NETWORK SECURITY ENGINEER - VP

$140,000 - $222,500/Yr

State Street Corporation - Kansas City, MO

Full-time - Senior

Kansas City, MO

Securities, Commodity Contracts, and Other Financial Investments and Related Activities

About the position

The Network team is seeking a seasoned Network Security Engineer to contribute to the global network team and develop strategies that support the transformation to cloud services and a Zero Trust security framework. This role presents a tremendous opportunity to join a global organization and participate in the development of next-generation security architecture. Ideal candidates will possess a well-rounded knowledge of network perimeter security, network segmentation, zero trust network access, and cloud security. As a Network Security Engineer, you will be responsible for engineering and supporting all network security technologies. This includes evaluating new security technologies to enhance efficiencies, improve security posture, and meet business objectives. You will collaborate with your team to create and implement security controls, defenses, and countermeasures to intercept and prevent both internal and external attacks. Your experience with cloud security solutions, including cloud segmentation, perimeter security, and Cloud Access Security Brokers (CASBs), will be crucial. You will also provide technical leadership across the IT organization in support of network security initiatives, develop and support the network segmentation and zero trust strategy across the global organization, and provide training and new technology overviews to engineering colleagues. Additionally, you will be responsible for developing, documenting, and updating standards documentation, serving as the final technical escalation point of contact for network security technologies.

Responsibilities

• Responsible for engineering and supporting all network security technologies.
• Evaluate new security technologies to improve efficiencies, security posture, and meet business objectives.
• Collaborate with the team to create and implement security controls, defenses, and countermeasures to prevent attacks.
• Experience with cloud security solutions including cloud segmentation, perimeter security, and CASBs.
• Provide technical leadership across the IT organization in support of network security initiatives.
• Develop and support the network segmentation and zero trust strategy across the global organization.
• Provide training and new technology overview to engineering colleagues.
• Develop, document, and update standards documentation.
• Act as the final technical escalation point of contact for network security technologies.

Requirements

• Bachelor's degree or equivalent desired.
• 10+ years' experience in the network security field.
• Technical knowledge in Next Gen Firewalls (Palo Alto/Illumio preferred).
• Experience with Network Intrusion Detection and Prevention Systems.
• Foundational knowledge in Routing and Switching.
• Knowledge of Security Information and Event Management (SIEM).
• Experience with packet decoding and traffic flow analysis.
• Familiarity with Zero Trust Network Access Solutions (Zscaler preferred).
• Experience with SSL VPN Solutions.
• Foundational knowledge in Load Balancing (F5 LTM, GTM, ASM preferred).
• Knowledge of Web Application Firewalls and data loss prevention technologies.
• Foundational automation/IaC knowledge (Terraform/Python experience preferred).
• High-level certification in a major technology area preferred (CCIE, CISSP, Certified Ethical Hacker (CEH), etc.).
• Skilled in analyzing and monitoring network security solutions.
• Demonstrated ability to work under pressure when resolving complex issues with strict deadlines.
• Excellent written, communication, and presentation skills.
• Ability to communicate and collaborate effectively with team members and superiors.
• Ability to lead and execute large, complex projects related to new technology integration.

Nice-to-haves

• Experience with cloud security solutions including cloud segmentation and CASBs.
• High-level certification in a major technology area (CCIE, CISSP, CEH, etc.).
• Foundational automation/IaC knowledge (Terraform/Python experience preferred).