Security Engineer

Security Engineer role focused on hands-on operations and buildout support for network security systems within the Zoox Information Security organization.

Responsibilities

• Administer next-gen firewall / UTM platforms including policy changes, rule lifecycle and cleanup, software and signature updates, and certificate renewals
• Operate URL filtering and Layer-7 inspection policies, including category tuning and exception handling
• Tune IDS/IPS through signature management, false positive reduction, and escalation of confirmed detections to the security operations team
• Support 802.1X network access control, covering supplicant and authentication troubleshooting, certificate and policy issues, and onboarding new device types
• Support remote access VPN operations, including client troubleshooting, access and split-tunnel policy changes, and availability monitoring
• Work the ticket queue to SLA, providing clear written updates to requesters
• Maintain runbooks, network diagrams, and configuration documentation
• Contribute to 802.1X expansion to additional sites and device classes via design, pilot, phased rollout, and handoff documentation
• Support network segmentation and SSL Decryption enforcement work through policy design and enforcement

Project Responsibilities (Scoped Deliverables)

• Assigned scoped project work in addition to ongoing operations
• Projects are defined with a written statement of work, acceptance criteria, and a target completion date before work begins

Requirements

• 5+ years of network security engineering supporting production environments
• 5+ years of IT systems or application engineering and administration
• Strong working knowledge of all layers of the OSI model
• Hands-on experience with Layer-7 protection techniques including application control, TLS inspection, IPS, URL and DNS filtering
• Direct experience administering enterprise NGFW/UTM platforms (vendors to be run)
• Experience implementing and supporting 802.1X wired and wireless NAC
• Experience with enterprise remote access VPN
• Demonstrated experience operating within a formal change management process
• Clear written and verbal communication; ability to work across Information Security, IT, Product, and Operations teams

Role Details

• Job type: contract
• Location: Sunnyvale, CA (hybrid), three days a week onsite
• Salary: USD 78 per hour

Technologies

• Next-gen firewall, UTM, NGFW/UTM platforms
• URL filtering, Layer-7 inspection policies
• IDS/IPS, TLS inspection, IPS
• 802.1X, network access control (NAC), supplicant/authentication support
• Remote access VPN
• SSL Decryption
• OSI model