system owners, including maintenance windows, dependencies, service risks, rollback requirements, and validation steps.
Track operational remediation and provide verified closure evidence to Information Security; escalate overdue or high-risk actions without creating a duplicate enterprise vulnerability tracking program.
Review production-impacting designs, releases, and changes for operational security readiness, including access, network exposure, segmentation, logging, monitoring, recovery, and rollback.
Identify failure scenarios and security-sensitive operational dependencies; recommend controls and document residual risks for the appropriate approval authority.
Partner with Change Management and Operational Readiness functions to ensure secure deployment and post-change validation.
Assess operational security across network devices, connectivity, management interfaces, cloud workloads, containers, Kubernetes, IAM, secrets, and service-to-service access.
Work with platform and network engineering owners to improve configuration baselines, privileged access, patching, network segmentation, telemetry, and resilience.
Help identify and reduce risk in CPE/device-management workflows, remote management, firmware rollouts, and associated production services where applicable.
Participate in security-related production incidents, supporting scoping, triage, containment, recovery, customer-impact analysis, and evidence preservation under the enterprise incident response framework.
Coordinate NOC, Support, and Engineering responses and operational communications with Information Security; support post-incident reviews and completion of operational corrective actions.
Improve security-relevant alerts, runbooks, escalation paths, and operational response exercises.
Partner with Operational Excellence and automation engineers to reduce manual security checks and improve security monitoring and response workflows.
Maintain operational metrics for remediation execution, overdue actions, security change readiness, control coverage, and recurring security incidents; provide authoritative data to Information Security reporting.
Drive lessons learned into monitoring, documentation, change procedures, and production operations.
Achieve timely remediation of Network Operations-owned security actions within Information Security-defined targets.
Reduce repeat security-related production incidents and unresolved operational exposures.
Ensure security requirements are consistently included in production change and operational readiness reviews.
Improve security telemetry, runbooks, escalation readiness, and remediation validation.
Participate effectively in the Security Champions Council and support clear cross-team accountability.