Senior Network Security Engineer

As a Senior Network Security Engineer at Penumbra, you will play a critical role in determining the company's long term goals. You will be a key member of the Information Security and Compliance team. This is a highly technical, hands-on role. The Sr. Network Engineer will collaborate with Security, IT, Manufacturing, and Engineering teams and be responsible for engineering solutions and supporting operational activities across a hybrid cloud environment. The role responsibilities include ensuring compliance with legal and regulatory requirements and maintaining company security policies, standards, and industry’s best practices.

 

• Ensure the network security of on-premises and cloud-based systems, networks, infrastructure, and services. 
• Enforce secure design standards and specifications for services, systems, and products.
• Responsible for network security solutions, control designs, and enforcement across our environment. 
• Design and perform security assessments, configuration verification, configuration reporting, and other activities to validate control effectiveness. 
• Engage and share results of security audits with the Information Security and business partners to promote changes vital to improve risk posture.
• Collaborate with cross-functional teams to develop and implement security measures supporting on-prem and cloud systems.
• Develop roadmaps, standards, and documentation for technical solutions and existing configurations. Serve as the subject matter expert across the network security environment.
• Respond to and lead, as appropriate, incident response activities for security incidents.
• Collaborate with IT and line of business teams to integrate security into new and existing systems, processes, and initiatives. 
• Manage and configure security services, e.g., firewalls, intrusion detection/prevention systems, threat prevention technologies, VPNs, and other network security appliances. 
• Create and maintain documentation for security procedures, designs, and protocols, conduct security training and awareness for staff as appropriate to the role.
• Stay current with emerging security threats and technologies in the security landscape. Ensure compliance with regulatory requirements and industry standards in the Company’s environment.

 

• A Bachelor’s degree in computer science or related field with 10+ years of related experience, or equivalent combination of education and experience.
• Master’s degree preferred in Computer Science or Engineering with an emphasis in Computer Security or a related field
• Highly analytical and results and process-oriented mindset strongly desired
• 10+ years of hands-on design, enforcement and testing/validation of offensive security, defensive security, systems, and solutions engineering in a large enterprise
• 5+ years of hands-on security experience with cloud platforms, i.e., Azure, AWS or Google Cloud Platform services, automation, or IaC
• 5+ years of hands-on experience network security experience and expert-level knowledge on security technologies such as Palo Alto Firewalls, Cisco ISE, IPS, CASB, VPN management, SAML/OIDC NAC 802.1X, SIEM, SOAR, Radius/TACACS+, directory services
• Proficient with network topologies, routing protocols, i.e., OSPF, BGP, ISIS, SDN, and tunneling technologies.
• Proficient with diagramming and threat models, ability and competency to design and implement controls at scale based on risks
• Proficient in conducting solutions architecture, security design reviews, passionate about security and privacy research, technologies, and methods.
• Possess an understanding of past and emerging security exploits, threat actor motivations, and trends
• Understanding security and compliance frameworks, security engineering, software delivery, and SDLC in a hybrid environment
• Outstanding ethical standards and integrity.
• Excellent communicator with strong oral, written, and interpersonal communication skills
• High degree of accuracy and attention to detail
• Proficiency with Microsoft Word, Excel, Visio, and PowerPoint
• Excellent organizational skills with the ability to prioritize assignments while handling various projects simultaneously.

 

General office environment. Willingness and ability to work on site. May have business travel up to 10%. Requires some lifting and moving of up to 10 pounds Must be able to move between buildings and floors. Must be able to remain stationary and use a computer or other standard office equipment, such as a printer or copy machine, for an extensive period of time each day. Must be able to read, prepare emails, and produce documents and spreadsheets. Must be able to move within the office and access file cabinets or supplies, as needed. Must be able to communicate and exchange accurate information with employees at all levels on a daily basis.