Senior Network Security Engineer

Rockland Trust•Plymouth, MA

7d•$120,000 - $155,000

About The Position

Rockland Trust is seeking a Senior Security Engineer to lead the design, implementation, and continuous improvement of security solutions protecting the Bank's data, systems, applications, and cloud environments. This role requires expertise across multiple security domains including network security, endpoint protection, security monitoring, threat detection and response, identity and access management, privileged access management, cloud security, data protection, email security, and Zero Trust architectures. The Senior Security Engineer will lead strategic security initiatives, enhance the organization's security posture, and support Security Operations Center (SOC) functions through advanced monitoring, threat hunting, incident response, and security automation. The position requires on-call availability 24x7 for security incidents and critical issues. The role involves close collaboration with various teams such as Network Engineering, Infrastructure, Cloud Operations, Security Operations, Application Development, Risk, and Compliance, and includes mentoring junior team members.

Requirements

Bachelor's degree in Computer Science, Information Security, Cybersecurity, or related field, or equivalent experience.
Minimum of 8 years of progressive experience in information security, including at least 4 years in a senior engineering, lead engineering, or security architect role.
Demonstrated expertise across network security, cloud security, endpoint security, identity security, privileged access management, data protection, and threat detection technologies.
Hands-on experience administering and supporting SIEM, EDR/XDR, security monitoring, and SOC technologies.
Strong knowledge of Zero Trust security principles and enterprise security architecture frameworks.
Experience designing and implementing network segmentation or micro-segmentation solutions within enterprise environments.
Experience securing cloud-based applications, infrastructure, and SaaS environments.
Expertise with privileged access management, identity governance, Active Directory, authentication services, and access control technologies.
Strong understanding of email security, data protection, DLP, insider risk management, and information governance concepts.
Proven experience leading major security incidents, investigations, and remediation efforts.
Strong knowledge of security frameworks and standards such as NIST and CIS Controls.
Excellent communication, documentation, leadership, and stakeholder management skills.

Nice To Haves

Relevant certifications such as CISSP, CISM, CCSP, or equivalent are strongly preferred.

Responsibilities

Provide technical leadership for the design, deployment, and lifecycle management of enterprise security technologies.
Develop and maintain secure architectures for on-premises, cloud, and hybrid environments utilizing Zero Trust principles.
Design, implement, and maintain next-generation network security controls, secure remote access solutions, and cloud-delivered security services.
Develop and maintain secure configurations for security platforms, firewalls, security monitoring tools, identity services, and access controls.
Design and implement network segmentation and micro-segmentation strategies to limit lateral movement and reduce organizational risk.
Partner with infrastructure and application teams to ensure secure system and application architectures.
Act as a senior technical resource for security incident response efforts, threat containment, remediation, and post-incident reviews.
Partner with SOC personnel to improve threat detection, monitoring, alerting, and response capabilities.
Develop and maintain SIEM use cases, correlation rules, dashboards, security metrics, and automated response workflows.
Conduct proactive threat hunting activities leveraging endpoint, network, cloud, and security telemetry sources.
Support and enhance endpoint detection and response (EDR/XDR) capabilities across the enterprise.
Lead investigations related to malware, phishing, insider threats, unauthorized access, and advanced persistent threats.
Lead the implementation and ongoing management of identity security, identity governance, and privileged access management controls.
Ensure least-privilege access principles are implemented across critical systems and applications.
Support Zero Trust initiatives focused on identity-centric security, continuous verification, and secure access controls.
Review and enhance authentication, authorization, and privileged account management processes.
Lead implementation and management of cloud security solutions supporting hybrid and multi-cloud environments.
Oversee endpoint security technologies, ensuring effective prevention, detection, and response capabilities.
Implement and maintain controls that protect sensitive data across endpoints, networks, cloud platforms, collaboration platforms, and file-sharing solutions.
Support data classification, data loss prevention (DLP), insider risk management, and data governance initiatives.
Monitor and secure managed file transfer and business-critical data exchange platforms.
Oversee email security controls designed to protect against phishing, business email compromise, malware, spoofing, and other messaging threats.
Enhance the organization's information protection capabilities through advanced threat prevention and data security controls.
Collaborate with business units to improve user awareness and reduce human-centered security risks.
Lead vulnerability management and remediation programs across infrastructure, applications, endpoints, cloud platforms, and security devices.
Conduct security risk assessments and architectural reviews to identify gaps and recommend mitigation strategies.
Collaborate with stakeholders to prioritize remediation efforts based on business impact and risk.
Validate the effectiveness of implemented security controls through testing, assessment, and continuous improvement activities.
Partner with Network, Infrastructure, Cloud, Security Operations, and Application teams to design and implement secure solutions.
Serve as a technical mentor for junior security engineers and analysts.
Provide guidance regarding security architecture, incident response, threat detection, and security best practices.
Support audits, regulatory reviews, and compliance initiatives.