Primary Responsibilities
The Network Security Engineer will play a critical role in the architecture, development, deployment, and management of Jefferies’s Network Security Program as part of the global information security team.
Utilize LLM/AI and automation that build Processes to improve/audit/secure the Jefferies environment from a Network Security & Segmentation perspective.
Work in conjunction with the Networking Security Engineering team on the architecture, deployment, management of Jefferies global network segmentation deployment and strategy with the focus on security architecture
Deploy and implement network security through the Palo Aito Firewalls, and the llumio product for Applications and Endpoints.
Work independently and part of a team to analyze and troubleshoot escalated issues for Palo Alto Firewalls, GlobalProtect VPN, Cloudflare WAF, Network Detection and Response technologies, Network Access Control, ISE, Web-Browser Isolation, Illumio, Network Security Policy Management, and other related Network Security Platforms. Efficiently troubleshoot/prioritize issues and create a culture of root cause analysis.
Work closely with the Network Engineering and Operations teams, the Security Engineering and Operations teams to support and integrate security at every level into the network
Work with Infrastructure and Applications Teams to align the Network Security Policies to the needs and expectations of each Team and the Company as a whole.
Required Background
15+ years of technical experience in networking, network security.
Experience with Automation, Python, LLM’s
Working knowledge on building and implementing a network automation design that automates networking tasks across multiple vendors and platforms.
Significant experience with Computer Networks, Firewalls (Palo Alto) including GlobalProtect, Security Policies, Micro-Segmentation(Illumio), WAF (Cloudflare or equivalent), NAC (Cisco ISE or equivalent), , etc
Proficient with network troubleshooting tools (sniffer, syslog, NetFlow, TCPDUMP, Wireshark etc.)
Demonstrated knowledge with Intrusion Detection, Incident Response, Data Encryption, Network Access Controls, Threat Management, and proper IT related Security Controls.
Working knowledge of the OSI model, subnetting, including CIDR notation
Manage multiple projects simultaneously and can adapt to changing business needs
Work well with cross functional global and remote teams
Self-disciplined, self-starter who can provide leadership and mentor others while resolving complex incidents and delivering projects
Ability to analyze complex problems, propose effective solutions and understand and apply business vision and direction
Ability to be called upon 24/7 in case of emergencies
Ability and willingness to learn new things in a fast-paced environment
Desirable Skills
Hands-on experience deploying and managing an Illumio environment.
Illumio Core Assosciate/Specialist/Expert: SaaS or On-Prem, CCNA/CCNP Routing & Switching, Palo Alto Networks Security certifications (PCSNE), Security+, CCNA Security, or CISSP.
Previous experience with Checkpoint, Fortinet, Proofpoint, Cloudflare, F5 Silverline, SSL Certificate management, Palo Alto Networks Prisma Access, or other Zero Trust/SASE products a plus.
Primary Location Full Time Salary Range of $200,000 - $275,000.
