Network Security Engineer

The network security engineer is responsible for design, planning, installation, modification, testing, servicing, security and day to day management of the organization’s enterprise-wide network, switches, connected devices, and all data communications.

As a member of our Security Operations Team, you will collaborate with a global team of engineers to proactively identify and mitigate risks, monitor and respond to security events, respond to and assist in security incidents as a security incident responder, and protect Yotpo's corporate infrastructure and operations. You will also be responsible for creating and maintaining runbooks, assisting in creating automated workflows, and assisting in process refinement and implementation. 

In this role, you will:

• Manage and own the installation, maintenance, administration, and upgrades of the enterprise network infrastructure and network security platforms.
• Manage next generation end-point management and protection platforms including Microsoft Intune, Kandji macOS device management, provisioning and patching management, and CrowdStrike EDR solutions.
• Respond to cyber security incidents by executing the incident response strategy through incident closure, while providing incident updates to the incident commander throughout the incident
• Protect Yotpo while partnering across the organization to drive remediation and ensure Yotpo infrastructure is sufficiently protected
• Manage post-incident activity such as POMO and Corrective Action assignments
• Assist with developing and maintaining security policies, processes and incident response procedures
• Coordinate the building of services, capabilities, integrations, and implementations of technologies to support security operations and incident response

Minimum requirements for the role:

• 5 years of relevant professional network engineering or administration experience, with practical implementation and maintenance of network switching and routing equipment in the data center and in the Cloud
• Minimum 3 years experience administering and maintaining enterprise firewalls, Fortigate, FortiManager and FortiAnalyzer preferred
• Industry recognized IT certifications such as CCNA, CCNP, CCSP preferred 
• Experience patching and managing network configurations to include standard build installations and network system security hardening
• Experience with different routing protocols, OSPF, eBGP, iBGP
• Experience with the following technologies preferred: FW, WAF, ZTNA, IDS, IPS, AV, DNS security
• Network infrastructure (Cisco, Fortinet, etc.)
• Network admission control (NAC) (Aruba ClearPass, Foxpass, Cisco, etc.)
• Wi-Fi deployment and configuration (Cisco)
• Public key infrastructure (PKI)
• Experience assisting in security incident response, including triage, and coordinating across teams to drive incidents to closure
• Familiarity with common security frameworks and standards, including NIST Cybersecurity Framework, ISO 27001, SOC2
• Experience in cloud architecture and security (AWS, GCP) and cloud-based services
• Programming experience in Python; scripting is also desirable
• Autonomy, highly motivated, and self-management skills in the workplace