Senior Security Engineer - Network Security

Relativity•Illinois, IL

2d•$130,000 - $195,000

About The Position

The Senior Security Engineer, Network Security, is a hands-on technical practitioner who advances Relativity’s enterprise security function through project leadership, cross-functional collaboration, and mentorship. The role owns complex security technology initiatives from design through deployment and optimization, with a focus on automated security operations, detection and response, and rigorous security controls. It serves as a technical escalation point and works closely with the Senior Manager of Enterprise Security and cross-functional engineering teams to reduce attack surface and improve detection and response across Relativity’s technical ecosystem. The role’s primary focus is network security engineering across on-premises, cloud, and hybrid environments. It strengthens segmentation, secure access, traffic visibility, threat detection, and network resilience by integrating network security technologies, automation, and telemetry into the broader defense-in-depth and security operations ecosystem. The position also contributes to threat hunting, AI-enabled security operations, data security, and technical leadership and mentorship.

Requirements

4–8 years of hands-on enterprise security engineering experience, focused on network security.
Hands-on experience with common security tools such as EDR, XDR, SIEM, CNAPP, CSPM, and CWP, and strong knowledge of security technologies across OSI model layers.
Experience in threat hunting, digital forensics, and/or detection engineering, including writing automation scripts and rules for security enforcement and observability.
Solid knowledge of common industry security benchmarks and frameworks, such as MITRE and NIST.
Expertise in at least one scripting or automation language—Python, Bash, or PowerShell—applied to modern containerized services, CLI-based commands, and/or security use cases.
Experience owning and driving complex security initiatives end-to-end, including cross-functional coordination, stakeholder communication, and delivery of technical outcomes.
Ability to communicate technical findings clearly to engineering peers and non-technical stakeholders.
Relevant certification such as Network+, CCSA, ITS-NS, CCT, FCF, PCCET, or equivalent.
Prior experience mentoring or providing technical guidance to junior engineers.

Nice To Haves

Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
Experience with AI-enabled SecOps, such as UEBA, ML-based alert prioritization, or AI-assisted threat-hunting workflows.
Working knowledge of common cloud environments such as AWS, Azure, or GCP.
Experience contributing endpoint or network security controls to CI/CD pipelines and infrastructure-as-code environments.
Experience supporting compliance and audit requirements, such as SOC 2, ISO 27001, or HIPAA, from a technical control perspective.

Responsibilities

Lead the design, deployment, configuration, and optimization of network security controls across on-premises, cloud, and hybrid environments.
Engineer and maintain network security capabilities such as firewalls, network detection and response, secure web gateways, DNS security, SASE/SSE, VPN or ZTNA, adaptive access policies, and cloud-native network security controls.
Design and validate network segmentation and access-control patterns to reduce attack paths and limit lateral movement.
Integrate network telemetry—including flow, DNS, proxy, firewall, and packet-derived data—into SIEM, analytics, and automated response workflows.
Develop detections and investigate command-and-control activity, lateral movement, anomalous traffic, unauthorized access, and data exfiltration.
Automate network security configuration, validation, and response using APIs, scripting, infrastructure as code, and policy-as-code practices.
Partner with Infrastructure, Cloud, and Engineering teams on secure connectivity, architecture reviews, control implementation, and remediation.
Define and monitor network security measures, including control coverage, telemetry health, segmentation effectiveness, detection efficacy, and remediation performance.
Lead design, deployment, and optimization of security controls spanning perimeter, network, host, application, identity, and data layers.
Contribute to and enforce security control standards and design patterns aligned with industry-recognized frameworks; serve as a subject matter expert during implementation and review.
Validate that telemetry from each security layer feeds central analytics platforms and provides broad visibility and appropriate attack-surface coverage.
Assess enterprise security control effectiveness as the ecosystem and threat landscape evolve, and propose and implement supplemental coverage.
Partner with IT, Engineering, and other stakeholders to embed security controls and lead cross-functional initiatives.
Provide technical recommendations on security control design in response to vulnerabilities, risks, issues, and events, with documented analysis to support decisions.
Lead purple-team exercises and control-efficacy testing to verify security depth and resilience under attack conditions.
Ensure redundant and complementary security capabilities across security layers to prevent bypasses and provide failure redundancy.
Lead structured threat hunts and purple-team exercises with the Purple Team, analyze telemetry for anomalous and malicious behavior, and communicate findings to stakeholders.
Develop, execute, and document structured hunts mapped to MITRE ATT&CK and ATLAS techniques and current threat intelligence.
Analyze exposure related to vulnerabilities, zero-days, alert telemetry, threat intelligence, and partner or customer notifications; assess exploitability risk or exposure.
Maintain awareness of evolving threats, adversary TTPs, and emerging vulnerabilities relevant to Relativity’s technical ecosystem and organizational trajectory.
Standardize and document hunt methodologies, hypotheses, and outcomes, and help mature the threat-hunting program with the Purple Team.
Turn successful hunts, exposure analysis, purple-team findings, and alerts into durable automated detections, containment logic, and improved coverage.
Build and maintain SOAR workflows to automate enrichment, triage, containment, and routine response actions, contributing to the broader automation roadmap.
Measure and improve automation’s impact on detection, containment, and response times to reduce threat-actor dwell time.
Identify, evaluate, and operationalize AI/ML capabilities for semantic anomaly detection, behavioral analytics, alert triage, and prioritization; recommend platform and tooling decisions to stakeholders.
Implement and manage data classification, discovery, and data security posture management across cloud and on-premises stores.
Deploy and tune data loss prevention controls across endpoints, network, email, cloud, and SaaS surfaces.
Investigate data key risk indicators related to access and exfiltration, and integrate data telemetry into central analytics such as SIEM.
Mentor and provide day-to-day technical guidance to junior and mid-level security engineers on technical approach, tooling, and professional development.
Lead technical design and implementation for assigned security initiatives and produce documentation, runbooks, and knowledge artifacts.
Participate in hiring, including technical interviews and candidate assessments.
Represent security engineering in cross-functional technical discussions and communicate security requirements and findings to technical and non-technical audiences.