Network Security Engineer

PlanetArt•Woodridge, IL

10d•Hybrid

About The Position

PlanetArt is seeking a Network Security Engineer to support its Security Department. The role assesses network and server security, monitors security events, and investigates alerts across Cisco technologies, Palo Alto firewalls, Windows and Linux servers, and endpoint security tools. It requires understanding SIEM log collection and monitoring, EDR configuration, and SOC alert triage. The engineer collaborates with infrastructure teams to address security risks; direct configuration of network devices and firewalls is outside the role’s scope. This is a hybrid position. Employees are expected to work onsite three days per week—Monday, Tuesday, and Thursday—and may work remotely Wednesday and Friday. Candidates must be local to or willing to relocate to the office area. The work takes place in an office environment with low to moderate noise levels and may require occasional travel.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, or equivalent experience.
3–5 years of experience in network security, security operations, incident response, or a related role.
Working knowledge of Cisco technologies and Palo Alto firewalls, including interpreting configurations, policies, and logs.
Understanding of TCP/IP, DNS, NAT, VPNs, and segmentation.
Understanding of Windows and Linux server security, including hardening, patching, authentication, permissions, and audit logging.
Knowledge of SIEM, including log collection, forwarding, ingestion, parsing, correlation, and alert monitoring.
Experience with EDR configuration and investigation, including policies, detection settings, exclusions, endpoint telemetry, and response capabilities.
Ability to triage alerts as a SOC analyst would, gather evidence, prioritize threats, and escalate incidents with clear documentation.
Strong analytical, troubleshooting, and communication skills, with the ability to collaborate across security, network, and infrastructure teams.
Understanding of integrating AI into security workflows, including validating AI-generated findings, protecting sensitive data, and maintaining analyst oversight.
Ability to develop, test, and document security scripts and tools using Python, PowerShell, or similar languages, including integrations with security tool APIs.
Must be local to or willing to relocate to the office area.

Nice To Haves

Splunk experience, including SPL searches, dashboards, and configuring and tuning alerts, thresholds, schedules, and notifications.

Responsibilities

Review Cisco and Palo Alto firewall policies, access controls, segmentation, VPNs, and security logs.
Assess Windows and Linux server hardening, patching, authentication, permissions, and audit logging.
Verify SIEM collection of firewall, network, server, and endpoint logs, and investigate logging gaps.
Monitor SIEM and EDR alerts for suspicious activity.
Triage alerts by validating detections, distinguishing false positives, assessing severity, and escalating incidents.
Correlate network, server, identity, and endpoint events to identify affected systems and timelines.
Configure EDR policies, detection settings, exclusions, and alerts through approved change procedures.
Coordinate incident containment and remediation with infrastructure teams, and track issues to resolution.
Document investigations and response procedures, and evaluate AI use in analysis and detection.
Develop, test, and maintain security tools for log analysis, alert triage, and automation.
Recommend security improvements to teams responsible for network and server configuration.