Director – Network Security Engineering Lead

Jefferies is seeking a Network Security  Engineer to join as a Director in the Information Security team with accountability for researching, designing, engineering, implementing, and supporting network security. This role is hands-on and requires deep technical expertise across network security and segmentation, automation, DevOps practices and emerging AI/LLM driven capabilities. The engineer will work closely with our infrastructure, application, and security teams to implement our existing and future network security & segmentation tools, drive automation and self-service models and influence security architecture decisions while protecting the firm’s assets.

The ideal candidate will be knowledgeable with Integrating Automation (Python, LLM’s) into the Network Security stack of tools and services. They will also have experience in: Management of Next-Generation Firewalls (Palo Alto & ZScaler preferred), Network Segmentation (Illumio preferred) WAF, IPS, NDR, NAC,  etc. Most importantly, the ideal candidate must be extremely eager to learn new technologies and able to execute. The role will also have an opportunity to work with subject matter experts not only within security, but across infrastructure, network, development, and business teams.
We look to hire people who are comfortable in working with minimal supervision as part of a team that has consistently delivers ground-breaking and innovative solutions in one of the most exciting and fast-moving areas of the financial markets vertical. We need people who can prioritize and effectively communicate complex issues.

Primary Responsibilities:

The Network Security Engineer will play a critical role in the architecture, development, deployment, and management of Jefferies’s Network Security Program as part of the global information security team. 
 

• Utilize LLM/AI and automation that build Processes to improve/audit/secure the Jefferies environment from a Network Security & Segmentation perspective.
• Work in conjunction with the Networking Security Engineering team on the architecture, deployment, management of Jefferies global network segmentation deployment and strategy with the focus on security architecture
• Deploy and implement network security through the Palo Aito Firewalls, and the llumio product for Applications and Endpoints.
• Work independently and part of a team to analyze and troubleshoot escalated issues for Palo Alto Firewalls, GlobalProtect VPN,  Cloudflare WAF, Network Detection and Response technologies, Network Access Control, ISE, Web-Browser Isolation,  Illumio, Network Security Policy Management, and other related Network Security Platforms. Efficiently troubleshoot/prioritize issues and create a culture of root cause analysis.
• Work closely with the Network Engineering and Operations teams, the Security Engineering and Operations teams to support and integrate security at every level into the network
• Work with Infrastructure and Applications Teams to align the Network Security Policies to the needs and expectations of each Team and the Company as a whole.

Required Background:

• 15+ years of technical experience in networking, network security.
• Experience  with Automation, Python, LLM’s
• Working knowledge on building and implementing a network automation design that automates networking tasks across multiple vendors and platforms.
• Significant experience  with Computer Networks, Firewalls (Palo Alto) including GlobalProtect, Security Policies, Micro-Segmentation(Illumio), WAF (Cloudflare or equivalent), NAC (Cisco ISE or equivalent), , etc
  Proficient with network troubleshooting tools (sniffer, syslog, NetFlow, TCPDUMP, Wireshark etc.)
• Demonstrated knowledge with Intrusion Detection, Incident Response, Data Encryption, Network Access Controls, Threat Management, and proper IT related Security Controls.
• Working knowledge of the OSI model, subnetting, including CIDR notation
• Manage multiple projects simultaneously and can adapt to changing business needs
• Work well with cross functional global and remote teams
• Self-disciplined, self-starter who can provide leadership and mentor others while resolving complex incidents and delivering projects
• Ability to analyze complex problems, propose effective solutions and understand and apply business vision and direction
• Ability to be called upon 24/7 in case of emergencies
• Ability and willingness to learn new things in a fast-paced environment

Desirable Skills:

• Hands-on experience deploying and managing an Illumio environment.
  Illumio Core Assosciate/Specialist/Expert: SaaS or On-Prem, CCNA/CCNP Routing & Switching, Palo Alto Networks Security certifications (PCSNE), Security+, CCNA Security, or CISSP.
• Previous experience with Checkpoint, Fortinet, Proofpoint, Cloudflare, F5 Silverline, SSL Certificate management, Palo Alto Networks Prisma Access, or other Zero Trust/SASE products a plus. 
   

Primary Location Full Time Salary Range of $200,000 - $275,000.