Network Security Engineer

PlanetArt’s vision is to be the leading seller of personalized and make-on-demand products worldwide. We provide consumers with unmatched tools and content and an unparalleled end-to-end customer experience that results in high-quality, meaningful finished products and memorable celebrations of life events.

The company’s brands include the popular FreePrints and FreePrints Photobooks apps and the industry leading SimplytoImpress card and stationery site, as well as Personal Creations, CafePress and ISeeMe! Visit www.planetart.com to learn more about our brands.

We have more than 500 team members across multiple offices, primarily in Calabasas CA, San Diego CA, Woodridge IL, Minneapolis, MN and Pleasanton, CA. We also have team members in two company-owned offices in China, as well as in Europe.

Job Overview

PlanetArt is looking for a Network Security Engineer to support the company’s Security Department. The successful candidate will assess network and server security, monitor security events, and investigate alerts across Cisco technologies, Palo Alto firewalls, Windows and Linux servers, and endpoint security tools. This role requires an understanding of SIEM log collection and monitoring, EDR configuration, and SOC alert triage. The engineer will work with infrastructure teams to address security risks; direct configuration of network devices and firewalls is outside the scope of this position.

PLEASE NOTE: Candidates must be local to or willing to relocate to the (office) area as we operate on a hybrid work model (3 days onsite, 2 remote)

What You’ll Do

• →Review Cisco and Palo Alto firewall policies, access controls, segmentation, VPNs, and security logs.
• →Assess Windows and Linux server hardening, patching, authentication, permissions, and audit logging.
• →Verify SIEM collection of firewall, network, server, and endpoint logs; investigate logging gaps.
• →Monitor SIEM and Endpoint Detection and Response (EDR) alerts for suspicious activity.
• →Triage alerts: validate detections, distinguish false positives, assess severity, and escalate incidents.
• →Correlate network, server, identity, and endpoint events to identify affected systems and timelines.
• →Configure EDR policies, detection settings, exclusions, and alerts through approved change procedures.
• →Coordinate incident containment and remediation with infrastructure teams; track issues to resolution.
• →Document investigations and response procedures; evaluate AI use in analysis and detection.
• →Develop, test, and maintain security tools for log analysis, alert triage, and automation.
• →Recommend security improvements to the teams responsible for network and server configuration.

• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent experience.
• 3–5 years of experience in network security, security operations, incident response, or a related role.
• Working knowledge of Cisco technologies and Palo Alto firewalls, including interpreting configurations, policies, and logs; understanding of TCP/IP, DNS, NAT, VPNs, and segmentation.
• Understanding of Windows and Linux server security, including hardening, patching, authentication, permissions, and audit logging.
• Knowledge of Security Information and Event Management (SIEM), including log collection, forwarding, ingestion, parsing, correlation, and alert monitoring.
• Experience with EDR configuration and investigation, including policies, detection settings, exclusions, endpoint telemetry, and response capabilities.
• Ability to triage alerts as a SOC analyst would, gather evidence, prioritize threats, and escalate incidents with clear documentation.
• Strong analytical, troubleshooting, and communication skills, with the ability to collaborate across security, network, and infrastructure teams.
• Understanding of how artificial intelligence (AI) can be integrated into security workflows, including validating AI-generated findings, protecting sensitive data, and maintaining analyst oversight.
• Ability to develop, test, and document security scripts and tools using Python, PowerShell, or similar languages, including integrations with security tool APIs.
• Preferred: Splunk experience, including SPL searches, dashboards, and configuring and tuning alerts, thresholds, schedules, and notifications.

• Work is performed in an office environment with low to moderate noise levels.
• Occasional lifting of up to 20 pounds.
• Position requires regular, continuous use of computer.
• Position requires regular sitting and standing.
• Position requires regular interaction with team members through the following methods: in-person, phone, WebEx, Slack, or email.
• May require occasional travel.
• This is a hybrid position; employees are expected to be in the office three days per week (Monday, Tuesday, and Thursday) with the option of working remotely two days (Wednesday and Friday).