Jr. Network Security Engineer

Jr. Network Security Engineer

Onsite 5 days/week- Nashville TN (Local Only)

The Network Security Engineer will be responsible for developing recommendations related to maintaining, monitoring, troubleshooting, and optimizing the network infrastructure and cybersecurity tools that supports the safe and efficient operation of the client's transportation systems. The role focuses on network devices, security tools, and communication links within and between Transportation Management Centers (TMCs), and headquarters.




This position requires a strong understanding of core networking and cybersecurity principles, best practices, and a demonstrated interest in intelligent transportation technologies.







Key Responsibilities

• Develop and Implement Backup Strategy
• Design and Implement an Asset Inventory and Management Program
• Enable and Centralize Logging
• Eliminate shared passwords and deploy password management solution
• Deploy vulnerability scanning on OT infrastructure
• Draft Initial Continuity of Operations Plan (COOP)
• Respond to and resolve network incidents, including connectivity issues, performance degradation, and security alerts.
• Perform routine maintenance tasks such as firmware updates, configuration backups, and equipment replacement support.
• Assist in the configuration and management of firewalls, intrusion detection and prevention systems (IDS/IPS), and other security appliances.
• Document network configurations, standard procedures, and operational guidance.
• Support vulnerability scanning and remediation efforts.
• Assist maturing the cybersecurity incident response plans.
• Prepare detailed reports of security incidents and network anomalies for appropriate authorities, including the FBI and headquarters.
• Work closely with client lead and other cybersecurity team members to support security and compliance.
• Collaborate to support the integration of new intelligent transportation system devices and applications.

Required Qualifications

• Bachelor's degree in computer science, information technology, or a related field, or equivalent experience.
• Strong understanding of TCP/IP , routing, switching , and network security principles.
• Proficiency configuring and troubleshooting LANs, VLANs , trunks, spanning tree, IP subnetting, routing protocols, and wireless networking
• Proven experience in network administration and troubleshooting.
• Ability to perform and analyze packet traces.
• Proficiency with firewalls to configure and troubleshoot security rules, NAT, threat protection, and logging
• Experience with IDS/IPS and SIEM tools , security event triage, and escalation.
• Familiarity with network monitoring tools .
• Familiarity with vulnerability scanning tools.
• Display a strong grasp of key cybersecurity and IT concepts such as:
• Cloud Concepts : SaaS, IaaS, PaaS, hybrid, on premises
• Cybersecurity Principles : defense in depth, least privilege, CIA triad
• Cybersecurity Technology : NAC systems, next-generation firewalls, VPNs, micro segmentation, IAM, vulnerability management, encryption
• IT principles : High availability, clustering, failover, single point of failure, dynamic routing, classification, tagging
• Server and Compute : Client Server, virtualization, clustering, failover, backups, imaging

Preferred Qualifications

• Data classification principles and enforcement
• Understanding of cybersecurity frameworks such as NIST CSF, CIS Critical Controls
• Experience supporting operational technology or critical infrastructure environments.
• Experience working with distributed networks that support transportation, public sector, industrial, or field-based operations.
• Familiarity with cybersecurity incident response and escalation procedures.
• Experience balancing network security requirements with system availability and operational continuity.
• Hands-on familiarity with modern network security monitoring, event analysis, and infrastructure documentation practices.

Core Knowledge Areas

• TCP/IP networking, subnetting, routing, and switching.
• VLAN design, segmentation, and troubleshooting.
• Network security fundamentals, including firewalls, IDS/IPS, access control, and secure configuration.
• SIEM monitoring, security event triage, and escalation.
• Network performance monitoring and availability management.
• Threat intelligence integration and operational awareness.
• Incident response support for network disruptions, malicious activity, and denial-of-service conditions.