We are seeking an experienced, hands-on network and infrastructure security engineer to own the operational security, reliability, and continuous improvement of networks across multiple company locations. This role is primarily focused on network engineering and defensive security.
Compensation
The salary range in this posting depends on qualifications and experience. Actual compensation may vary, and this job posting is not necessarily reflective of actual compensation that may be earned, nor a promise of any specific pay for any specific employee, which is always dependent on relevant experience, qualifications/education, and other factors including work schedule, shift premiums, and overtime.
Responsibilities
Firewall and perimeter security: Administer, harden, monitor, and troubleshoot next-generation firewalls and edge services; manage rule bases, NAT, IPS/IDS, remote access, VPNs, firmware, certificates, and secure management access.
Proactive vulnerability and patch management: Maintain an accurate inventory of network/security devices; track vendor advisories, exposed services, end-of-life systems, configuration drift, and vulnerabilities. Prioritize and coordinate firmware/security updates, validate remediation, and document exceptions.
Segmentation and secure architecture: Design and maintain VLANs, ACLs, inter-VLAN controls, least-privilege access, site-to-site connectivity, and segmentation of user, server, guest, management, and other higher-risk networks. Reduce lateral-movement opportunities.
Switching, wireless, and network operations: Configure and troubleshoot managed switches, routing, DNS/DHCP dependencies, wireless controllers/APs, authentication, and network performance. Understand the security implications of each component.
Design, dimension, and optimize MTNN’s FTTH Core (Data & Voice) network architecture and capacity, support planning and deployment of new solutions, conduct feasibility studies, and maintain network modeling tools.
Responsibilities
Design and dimension the FTTH Core (Data & Voice) network
Support planning and design of FTTH Core architecture
Implement optimal network topology for FTTH Core platforms
Plan evolution of Data/voice solutions
Provision network capacity for FTTH Core elements
Requirements
First Degree in Electrical, Electronics, Computer, Systems Engineering or any relevant science courses
Lead research and development of protocol and file decoders for Palo Alto Networks’ next‑generation firewall, integrating detection solutions and building internal tools to support network security services.
Compensation
$172,100.00 - $278,300.00/yr
Responsibilities
Research networking protocols and related application networking behavior
Research file types and file properties
Research and provide defense mechanisms against popular protocol/firewall evasions
Develop protocol and file decoders, and integrate the detection solutions with Palo Alto Networks products
Build common services to support various network security services
Requirements
BS/MS in Computer Science or Electrical Engineering or equivalent Military experience
Security Researcher Intern to join our Cloud-Delivered Security Services team, developing and refining security content and automation systems.
Compensation
The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus.
Responsibilities
Develop an understanding of next-generation firewalls and their application in modern network security.
Build and enhance automation systems for efficient data collection and real-time processing to support threat analysis.
Apply AI/ML techniques to analyze live network traffic for the detection, analysis, and mitigation of emerging security threats.
Research and propose effective network security countermeasures to identify and neutralize various cyber-attack vectors.
Proactively collaborate with senior security researchers to analyze adversarial tactics and contribute to the implementation of proactive security protections.
Detection, response, and resilience: Review firewall/network telemetry and alerts, investigate suspicious traffic and attempted intrusions, support incident containment, validate backups of device configurations, and test recovery procedures.