Engineer, Network Security

At Brightspeed, we are reimagining how people live, work, play and connect by providing fast, reliable internet connections and an awesome customer experience in twenty states throughout the Midwest and South.

Backed by funds managed by Apollo Global Management, our vision is to accelerate the upgrade of copper to fiber optic technologies, bringing faster and more reliable internet service to many rural markets traditionally underserved by broadband providers, while delivering best-in-class customer experience.  

Be a part of the team that will make this vision a reality….designing and building a world class fiber network and creating a customer experience second to none.

Check us out on the web  

We are looking for an Engineer, Network Security to join our growing team. In this role, you will report directly to the Manager, Network Security. This SME role entails safeguarding all networks, including internal, customer-facing, and Telcom networks. You will actively engage in day-to-day security engineering and operations, serving as a technical authority in network security and possessing a deep understanding of security architecture. You will collaborate closely with IT and Network; and also contribute to diverse projects, demonstrating strong interpersonal skills to cultivate inter-organizational relationships. You will have effective management of project activities, including milestones and timelines, is also expected.

The primary functions of the Network Security Team include:

• Design, deploy, configure, and maintain Palo Alto firewalls
• Manage and administer Azure and GCP firewalls
• Conduct regular reviews and audits of firewall configurations
• Design, implement, and maintain DDoS mitigation solutions
• Management of network authentication technologies like RADIUS and TACACS+
• Manage network protection technologies like IDS and Honeypots

This position requires a strong background and understanding of all network and cloud security domains and works in both the Protect and Respond areas of the NIST CSF Framework. You will be required to make strong cyber security decisions while using a business risk analysis approach. Brightspeed is a cloud-first (Azure, GCP, and SaaS) company with a significant data center presence. This model will require you to consider security across a diverse portfolio of assets and networks. Brightspeed is also in a Zero Trust journey, which means the individual should be able to execute a multi-year program while ensuring network security and moving along the maturity curve. 

As an Engineer, Network Security, your duties and responsibilities will include:

• Design, implement, and lead the comprehensive enterprise cybersecurity network protection programs, leveraging advanced expertise in Palo Alto firewalls
• Conduct thorough reviews and design meticulous firewall rules to ensure strict adherence to corporate security policies
• Design, review, and execute robust network security solutions aimed at safeguarding the integrity of Brightspeed networks
• Serve as the SME of the Network Security team, accountable for ensuring the overall security posture of Brightspeed networks. This includes spearheading device hardening initiatives, monitoring baseline configurations, meeting compliance standards, implementing security best practices, and overseeing remediation efforts.
• Assume ownership of all network protection applications and platforms, overseeing their management, upgrades, configurations, changes, and support
• Collaborate closely with the SOC and incident response teams to effectively resolve network security incidents
• Document, implement, and maintain all network security devices to uphold robust security standards while developing and implementing appropriate strategies for information security policies, standards, and procedures
• Engage proactively in organizational projects as needed, offering valuable insights and specialized expertise in network security domains
• Demonstrate exceptional interpersonal skills, including strong verbal and written communication abilities, enabling effective collaboration with diverse stakeholders
• Oversee the management of the enterprise's Network Security Systems, encompassing Firewalls (including cloud firewalls), DDOS mitigations, RADIUS, and TACACS+ authentication support
  Participate in an on-call rotation to ensure 24/7 coverage of network security operations
• Stay current on emerging cybersecurity threat landscape, vulnerabilities, and trends, and recommend proactive measures to enhance our security posture
• Foster a culture of mentorship by guiding Network Security Analysts and actively participating in knowledge-sharing initiatives

WHAT IT TAKES TO CATCH OUR EYE:

• Bachelor’s degree in Computer Science, Engineering, Cyber Security, or related field
• Demonstrated expertise with firewall management and architecture spanning over 5+ years, with expertise in Palo Alto firewalls
• Extensive background encompassing over 5+ years of hands-on experience in the Network Security field with versatility across various domains of network security
• Proficiency in network security hardening methodologies
• Experience in securing Office 365, Azure AD, and Email is essential
• Proficiency with TACACS+, RADIUS, and DDOS mitigations
• Ability to thrive in a fast-paced environment with multiple competing priorities
• Meticulous attention to detail to ensure adherence to policies and standard procedures
• Proven expertise in implementing security measures within GCP and Azure environments
• Exceptional verbal and written communication skills
• Proficient in TCP/IP routing and switching, as well as network design best practices
• Experience in mitigating DDoS attacks, coupled with proficiency in DDoS attack defense, countermeasures, and packet analysis
• Moderate understanding of BGP, OSPF, Switching topologies, and Cloud networking
• Familiarity with zero-trust architectures is advantageous
• Knowledge of incident response procedures is advantageous
• Scripting experience is beneficial

BONUS POINTS FOR:

• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Certified Cloud Security Professional (CCSP)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Ethical Hacker (CEH)

#LI-SS1

WHY JOIN US?

We aspire to contemporary ways of working.

At Brightspeed, we have roles that are designated as remote, hybrid, office or field-based, depending on the position, business needs and individual circumstances. We have a brand new, state-of-the-art corporate HQ in Charlotte, NC and we prioritize hiring talent in the Charlotte area, whenever possible, to make it a truly vibrant destination for our hybrid workforce. We also invest in technology that enables our entire team to stay connected. Why? Because Brightspeed recognizes the value of finding the best talent for the job, wherever they may be.

We offer competitive compensation and comprehensive benefits.

Our benefits and paid time off programs reflect our underlying belief in promoting overall wellness through physical, emotional and financial health. Brightspeed offers a comprehensive benefit program, including competitive medical, dental, vision, and life insurance; an employee assistance program; a 401K plan with company match and a host of voluntary benefits. 

Diversity, equity and inclusion are at the center of our grounding belief in Being Real. 

When we bring our authentic selves to work, everyone is better as a result. A diverse team helps us be fierce advocates for more accessible, inclusive and high-quality internet, because we believe doing so promotes equity in the communities we serve.

Brightspeed is an Equal Opportunity Employer

For all applicants, please take a moment to review our Privacy Notices:  

• Brightspeed’s Privacy Notice for California Residents
• Brightspeed’s Privacy Notice