Senior Cyber Security Network Engineer

As a Senior Cyber Security Network Engineer, you will be responsible for ongoing maintenance and operations of current tools so that their abilities are actualized. Additionally, there will be significant uplift to modernize a variety of tools and implement new means of visualizing egress and ingress traffic. The ability to implement novel solutions and platforms is critical. The primary focus will be on NielsenIQ-hosted solutions but will also incorporate various tools across a diverse array of cloud platforms with a strong focus on Azure solutions.

This position will involve working closely with Enterprise IT, network infrastructure teams and the Governance Risk and Controls team to deploy and operate various tools.

What you will do

• Proactively identify opportunities to improve our security controls, enhance threat detection and reduce attack surfaces
• Develop and deploy innovative network-based security solutions
• Spearhead POC (Proof of Concept) activities and participate in decision making for new product analysis and selection
• Review network security requests and modifications; advise and consult with requestors as necessary
• Work with Enterprise IT to drive best practices across global networks
• Write, create, and update documentation for internal teams, technical users, and end users
• Provide secondary support for endpoint software (EDR, AV, content filtering, etc.) issues, as and when required
• Interface with vendors to drive product enhancements as well as issue resolution in a timely manner
• Create and present training materials for non-technical users
• Provides mentorship and guidance to junior members of the team
• Act as an escalation point for high severity issues for timely resolution
• Drive, as well as support, organization-wide campaigns to drive security foundations into all technology

Requirements

• Hands-on experience with network analysis and security tools such as packet capture and analysis, firewalls, web application firewalls, web proxy/SWG, routing/switching, DNS, application layer networking, transport layer security (encryption/decryption), certificate handling and wireless technologies
• Hands-on experience with tools such as F5 WAF, Azure WAF, Defender Network Protection and ZScaler
• Expert level understanding of the OSI model
• Fundamental knowledge of endpoint security tools (EDR, AV, etc.), how they operate and what their role is in defense-in-depth
• Ability to directly support incident response teams and participate in ongoing IR as required
• Knowledge of sophisticated hacking techniques, malicious actors, IOCs, TTPs and the ability to translate intelligence into action is desirable
• Demonstrated experience with change management in enterprise production environments
• Knowledge of scripting languages such as PowerShell, Python
• Ability to manipulate large datasets using tools such as Excel, PowerBI, SQL
• Knowledge of MITRE ATT&CK and NIST CSF frameworks
• Self-starter, technology and security hobbyist, enthusiast
• Bachelor’s degree in a technical field including Computer Science, Information Systems, Math, Physics, Science or similar desired - experience in government, military or in other capacities with similar focus can be substituted