Senior Security Engineer - Network Security

Posting Type

Hybrid/Remote

Job Overview

Job Description and Requirements

• Lead the design, deployment, configuration, and optimization of network security controls across on-premises, cloud, and hybrid environments.
• Engineer and maintain capabilities such as firewalls, network detection and response, secure web gateways, DNS security, SASE/SSE, VPN or ZTNA, adaptive access policies, and cloud-native network security controls.
• Design and validate network segmentation and access-control patterns that reduce attack paths and limit lateral movement.
• Integrate network telemetry, including flow, DNS, proxy, firewall, and packet-derived data, into SIEM, analytics, and automated response workflows.
• Develop detections and conduct investigations for command-and-control activity, lateral movement, anomalous traffic, unauthorized access, and data exfiltration.
• Automate network security configuration, validation, and response through APIs, scripting, infrastructure as code, and policy-as-code practices.
• Partner with Infrastructure, Cloud, and Engineering teams on secure connectivity, architecture reviews, control implementation, and remediation.
• Define and monitor network-security measures such as control coverage, telemetry health, segmentation effectiveness, detection efficacy, and remediation performance.

• Lead the design, deployment and optimization security controls spanning perimeter, network, host, application, identity and data layers, ensuring and maintaining effectiveness of controls at each layer.
• Contribute to and enforce security control standards and design patterns aligned to industry-recognized frameworks, serving as a subject matter expert during implementation and review.
• Validate that telemetry from each layer feeds the central analytics platforms and supports 360-degree visibility and appropriate attack surface coverage.
• Continuously assess effectiveness of enterprise security controls as the ecosystem expands and the threat landscape evolves; propose and implement supplemental or extended coverage.
• Proactively partner with IT, Engineering and other stakeholders to embed security controls natively, serving as a technical lead on cross-functional initiatives.
• Provide technical recommendations on security control design aligned to vulnerabilities, risks, issues, and events; support lead-level decisions with well-documented analysis.
• Lead purple-team exercises and control-efficacy testing to verify depth and resilience under attack conditions.
• Ensure redundant, complementary security capabilities to prevent bypasses and ensure failure redundancy through all security layers.

• Lead structured threat hunting engagements and purple team exercises in partnership with the Purple Team, analyzing security telemetry to surface anomalous and malicious behavior and communicating findings to relevant stakeholders.
• Develop, execute and document structured hunts mapped to MITRE ATT&CK and ATLAS techniques and current threat intelligence.
• Perform exposure analysis on identified vulnerabilities, zero-day, alert telemetry, threat intelligence feeds and notifications from partners and customers and conclude on exploitability risk and/or exposure.
• Maintain awareness of the evolving threat landscape, adversary TTP’s, and emerging vulnerabilities and their relevance to Relativity’s technical ecosystem and organizational trajectory.
• Standardize and document hunt methodology, hypotheses, and outcomes; contribute to the maturation of the threat hunting program in partnership with the Purple Team.
• Convert successful hunts, exposure analysis, purple team findings and alerts into durable, automated detections and containment logic and improved coverage.

• Build and maintain SOAR workflows that automate enrichment, triage, containment, and routine response actions; contribute to the broader automation roadmap.
• Measure and continuously improve the impact of automation on time-based detection, containment and response times to reduce threat actor dwell time.
• Identify, evaluate and operationalize AI/ML capabilities for semantic anomaly detection, behavioral analytics, alert triage, and prioritization; provide recommendations to stakeholders on platform and tooling decisions.

• Implement and manage data classification, discovery, and data security posture management across cloud and on-premises stores.
• Deploy and tune data loss prevention controls across endpoints, network, email, cloud and SaaS surfaces.
• Investigate data key risk indicators associated with data access, exfiltration, and integrating data telemetry into central analytics (SIEM).

• Serve as a technical mentor and day-to-day escalation point for junior and mid-level security engineers, providing guidance on technical approach, tooling, and professional development.
• Lead technical design and implementation efforts for assigned security initiatives, producing clear documentation, runbooks, and knowledge artifacts for the broader team.
• Participate in hiring processes including technical interviews and candidate assessments.
• Represent the security engineering team in cross-functional technical discussions, translating security requirements and findings clearly for both engineering peers and non-technical stakeholders.

• 4-8 years of hands-on experience in enterprise security engineering, with a focus on network security.
• Hands-on experience with common security tools such as EDR, XDR, SIEM, CNAPP, CSPM, CWP, etc. and strong knowledge of applicable security technologies at all layers of the OSI model.
• Demonstrated experience in threat hunting, digital forensics, and/or detection engineering experience, including writing automation scripts and rules for security enforcement and observability.
• Solid knowledge of industry standard common security benchmarks and frameworks (e.g., MITRE, NIST, etc.)
• Demonstrated expertise in at least one scripting/automation language (Python, Bash, or PowerShell) applied to modern containerized services, CLI based commands, and/or security specific use cases.
• Demonstrated experience owning and driving complex security initiatives end-to-end, including cross-functional coordination, stakeholder communication, and delivery of technical outcomes.[BM2.1][CD2.2]
• Ability to communicate technical findings clearly to both engineering peers and non-technical stakeholders.
• Relevant certification such as Network+, CCSA, ITS-NS, CCT, FCF, PCCET, or equivalent.
• Prior experience mentoring or providing technical guidance to junior engineers.

• Bachelor’s in Computer Science, Information Security, or equivalent experience.
• Experience with AI-enabled SecOps (e.g., detection: UEBA, ML-based alert prioritization, or AI-assisted threat hunting workflows)
• Working knowledge of common cloud environments such as AWS, Azure or GCP.
• Experience contributing endpoint or network security controls to CI/CD pipelines and infrastructure-as-code environments.
• Experience supporting compliance and audit requirements (SOC 2, ISO 27001, HIPAA) from a technical control perspective.