Network Security Engineer

JOB TITLE Network Security Engineer A Career with point72’S TECHNOLOGY TEAM As Point72 continues to reimagine the future of investing, our Technology group is constantly improving our company’s IT infrastructure, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts experimenting and discovering new ways to provide exceptional end user experience while embracing enterprise agile methodology. We encourage professional development to ensure you bring innovative ideas to our team while satisfying your own intellectual curiosity. Our Technology Infrastructure team engineers and operates the foundational technology platforms that power all of the firm’s applications and businesses. Our disciplines span a broad array of technologies from datacenter infrastructure to large scale cloud services, with the shared goal of providing the most reliable, performant, modern technology platforms to improve time-to-market for our business. We also deliver end-user technology solutions to support the evolving collaboration and productivity needs of our global teams. Our team focuses on innovation and challenging the current state of our infrastructure technology in a fast-paced, dynamic, and collaborative working environment. What you’ll do • Provide level 2/3 engineering support for various network security related solutions, including our network/micro segmentation (Illumio), firewalls (Palo Alto Networks), VPNs (GlobalProtect/Prisma Access), web application firewall (Cloudflare), network detection and response, network access control (Cisco ISE), web browser isolation, network security policy management, and other related network security platforms • Manage advanced security configurations of Palo Alto firewalls locally and globally with the deployed Prisma Access SASE solution • Configure and manage all deployed network security platforms such as firewalls and IDS/IPS, and ensuring they are up-to-date and configured according to industry standards • Collaborate with other technology teams to ensure secure integration of cloud services such as AWS, Azure, and GCP, including implementation of security controls such as access controls, encryption, and network segmentation • Develop and maintain network segmentation policies and practices, including implementing zero trust architecture and micro segmentation • Conduct risk assessments to identify vulnerabilities, perform penetration testing and recommend remediation plans, including vulnerability management programs • Develop training materials and conduct regular training sessions for users on network security best practices and policies • Ensure network security compliance with regulatory standards such as PCI DSS, HIPAA, and GDPR by implementing policies and procedures and performing regular audits What’s REQUIRED • Minimum of 5-7 years of experience in network security within financial services or another highly regulated environment • Demonstrated experience with networking, firewalling (Palo Alto Networks, including User-ID, App-ID, IDS/IPS) WAF, DDoS, NAC, and other related network security related tools and technologies • Knowledge of network segmentation, including micro segmentation and zero trust architecture leveraging tools such as Illumio, Guardicore, VMware NSX (NSX-T), vArmour, Cisco ACI, ShieldX, Unisys Stealth, and/or Zero Networks • Experience with Secure Access Service Edge (SASE) and Cloud Access Security Broker (CASB) architectures leveraging tools such as Prisma Access, zScaler, and/or NetSkope • Knowledge of cloud networking with cloud providers such as AWS, Azure, and/or GCP • Configuration and management in network detection and response (NDR) platforms such as Darktrace, ExtraHop, and/or Vectra • Industry c