Network Operations Security Engineer

This is a fully remote position, open to applicants in California.

📋 Description

• Act as the appointed Security Champion for Network Operations.

• Represent Network Operations at the Security Champions Council.

• Convey security requirements, emerging threats, standards, and priorities to operational teams.

• Collaborate with Information Security on risk classification, remediation timelines, escalations, exceptions, evidence, and technical guidance.

• Evaluate CVEs, scanner results, misconfigurations, and exposures impacting production networks and infrastructure services.

• Coordinate remediation strategies with Engineering, DevOps, Cloud Operations, and system owners.

• Monitor operational execution and provide verified closure evidence to Information Security.

• Review designs, releases, and changes that impact production for operational security readiness.

• Assess network devices, connectivity, management interfaces, cloud workloads, containers, Kubernetes, IAM, secrets, and service-to-service access.

• Enhance configuration baselines, privileged access, patching, network segmentation, telemetry, and resilience.

• Engage in security-related production incidents, including scoping, triage, containment, recovery, customer impact analysis, and evidence preservation.

• Refine security alerts, runbooks, escalation processes, and operational response exercises.

• Collaborate with automation engineers to minimize manual security checks and enhance monitoring and response workflows.

• Maintain operational security metrics and integrate lessons learned into monitoring, documentation, change procedures, and production operations.

⛳️ Requirements

• Over 5 years of experience in network/infrastructure security engineering, production operations, cloud infrastructure, SRE, or a closely related technical field.

• Strong grasp of TCP/IP, routing, DNS, TLS, firewalls, segmentation, access controls, and troubleshooting in production settings.

• Hands-on experience evaluating vulnerabilities, CVEs, exposure, risk, remediation planning, and validation.

• Familiarity with vulnerability and cloud security tools.

• Experience handling production incidents, change management, rollback planning, operational readiness, and cross-functional engineering collaboration.

• Working knowledge of cloud environments, containers/Kubernetes, monitoring/logging, and infrastructure security concepts.

• Capable of clearly communicating technical risks and operational trade-offs to Engineering, Operations, and Information Security.

• No visa sponsorship is available.

• Preferred: Experience in telecom/broadband/ISP, CPE, gateways, routers, ONTs, Wi-Fi, ACS, TR-069, TR-369/USP, or fleet/device management.

• Preferred: Experience with GCP or OCI, Kubernetes workload security, IAM, infrastructure-as-code, CI/CD, or DevSecOps collaboration.

• Preferred: Familiarity with tools like Tenable, Qualys, Rapid7, Wiz, Orca, Prisma Cloud, Trivy, SIEM, or similar tools.

• Preferred: Experience in automation/scripting with Python, Bash, or APIs.

• Preferred: Security+, CISSP, CCSP, or GIAC certifications.

🏝️ Benefits

• Equal-opportunity recruitment and an inclusive, diverse working environment.