Network Security Engineer

Circor International•Burlington, MA

27d

About The Position

As a Network Security Engineer, you will be a key member of the Information Security Architecture and Engineering team. You will need to have a strong understanding of networking, servers, security solutioning, and design processes needed to enable and securely deliver resilient security services. You will work collaboratively with the Information Security teams to ensure solutions and services are designed and adopted effectively. The Network Security Engineer is responsible for, but not limited to, performing maintenance and support functions associated with the Network security systems. CIRCOR Values Customer Intimacy: Understand and anticipate customer needs, be flexible and responsive, and value deep, long-term relationships. Team Before Self: Be humble, reward and recognize, and respect and value the opinions of all. Commitment & Accountability: Take responsibility, be passionate, and be responsive. Speed, Excellence & Innovation: Be creative and innovative, find efficient solutions, and provide quality products, services, and solutions. CIRCOR Absolutes: Safety, Ethics & Controls.

Requirements

Bachelor's degree in information systems or related discipline, or equivalent training.
5+ years of related work experience in a network security role.
Technical expertise in Azure networking and cloud security solutions.
Strong knowledge and understanding of secure network architecture, protocols, routing, switching, and wireless.
Deep knowledge in network traffic packet analysis.
Expertise with threat detection and response tools and automation.
Ability to stay positive and adapt quickly to changing business models, project requirements, and technologies.
Ability to think through problems and visualize solutions.
Ability to implement, administer, and troubleshoot network infrastructure devices, including firewall (Palo Alto, etc.).
Public Cloud infrastructure (AWS, Azure, GCP).
Strong understanding of current network security issues and threats and how they can be manifested in complex environments, such as understanding of network fundamentals and common Internet protocols (Ethernet, ARP, IP, ICMP, UDP, TCP, SSL, HTTP, DNS, BGP).
Strong communication, consultative, influencing, and presentation skills.

Nice To Haves

Understanding the best practices, risk & control frameworks, and applicable existing and new legal/regulatory requirements (ITAR, NIST 800-171, CMMC, data privacy and breach notification laws, ISO 27001, NIST CSF and SP 800-53 etc.).
Security-related certifications such as OSCP, GCIH, GCIA, CCNP, CCNP Security, CCIE, Cloud Networking (Azure), Palo Alto, Checkpoint, Zscaler, and other security certifications.

Responsibilities

Working as part of the Security Architecture & Engineering team, assisting with ongoing, hands-on configuration and management of current and future network security technologies specifically related to Secure Web Gateway (SWG) and Remote Application/Service Access (ZTNA).
Building, implementing, and maintaining all network security solutions and technologies.
Assisting with the design and implementation of security monitoring solutions such as SIEM and other tools.
Designing and implementing network security on Azure cloud and on-premises environments.
Developing technical solutions and security tools to help mitigate network security vulnerabilities.
Assessing and identifying security risks in the network and implementing the remediation.
Auditing, managing, and maintaining network security solutions such as Palo Alto, Zscaler, Layer-7 network security protection solutions, and network access control.
Administering perimeter security systems such as firewalls, load-balancers, NAC, WAF, etc.
Providing recommendations and best practices to protect corporate networks and site-located networks.
Conducting proactive research and analysis to identify security weaknesses.
Documenting and designing network diagrams for existing and future network architecture.
Recommending and implementing strategic and tactical changes to network infrastructure.