Network Security Engineer - Web Proxy
About The Position
At Bank of America, the Network Security Engineer supports multiple security engineering efforts to deliver enterprise security capabilities. The role serves as a subject matter expert in security technology, oversees major engineering milestones—including design, development, and implementation of systems—and reports on key metrics. The engineer executes engineering initiatives, partners with cross-functional teams, and solves complex issues across the company’s global network footprint. The position researches, designs, engineers, implements, and supports software and hardware information security systems that meet business and regulatory requirements and standards. It drives complex technical security projects, identifies risks and potential vulnerabilities throughout the engineering process, and helps resolve technical complexities. The role is based at the Denver, Colorado office and is scheduled for first shift, 40 hours per week. The position is eligible for an annual discretionary incentive and benefits. The annual salary range is $95,000 to $148,900, with offers determined by experience, education, and skill set.
Requirements
- At least 5 years of hands-on professional experience.
- Strong end-to-end network flow experience, including understanding how traffic enters and exits a company network.
- Extensive knowledge of networking fundamentals, including DNS, DHCP, firewalls, load balancing, IPS, basic routing and switching, TCP/IP, and packet analysis.
- Understanding of TLS, particularly encryption and decryption of data in transit.
- Strong hands-on experience with proxies, specifically SkyHigh Web Gateway.
- Experience with web proxy controls for advanced content filtering.
- Senior-level expertise in at least one of the following: load balancers (F5 SSLO, ASM, ATM); network malware scanning (FireEye Lastline, NSX Defender); or NSX Defender.
- Experience deploying security solutions in virtual environments such as VMware, AWS, or Azure.
Nice To Haves
- Strong understanding of TCP/IP, routing and switching, BGP, OSPF, VLANs, VRFs, and Radius AVP.
- Experience with Cisco Catalyst, Nexus, and wireless infrastructure.
- Experience with packet capture and protocol analysis using Wireshark.
- Exposure to Cisco ISE and Cisco SNA in enterprise environments.
- Exposure to DDoS mitigation solutions.
Responsibilities
- Lead the identification, definition, and documentation of network security requirements.
- Drive development and execution of test plans and produce quantitative results.
- Define measurement marks for policy, ease of administration, and use-case coverage.
- Research, design, engineer, implement, and support software and hardware information security systems that conform to business and regulatory requirements and standards.
- Drive complex technical information security projects to ensure on-time delivery.
- Identify and raise risks or potential vulnerabilities throughout the security engineering process.
- Assist the team in resolving technical complexities involved in achieving requirements.
- Oversee major engineering milestones, including requirements curation, test plan development and execution, implementation planning, and development and execution of capability runbooks.
- Partner with cross-functional teams and solve complex issues across the global network footprint.
- Report on key metrics.
Benefits
- Industry-leading benefits and benefits eligibility.
- Access to paid time off.
- Resources and support for employees.
- Eligible to participate in an annual discretionary incentive plan.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
