Engineer, Network Security
Charlotte, NC, United States
At Brightspeed, we are reimagining how people live, work, play and connect by providing fast, reliable internet connections and an awesome customer experience in twenty states throughout the Midwest and South.
Backed by funds managed byApollo Global Management,our vision is to accelerate the upgrade of copper to fiber optic technologies, bringing faster and more reliable internet service to many rural markets traditionally underserved by broadband providers, while delivering best-in-class customer experience.
Be a part of the team that will make this vision a reality….designing and building a world class fiber network and creating a customer experience second to none.
We are looking for an Engineer, Network Security to join our growing team. In this role, you will report directly to the Manager, Network Security. This SME role entails safeguarding all networks, including internal, customer-facing, and Telcom networks. You will actively engage in day-to-day security engineering and operations, serving as a technical authority in network security and possessing a deep understanding of security architecture. You will collaborate closely with IT and Network; and also contribute to diverse projects, demonstrating strong interpersonal skills to cultivate inter-organizational relationships. You will have effective management of project activities, including milestones and timelines, is also expected.
The primary functions of the Network Security Team include:
Design, deploy, configure, and maintain Palo Alto firewalls
Manage and administer Azure and GCP firewalls
Conduct regular reviews and audits of firewall configurations
Design, implement, and maintain DDoS mitigation solutions
Management of network authentication technologies like RADIUS and TACACS+
Manage network protection technologies like IDS and Honeypots
This position requires a strong background and understanding of all network and cloud security domains and works in both the Protect and Respond areas of the NIST CSF Framework. You will be required to make strong cyber security decisions while using a business risk analysis approach. Brightspeed is a cloud-first (Azure, GCP, and SaaS) company with a significant data center presence. This model will require you to consider security across a diverse portfolio of assets and networks. Brightspeed is also in a Zero Trust journey, which means the individual should be able to execute a multi-year program while ensuring network security and moving along the maturity curve.
As an Engineer, Network Security, your duties and responsibilities will include:
Design, implement, and lead the comprehensive enterprise cybersecurity network protection programs, leveraging advanced expertise in Palo Alto firewalls
Conduct thorough reviews and design meticulous firewall rules to ensure strict adherence to corporate security policies
Design, review, and execute robust network security solutions aimed at safeguarding the integrity of Brightspeed networks
Serve as the SME of the Network Security team, accountable for ensuring the overall security posture of Brightspeed networks. This includes spearheading device hardening initiatives, monitoring baseline configurations, meeting compliance standards, implementing security best practices, and overseeing remediation efforts.
Assume ownership of all network protection applications and platforms, overseeing their management, upgrades, configurations, changes, and support
Collaborate closely with the SOC and incident response teams to effectively resolve network security incidents
Document, implement, and maintain all network security devices to uphold robust security standards while developing and implementing appropriate strategies for information security policies, standards, and procedures
Engage proactively in organizational projects as needed, offering valuable insights and specialized expertise in network security domains
Demonstrate exceptional interpersonal skills, including strong verbal and written communication abilities, enabling effective collaboration with diverse stakeholders
Oversee the management of the enterprise's Network Security Systems, encompassing Firewalls (including cloud firewalls), DDOS mitigations, RADIUS, and TACACS+ authentication support
Participate in an on-call rotation to ensure 24/7 coverage of network security operations
Stay current on emerging cybersecurity threat landscape, vulnerabilities, and trends, and recommend proactive measures to enhance our security posture
Foster a culture of mentorship by guiding Network Security Analysts and actively participating in knowledge-sharing initiatives
Qualifications WHAT IT TAKES TO CATCH OUR EYE:
Bachelor’s degree in Computer Science, Engineering, Cyber Security, or related field
Demonstrated expertise with firewall management and architecture spanning over 5+ years, with expertise in Palo Alto firewalls
Extensive background encompassing over 5+ years of hands-on experience in the Network Security field with versatility across various domains of network security
Proficiency in network security hardening methodologies
Experience in securing Office 365, Azure AD, and Email is essential
Proficiency with TACACS+, RADIUS, and DDOS mitigations
Ability to thrive in a fast-paced environment with multiple competing priorities
Meticulous attention to detail to ensure adherence to policies and standard procedures
Proven expertise in implementing security measures within GCP and Azure environments
Exceptional verbal and written communication skills
Proficient in TCP/IP routing and switching, as well as network design best practices
Experience in mitigating DDoS attacks, coupled with proficiency in DDoS attack defense, countermeasures, and packet analysis
Moderate understanding of BGP, OSPF, Switching topologies, and Cloud networking
Familiarity with zero-trust architectures is advantageous
Knowledge of incident response procedures is advantageous
Scripting experience is beneficial
BONUS POINTS FOR:
Palo Alto Networks Certified Network Security Engineer (PCNSE)
Certified Cloud Security Professional (CCSP)
Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
Certified Ethical Hacker (CEH)
#LI-SS1
Additional Information WHY JOIN US?
We aspire to contemporary ways of working.
At Brightspeed, we have roles that are designated as remote, hybrid, office or field-based, depending on the position, business needs and individual circumstances. We have a brand new, state-of-the-art corporate HQ in Charlotte, NC and we prioritize hiring talent in the Charlotte area, whenever possible, to make it a truly vibrant destination for our hybrid workforce. We also invest in technology that enables our entire team to stay connected. Why? Because Brightspeed recognizes the value of finding the best talent for the job, wherever they may be.
We offer competitive compensation and comprehensive benefits.
Our benefits and paid time off programs reflect our underlying belief in promoting overall wellness throughphysical, emotional and financial health.Brightspeed offers a comprehensive benefit program, including competitive medical, dental, vision, and life insurance; an employee assistance program; a 401K plan with company match and a host of voluntary benefits.
Diversity, equity and inclusion are at the center of our grounding belief inBeing Real .
When we bring our authentic selves to work, everyone is better as a result. A diverse team helps us befierce advocatesfor moreaccessible,inclusiveand high-quality internet, because webelieve doing so promotesequityin the communities we serve.
Brightspeed is an Equal Opportunity Employer
For all applicants, please take a moment to review our Privacy Notices:
#J-18808-Ljbffr