We are seeking a passionate and self-driven Sr. Staff Researcher to join our Cloud-Delivered Security Services team.
Compensation
The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus.
Responsibilities
Design, build, and optimize automation systems for real-time data collection and processing to support threat detection.
Apply advanced AI/ML methods, including anomaly detection and deep learning, to analyze real network traffic for threat detection and mitigation.
Conduct in-depth research on network security countermeasures to identify and mitigate sophisticated cyber attacks.
Proactively collaborate with fellow security researchers to analyze adversarial activities and implement robust, proactive protections.
Continuously learn and apply knowledge of next-generation firewalls and their role in modern network security.
We are seeking an experienced, hands-on network and infrastructure security engineer to own the operational security, reliability, and continuous improvement of networks across multiple company locations. This role is primarily focused on network engineering and defensive security.
Compensation
The salary range in this posting depends on qualifications and experience. Actual compensation may vary, and this job posting is not necessarily reflective of actual compensation that may be earned, nor a promise of any specific pay for any specific employee, which is always dependent on relevant experience, qualifications/education, and other factors including work schedule, shift premiums, and overtime.
Responsibilities
Firewall and perimeter security: Administer, harden, monitor, and troubleshoot next-generation firewalls and edge services; manage rule bases, NAT, IPS/IDS, remote access, VPNs, firmware, certificates, and secure management access.
Proactive vulnerability and patch management: Maintain an accurate inventory of network/security devices; track vendor advisories, exposed services, end-of-life systems, configuration drift, and vulnerabilities. Prioritize and coordinate firmware/security updates, validate remediation, and document exceptions.
Segmentation and secure architecture: Design and maintain VLANs, ACLs, inter-VLAN controls, least-privilege access, site-to-site connectivity, and segmentation of user, server, guest, management, and other higher-risk networks. Reduce lateral-movement opportunities.
Switching, wireless, and network operations: Configure and troubleshoot managed switches, routing, DNS/DHCP dependencies, wireless controllers/APs, authentication, and network performance. Understand the security implications of each component.
Detection, response, and resilience: Review firewall/network telemetry and alerts, investigate suspicious traffic and attempted intrusions, support incident containment, validate backups of device configurations, and test recovery procedures.