Network Security Engineer

$120,000 - $140,000/Yr

Ascendion Group - Richmond, VA

Full-time - Mid Level

Richmond, VA

5,001-10,000 employees

About the position

The Network Security Engineer role at Ascendion focuses on managing and securing network infrastructure, particularly around Data-Based Control Policies (DBCP) and Proxy platforms. The position requires a strong background in network security operations, with responsibilities including policy management, risk assessment, and compliance with enterprise security standards.

Responsibilities

• Ensure all policy and configuration changes to network security platforms align with enterprise standards.
• Assess business justifications for requested changes to minimize risks and vulnerabilities before deployment.
• Maintain and update proxy policies, incorporating new threat levels and categories while ensuring periodic reviews for compliance.
• Work with tools and platforms such as IP address management systems, exception management tools, document repositories, and collaboration platforms.
• Validate connection requests against systems of record, ensuring accuracy and collaborating with customers for necessary corrections.
• Assist customers with connection requests, providing guidance, and troubleshooting technical issues.
• Partner with proxy, network, and firewall engineering teams to resolve technical issues and design solutions for new use cases.
• Support exception remediation activities to ensure secure and compliant network connections.
• Respond promptly to customer inquiries, meeting established response time SLAs.
• Identify and categorize risks and threat levels for internet access requests on proxy platforms.
• Monitor proxy policies to prevent data loss and mitigate risks associated with internet traffic.

Requirements

• At least 2 years of experience in cybersecurity supporting operational network security platforms like internet proxies or network firewalls.
• At least 2 years of experience performing ITIL processes, such as configuration, asset, problem, or change management.
• Knowledge of networking concepts, including HTTPS, TLS, CIDR notation, and RFC 1918 address space.
• Experience with internet proxy platforms such as Broadcom/Symantec and Sophos.
• Familiarity with firewall platforms like Checkpoint and Palo Alto.
• Experience with cloud-based network security services, including AWS Security Groups, AWS VPC, Azure Network Security Groups, and Azure VNET.
• Familiarity with firewall audit and compliance tools like Tufin.

Benefits

• medical insurance
• dental insurance
• vision insurance
• 401(k) retirement plan
• long-term disability insurance
• short-term disability insurance
• 5 personal days accrued each calendar year
• 10-15 days of paid vacation time
• 6 paid holidays and 1 floating holiday per calendar year
• Ascendion Learning Management System