Senior Security Engineer

Posting Type

Hybrid/Remote

Job Overview

The Senior Security Engineer, Network Security, is a technically deep, hands-on practitioner who elevates the enterprise security function through technical project leadership, cross-functional collaboration, and mentorship. Operating within a layered defense-in-depth program, this engineer takes ownership of complex security technology initiatives spanning design, deployment, and optimization of AI-enabled security technologies at all layers. With a focus on advancing automated orchestration of security operations, detection and response capabilities, and hardening rigor, this role serves as a technical escalation point and force multiplier for the security engineering team. The Senior Security Engineer works closely with the Senior Manager of Enterprise Security, and cross-functional engineering teams to reduce the organization's attack surface, enable threat landscape adaptability, and improve detection and response times across Relativity's technical ecosystem.

This role will have a primary focus on network security engineering, including the design, deployment, and optimization of controls across on-premises, cloud, and hybrid network environments. The engineer will strengthen segmentation, secure access, traffic visibility, threat detection, and network resilience by integrating network security technologies, automation, and telemetry into the broader defense-in-depth and security operations ecosystem.

Job Description and Requirements

Network Security Engineering

• Lead the design, deployment, configuration, and optimization of network security controls across on-premises, cloud, and hybrid environments.
• Engineer and maintain capabilities such as firewalls, network detection and response, secure web gateways, DNS security, SASE/SSE, VPN or ZTNA, adaptive access policies, and cloud-native network security controls.
• Design and validate network segmentation and access-control patterns that reduce attack paths and limit lateral movement.
• Integrate network telemetry, including flow, DNS, proxy, firewall, and packet-derived data, into SIEM, analytics, and automated response workflows.
• Develop detections and conduct investigations for command-and-control activity, lateral movement, anomalous traffic, unauthorized access, and data exfiltration.
• Automate network security configuration, validation, and response through APIs, scripting, infrastructure as code, and policy-as-code practices.
• Partner with Infrastructure, Cloud, and Engineering teams on secure connectivity, architecture reviews, control implementation, and remediation.
• Define and monitor network-security measures such as control coverage, telemetry health, segmentation effectiveness, detection efficacy, and remediation performance.

Layered Defense/Defense in Depth

• Lead the design, deployment and optimization security controls spanning perimeter, network, host, application, identity and data layers, ensuring and maintaining effectiveness of controls at each layer.
• Contribute to and enforce security control standards and design patterns aligned to industry-recognized frameworks, serving as a subject matter expert during implementation and review.
• Validate that telemetry from each layer feeds the central analytics platforms and supports 360-degree visibility and appropriate attack surface coverage.
• Continuously assess effectiveness of enterprise security controls as the ecosystem expands and the threat landscape evolves; propose and implement supplemental or extended coverage.
• Proactively partner with IT, Engineering and other stakeholders to embed security controls natively, serving as a technical lead on cross-functional initiatives.
• Provide technical recommendations on security control design aligned to vulnerabilities, risks, issues, and events; support lead-level decisions with well-documented analysis.
• Lead purple-team exercises and control-efficacy testing to verify depth and resilience under attack conditions.
• Ensure redundant, complementary security capabilities to prevent bypasses and ensure failure redundancy through all security layers.

Threat Hunting

• Lead structured threat hunting engagements and purple team exercises in partnership with the Purple Team, analyzing security telemetry to surface anomalous and malicious behavior and communicating findings to relevant stakeholders.
• Develop, execute and document