Network Security Engineer

Network Security Engineer – CybersecurityLocation: Three days a week at a Guardian office on New York, NY, Holmdel, NJ, Bethlehem, PA or Stamford, CT. (Go for local candidates in these states only) Term: Full Time MoI: Video and Final F2FKEY FOCUS: Search on Network Security, SASE and PK1 Cisco IDS, IPS, ACLs Network Segmentation Cloud proxyOverview: Are you passionate about protecting digital assets and ensuring robust cybersecurity? We are seeking a dedicated and motivated Cybersecurity Network Engineer to join our team. Collaborate with engineers to secure network, cloud, and system infrastructure through implementing controls and monitoring.You Will:o Work with engineering teams to define and fulfill operational requirements while upholding the highest standards of security protocols and compliance.o Monitor and maintain security for network, cloud, PKI, and system environments, implementing controls to safeguard information systems, applications, and infrastructure.o Ensure access control systems effectively prevent unauthorized modification, destruction, or disclosure of sensitive information.o Monitor, assess, respond to security risks in systems, networks, and clouds; find causes, identify threats, suggest solutions according to policies.o Conduct security risk and vulnerability assessments, as well as business impact analyses for threats of moderate complexity in both on-premises and cloud environments.o Provide expert troubleshooting and support for complex security-related issues that have been advanced, including those beyond the Help Desk's scope.o Develop detailed reports to pinpoint security risks and propose suitable mitigation strategies.o Oversee and resolve user access issues, enforce least-privilege principles, and develop solutions to prevent future access-related security concerns.o Assist with internal and external audits, providing necessary evidence and contributing to change management reporting and security impact assessments.o Manage cloud security services like cloud proxy/VPN and XDR platforms for secure access and threat detection.o Support PKI infrastructure, including certificate lifecycle management and secure key handling.o Operate and monitor cloud network components and integrations, applying Secure Access Service Edge (SASE) principles to protect distributed users and cloud access.o Implement and maintain network security controls such as firewalls, IDS/IPS, segmentation strategies, and enforce access control policies (ACLs, NACLs, identity-based segmentation) across hybrid environments.o Investigate, contain, and resolve network-based security incidents, and contribute to comprehensive post-incident reviews.o Collaborate with network and cloud engineering teams to ensure the secure design and implementation of cloud-native and hybrid solutions.You Have:o Proven experience in information security, cybersecurity operations, or a related field.o Hands-on experience with cloud-based security services, network security controls, and incident response.o Familiarity with SASE, firewalls, IDS/IPS, PKI infrastructure, and certificate management.o Strong analytical and problem-solving skills, with the ability to assess complex security risks and develop effective mitigation strategies.o Excellent communication and collaboration abilities.o Relevant certifications (e.g., CISSP, CISM, CEH, or similar) are a plus.