Senior Network Security Engineer

Rockland Trust Company•Austin, TX

About The Position

Rockland Trust is seeking a Senior Security Engineer to lead the design, implementation, and continuous improvement of security solutions protecting the Bank's data, systems, applications, and cloud environments. This role requires expertise across multiple security domains, including network security, endpoint protection, security monitoring, threat detection and response, identity and access management, privileged access management, cloud security, data protection, email security, and Zero Trust architectures. The Senior Security Engineer will lead strategic security initiatives, enhance the organization's security posture, and support Security Operations Center (SOC) functions through advanced monitoring, threat hunting, incident response, and security automation. This position requires the ability to be on call and available 24x7 as needed to support the organization during security incidents, critical upgrades, or other time-sensitive issues, ensuring continuous protection of the organization's systems, applications, and data. The Senior Security Engineer collaborates closely with Network Engineering, Infrastructure, Cloud Operations, Security Operations, Application Development, Risk, and Compliance teams to identify risks, implement security controls, and drive enterprise-wide security initiatives. This role also serves as a mentor and technical leader for junior team members.

Requirements

Bachelor's degree in Computer Science, Information Security, Cybersecurity, or related field, or equivalent experience.
Minimum of 8 years of progressive experience in information security, including at least 4 years in a senior engineering, lead engineering, or security architect role.
Demonstrated expertise across network security, cloud security, endpoint security, identity security, privileged access management, data protection, and threat detection technologies.
Hands-on experience administering and supporting SIEM, EDR/XDR, security monitoring, and SOC technologies.
Strong knowledge of Zero Trust security principles and enterprise security architecture frameworks.
Experience designing and implementing network segmentation or micro-segmentation solutions within enterprise environments.
Experience securing cloud-based applications, infrastructure, and SaaS environments.
Expertise with privileged access management, identity governance, Active Directory, authentication services, and access control technologies.
Strong understanding of email security, data protection, DLP, insider risk management, and information governance concepts.
Proven experience leading major security incidents, investigations, and remediation efforts.
Strong knowledge of security frameworks and standards such as NIST and CIS Controls.
Excellent communication, documentation, leadership, and stakeholder management skills.
Relevant certifications such as CISSP, CISM, CCSP, or equivalent are strongly preferred.

Nice To Haves

CrowdStrike Falcon
CyberArk PAM
Proofpoint
Netskope
Qualys VMDR
Palo Alto Networks
Microsoft Defender Suite
SIEM
SOC Operations
Threat Hunting
Incident Response
Detection Engineering
Security Monitoring
SOAR
EDR/XDR
Active Directory
Microsoft Entra ID
Identity Governance (IGA)
Privileged Access Management (PAM)
MFA
SSO
Conditional Access
Zero Trust
Azure Security
Microsoft 365 Security
CASB
SSE
ZTNA
DLP
Information Protection
Data Classification
Data Access Governance
Insider Risk Management
Hybrid Cloud Security
Network Segmentation
Micro-Segmentation
IDS/IPS
VPN Technologies
Secure Remote Access
Firewall Management
NIST Cybersecurity Framework
CIS Controls
Vulnerability Management
Security Architecture Reviews
Risk Assessments
Compliance Support
Technical Leadership
Cross-Functional Collaboration
Project Leadership
Technical Mentoring
Process Improvement
Strategic Planning
Technical Documentation

Responsibilities

Provide technical leadership for the design, deployment, and lifecycle management of enterprise security technologies.
Develop and maintain secure architectures for on-premises, cloud, and hybrid environments utilizing Zero Trust principles.
Design, implement, and maintain next-generation network security controls, secure remote access solutions, and cloud-delivered security services.
Develop and maintain secure configurations for security platforms, firewalls, security monitoring tools, identity services, and access controls.
Design and implement network segmentation and micro-segmentation strategies to limit lateral movement and reduce organizational risk.
Partner with infrastructure and application teams to ensure secure system and application architectures.
Act as a senior technical resource for security incident response efforts, threat containment, remediation, and post-incident reviews.
Partner with SOC personnel to improve threat detection, monitoring, alerting, and response capabilities.
Develop and maintain SIEM use cases, correlation rules, dashboards, security metrics, and automated response workflows.
Conduct proactive threat hunting activities leveraging endpoint, network, cloud, and security telemetry sources.
Support and enhance endpoint detection and response (EDR/XDR) capabilities across the enterprise.
Lead investigations related to malware, phishing, insider threats, unauthorized access, and advanced persistent threats.
Lead the implementation and ongoing management of identity security, identity governance, and privileged access management controls.
Ensure least-privilege access principles are implemented across critical systems and applications.
Support Zero Trust initiatives focused on identity-centric security, continuous verification, and secure access controls.
Review and enhance authentication, authorization, and privileged account management processes.
Lead implementation and management of cloud security solutions supporting hybrid and multi-cloud environments.
Oversee endpoint security technologies, ensuring effective prevention, detection, and response capabilities.
Implement and maintain controls that protect sensitive data across endpoints, networks, cloud platforms, collaboration platforms, and file-sharing solutions.
Support data classification, data loss prevention (DLP), insider risk management, and data governance initiatives.
Monitor and secure managed file transfer and business-critical data exchange platforms.
Oversee email security controls designed to protect against phishing, business email compromise, malware, spoofing, and other messaging threats.
Enhance the organization's information protection capabilities through advanced threat prevention and data security controls.
Collaborate with business units to improve user awareness and reduce human-centered security risks.
Lead vulnerability management and remediation programs across infrastructure, applications, endpoints, cloud platforms, and security devices.
Conduct security risk assessments and architectural reviews to identify gaps and recommend mitigation strategies.
Collaborate with stakeholders to prioritize remediation efforts based on business impact and risk.
Validate the effectiveness of implemented security controls through testing, assessment, and continuous improvement activities.
Partner with Network, Infrastructure, Cloud, Security Operations, and Application teams to design and implement secure solutions.
Serve as a technical mentor for junior security engineers and analysts.
Provide guidance regarding security architecture, incident response, threat detection, and security best practices.
Support audits, regulatory reviews, and compliance initiatives.