Network Security Engineer 2 - Networks

Network Security Engineer II

Position Summary

The Network Security Engineer II is responsible for supporting, maintaining, and improving the security of Manhattan’s on-premises and cloud environments. This role focuses on operational security engineering, network security administration, incident response, access control, certificate and secret management, and continuous risk reduction.

This position operates within a Tier 2 security engineering model and supports a broad range of security services, including VPN services, firewall policy administration, certificate-related activities, Cisco ISE, and security incidents managed through ServiceNow.

Key Responsibilities

• Monitor, investigate, and respond to security events, alerts, and operational incidents, and support remediation efforts in alignment with established service level agreements.
• Support and troubleshoot network security services, including remote access VPN, site-to-site VPN tunnels, firewall policy changes, URL filtering or allowlisting requests, and access control workflows.
• Configure, maintain, and troubleshoot Cisco security technologies, including Cisco ISE, firewalls, IDS/IPS, VPN, and related tools used to secure enterprise connectivity and user or device access.
• Assist with reviewing infrastructure and application changes for security risk, help identify corrective actions, and help maintain secure configurations across on-premises and cloud platforms.
• Support certificate, secret, and identity-integrated security processes across enterprise platforms, including cross-functional controls.
• Create and maintain accurate technical documentation, incident records, implementation notes, and operational handoff details within but not limited to ServiceNow and related support processes.
• Collaborate with Tier 1 and Tier 3 security teams, infrastructure teams, directory services, cloud teams, and application teams to resolve issues and implement secure solutions.
• Participate in continuous improvement efforts to strengthen operational efficiency, standardization, and security posture across supported services.

Typical Technology Exposure

• Cisco ASA and Cisco Firepower Threat Defense (FTD) firewall administration and policy management
• Remote access VPN and site-to-site IPsec VPN configuration and troubleshooting
• Cisco Identity Services Engine (ISE)
• Cisco Umbrella / Secure Access
• Splunk or similar SIEM platforms
• Cisco Secure Cloud Analytics (XDR)
• Cloud network security in Azure
• Certificate and client secret lifecycle support
• ServiceNow-based incident, request, and escalation handling

Required Qualifications

• 3 to 4 years of hands-on experience in network security engineering, network security operations, or a closely related cybersecurity role
• At least 1 year of experience with cloud security, cloud networking, or cloud platform security concepts
• Strong understanding of TCP/IP, subnetting, routing, switching, and core network security principles
• Hands-on troubleshooting experience with IPsec VPN and remote access VPN technologies
• Good understanding of encryption concepts, certificate lifecycle management, authentication flows, and secure access principles
• Experience working with Cisco security technologies such as ISE, firewalls, IDS/IPS, and VPN
• Familiarity with cloud-integrated security operations and hybrid enterprise environments
• Ability to troubleshoot security issues with guidance as needed and coordinate resolution across multiple teams

Preferred Qualifications

• Experience with network or security automation
• Experience working in an enterprise operational environment with formal incident, request, and change processes
• Familiarity with Microsoft cloud security integrations and identity-dependent security services
• Experience with vulnerability remediation coordination and operational risk reduction activities

Core Competencies

• Strong written and verbal communication skills
• Ability to manage tasks independently and escalate appropriately
• Ability to work effectively across multiple technical teams in a fast-paced support environment
• Strong attention to detail in incident and request handling
• Ability to handle confidential and sensitive information with discretion and professionalism

Education and Certifications

• Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or a related field, or equivalent practical experience
• Cisco security or networking certifications such as CCNA, CCNP Security, or equivalent are preferred