Principal Security Engineer
$120,500–$231,000 year
On-siteCary, North Carolina, United States or Irving, Texas, United States
Job Summary
Own the network security posture and lifecycle for Broadband access assets, including Edge Routers, switches, and RAN infrastructure. Conduct hands-on monitoring, analysis, and incident response using SIEM tools like Splunk, while leveraging automation and scripting to enhance security operations. Develop and lead execution of network security policies, perform root cause analysis, and manage vulnerability remediation plans across diverse network elements. Discover and inventory all network assets, drive continuous improvement in visibility and telemetry, and establish baseline operations with automated threat detections. Provide technical guidance on vendor plans, develop documentation such as playbooks and diagrams, and mentor team members while collaborating with internal organizations and vendors to improve the overall security posture.
Required Qualifications
- Bachelor's degree or four or more years of work experience
- Six or more years of relevant experience required, demonstrated through one or a combination of work and/or military experience, or specialized training
- Demonstrated leadership skills as a project and/or team lead for cross-functional project teams and vendor management
- Expert understanding of Spine, Leaf, SDN, OTNGN, and Hub & Spoke network architectures
- Expert-level understanding of routing and switching security, including BGP and IGP security, is mandatory, e.g., BGP hijacking, Route injection, and managing complex ACLs
- Hands-on experience with internet-scale data sets such as Netflow, BGP, DNS, and IDS logs
- Fluency in security frameworks, particularly the application of CIS Benchmarks (Level 1 & 2 hardening) and mitigating MITRE ATT&CK Tactics, Techniques, and Procedures (TTPs) on network devices, along with a solid understanding of network security fundamentals
- Expertise in using Python, API, Ansible, or Terraform-type tools to automate and develop custom security 'health checks' on network devices
- Ability to assess and understand complex transport and 5G-SA network architectures
- Understanding of network security fundamental policies and principles
- Experience with utilizing SIEM tools like Splunk for performing analysis
- Minimum of three days per week in the office
Desired Qualifications
- Network Security certifications such as CISSP or other ISC2 certifications
- Routing and Switching certifications like CCNP, CCIE, or equivalent vendor certs
- Experience with Splunk performing data analysis, Dashboard creation, alerting, and automation
- Familiarity with Identity and Access Management (IAM) solutions and SIEM tools
- Demonstrated organization and project management skills
- Knowledge of technical products and systems development lifecycle within a large global enterprise environment
- Effective written, interpersonal, and verbal communication skills
- Ability to work with diverse stakeholder,s including highly technical teams, business owners, and executives
- Strong leadership and mentoring abilities, with experience guiding and developing teams
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.