Network Security Engineer

ABOUT THE ROLE:

We are seeking a seasoned Senior Network Security Engineer to join our dynamic security team. The ideal candidate will possess deep expertise in network security technologies, focusing on switching and routing systems within cloud-native and AI-focused infrastructure. You will thrive in a fast-paced, challenging environment, demonstrating adaptability, excellent multitasking skills, and the drive to tackle complex security issues independently while ensuring robust protection for our innovative technologies.

RESPONSIBILITIES:

• Serve as a subject matter expert in network security, particularly firewalls, VPNs, IDS/IPS, routing protocols (e.g., BGP, OSPF), and switching technologies.
• Manage and update firewall configurations across our enterprise network to align with operational and security needs.
• Deploy new firewalls, switches, routers, and network security devices in response to evolving threats and demands.
• Develop and propose innovative network security solutions to address operational challenges in routing and switching environments.
• Enhance security processes through thorough documentation and change management.
• Act as the primary resolver for complex network security issues, including escalation support.
• Ensure network security systems, switches, and routers are up-to-date with patches, firmware, and maintenance.
• Monitor and respond to security events in cloud environments (e.g., AWS, GCP, Azure, Datacenter), with emphasis on network traffic analysis.

BASIC QUALIFICATIONS:

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field.
• 4+ years of experience in network security engineering, with hands-on focus on switching and routing.
• Certifications like CISA, CRISC, CGEIT, Security+, CASP+, or similar preferred.
• Strong understanding of network security principles, protocols (e.g., TCP/IP, VLANs, ACLs), and best practices for secure routing and switching.
• Proficiency in at least one major cloud platform (AWS, GCP, or Azure) and its network security services (e.g., VPCs, Security Groups).
• Experience with network analysis tools such as Wireshark, tcpdump; and vendors including Cisco, Juniper, Palo Alto Networks.
• Familiarity with scripting languages (e.g., Python, Bash) for automation of network security tasks.

PREFERRED SKILLS AND EXPERIENCE:

• Relevant network-specific certifications (e.g., CCNP Security, CCIE Security, JNCIP-SEC, PCNSE).
• Experience in multi-cloud environments and Infrastructure as Code tools like Terraform for network provisioning.
• Knowledge of DevSecOps practices tailored to network security integration.
• Experience building custom tools or integrations for enhancing network security operations.
• Interest in leveraging AI for network threat detection and automation.
• Contributions to open-source projects in network security or related tools.

ITAR REQUIREMENTS:

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

COMPENSATION AND BENEFITS:

$100,000 - $258,000 USD

Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.