Network Operations Security Engineer (US - Remote)

AXON-Networks•Irvine, CA

5d•$120,000 - $175,000•Remote

About The Position

AXON Networks delivers an AI-driven, analytics-based orchestration platform and next-generation high-speed routers that use the latest Wi-Fi technologies, helping ISPs manage and troubleshoot networks in real time and improve customer experience. The company is headquartered in Irvine, California, with its Asia headquarters in Singapore and operations in Denmark, Spain, and Vietnam. The Network Operations Security Engineer is the designated Security Champion for Network Operations. This embedded, production-focused security engineering role translates enterprise security requirements, vulnerability information, and threat intelligence into actionable operational controls and coordinated remediation across production networks, cloud infrastructure, Kubernetes-based services, and device-management environments. The engineer works with centralized Information Security, Engineering, DevOps, NOC, and Support to reduce operational security risk while preserving service reliability and customer availability. The role does not own the enterprise information security program, serve as a general compliance analyst, or replace Engineering and system owners in implementing technical fixes. This position is fully remote within North America. AXON Networks is unable to offer visa sponsorship. The annual salary range is $120,000–$175,000 USD.

Requirements

At least 5 years of experience in network or infrastructure security engineering, production operations, cloud infrastructure, SRE, or a closely related technical role.
Strong understanding of TCP/IP, routing, DNS, TLS, firewalls, segmentation, access controls, and troubleshooting in production environments.
Practical experience assessing vulnerabilities, CVEs, exposure, and risk; planning and validating remediation; and familiarity with vulnerability and cloud security tools.
Experience with production incidents, change management, rollback planning, operational readiness, and cross-functional engineering coordination.
Working knowledge of cloud environments, containers/Kubernetes, monitoring/logging, and infrastructure security concepts.
Ability to clearly communicate technical risk and operational tradeoffs to Engineering, Operations, and Information Security.

Nice To Haves

Experience in telecom, broadband, or ISP environments, or with CPE, gateways, routers, ONTs, Wi-Fi, ACS, TR-069, TR-369/USP, or fleet/device-management environments.
GCP or OCI experience; Kubernetes workload security; IAM; infrastructure-as-code; CI/CD; or DevSecOps collaboration.
Familiarity with Tenable, Qualys, Rapid7, Wiz, Orca, Prisma Cloud, Trivy, SIEM, or comparable tools.
Automation or scripting experience with Python, Bash, or APIs.
Relevant certifications such as Security+, CISSP, CCSP, or GIAC.

Responsibilities

Represent Network Operations in the Security Champions Council and communicate security requirements, emerging threats, standards, and priorities to operational teams.
Coordinate with centralized Information Security on risk classification, remediation deadlines, escalations, exceptions, evidence, and technical guidance.
Promote security awareness, practical controls, and repeatable secure operating practices within NOC, Support, and Operational Excellence.
Assess the relevance and production impact of reported CVEs, scanner findings, misconfigurations, and exposures, working with asset and service owners to confirm applicability and customer impact.
Coordinate remediation plans with Engineering, DevOps, Cloud Operations, and system owners, including maintenance windows, dependencies, service risks, rollback requirements, and validation steps.
Track operational remediation and provide verified closure evidence to Information Security; escalate overdue or high-risk actions without creating a duplicate enterprise vulnerability tracking program.
Review production-impacting designs, releases, and changes for operational security readiness, including access, network exposure, segmentation, logging, monitoring, recovery, and rollback.
Identify failure scenarios and security-sensitive operational dependencies, recommend controls, and document residual risks for the appropriate approval authority.
Partner with Change Management and Operational Readiness functions to support secure deployment and post-change validation.
Assess the operational security posture of network devices, connectivity, management interfaces, cloud workloads, containers, Kubernetes, IAM, secrets, and service-to-service access.
Work with platform and network engineering owners to improve configuration baselines, privileged access, patching, network segmentation, telemetry, and resilience.
Help identify and reduce risk in CPE and device-management workflows, remote management, firmware rollouts, and related production services where applicable.
Participate in security-related production incidents, supporting scoping, triage, containment, recovery, customer-impact analysis, and evidence preservation under the enterprise incident response framework.
Coordinate NOC, Support, and Engineering response and operational communications with Information Security; support post-incident reviews and follow through on operational corrective actions.
Improve security-relevant alerts, runbooks, escalation paths, and operational response exercises.
Partner with Operational Excellence and automation engineers to reduce manual security checks and improve security monitoring and response workflows.
Maintain operational metrics for remediation execution, overdue actions, security change readiness, control coverage, and recurring security incidents, and provide authoritative data for Information Security reporting.
Incorporate lessons learned into monitoring, documentation, change procedures, and production operations.
Meet success measures including timely remediation of Network Operations-owned actions, fewer repeat security incidents and unresolved exposures, consistent integration of security requirements into production reviews, improved security telemetry and response readiness, and effective cross-team accountability.