Senior Security Engineer - Network Security

Posting Type

Hybrid/Remote

Job Overview

The Senior Security Engineer, Network Security, is a technically deep, hands-on practitioner who elevates the enterprise security function through technical project leadership, cross-functional collaboration, and mentorship. Operating within a layered defense-in-depth program, this engineer takes ownership of complex security technology initiatives spanning design, deployment, and optimization of AI-enabled security technologies at all layers. With a focus on advancing automated orchestration of security operations, detection and response capabilities, and hardening rigor, this role serves as a technical escalation point and force multiplier for the security engineering team. The Senior Security Engineer works closely with the Senior Manager of Enterprise Security, and cross-functional engineering teams to reduce the organization's attack surface, enable threat landscape adaptability, and improve detection and response times across Relativity's technical ecosystem.

This role will have a primary focus on network security engineering, including the design, deployment, and optimization of controls across on-premises, cloud, and hybrid network environments. The engineer will strengthen segmentation, secure access, traffic visibility, threat detection, and network resilience by integrating network security technologies, automation, and telemetry into the broader defense-in-depth and security operations ecosystem.

Job Description and Requirements

Network Security Engineering

• •Lead the design, deployment, configuration, and optimization of network security controls across on-premises, cloud, and hybrid environments.
• •Engineer and maintain capabilities such as firewalls, network detection and response, secure web gateways, DNS security, SASE/SSE, VPN or ZTNA, adaptive access policies, and cloud-native network security controls.
• •Design and validate network segmentation and access-control patterns that reduce attack paths and limit lateral movement.
• •Integrate network telemetry, including flow, DNS, proxy, firewall, and packet-derived data, into SIEM, analytics, and automated response workflows.
• •Develop detections and conduct investigations for command-and-control activity, lateral movement, anomalous traffic, unauthorized access, and data exfiltration.
• •Automate network security configuration, validation, and response through APIs, scripting, infrastructure as code, and policy-as-code practices.
• •Partner with Infrastructure, Cloud, and Engineering teams on secure connectivity, architecture reviews, control implementation, and remediation.
• •Define and monitor network-security measures such as control coverage, telemetry health, segmentation effectiveness, detection efficacy, and remediation performance.

Layered Defense/Defense in Depth

• •Lead the design, deployment and optimization security controls spanning perimeter, network, host, application, identity and data layers, ensuring and maintaining effectiveness of controls at each layer.
• •Contribute to and enforce security control standards and design patterns aligned to industry-recognized frameworks, serving as a subject matter expert during implementation and review.
• •Validate that telemetry from each layer feeds the central analytics platforms and supports 360-degree visibility and appropriate attack surface coverage.
• •Continuously assess effectiveness of enterprise security controls as the ecosystem expands and the threat landscape evolves; propose and implement supplemental or extended coverage.
• •Proactively partner with IT, Engineering and other stakeholders to embed security controls natively, serving as a technical lead on cross-functional initiatives.
• •Provide technical recommendations on security control design aligned to vulnerabilities, risks, issues, and events; support lead-level decisions with well-documented analysis.
• •Lead purple-team exercises and control-efficacy testing to verify depth and resilience under attack conditions.
• •Ensure redundant, complementary security capabilities to prevent bypasses and ensure failure redundancy through all security layers.

Threat Hunting

• •Lead structured threat hunting engagements and purple team exercises in partnership with the Purple Team, analyzing security telemetry to surface anomalous and malicious behavior and communicating findings to relevant stakeholders.
• •Develop, execute and document structured hunts mapped to MITRE ATT&CK and ATLAS techniques and current threat intelligence.
• •Perform exposure analysis on identified vulnerabilities, zero-day, alert telemetry, threat intelligence feeds and notifications from partners and customers and conclude on exploitability risk and/or exposure.
• •Maintain awareness of the evolving threat landscape, adversary TTP’s, and emerging vulnerabilities and their relevance to Relativity’s technical ecosystem and organizational trajectory.
• •Standardize and document hunt methodology, hypotheses, and outcomes; contribute to the maturation of the threat hunting program in partnership with the Purple Team.
• •Convert successful hunts, exposure analysis, purple team findings and alerts into durable, automated detections and containment logic and improved coverage.

AI-Enabled Security Operations

• •Build and maintain SOAR workflows that automate enrichment, triage, containment, and routine response actions; contribute to the broader automation roadmap.
• •Measure and continuously improve the impact of automation on time-based detection, containment and response times to reduce threat actor dwell time.
• •Identify, evaluate and operationalize AI/ML capabilities for semantic anomaly detection, behavioral analytics, alert triage, and prioritization; provide recommendations to stakeholders on platform and tooling decisions.

Data Security

• •Implement and manage data classification, discovery, and data security posture management across cloud and on-premises stores.
• •Deploy and tune data loss prevention controls across endpoints, network, email, cloud and SaaS surfaces.
• •Investigate data key risk indicators associated with data access, exfiltration, and integrating data telemetry into central analytics (SIEM).

Leadership & Mentorship

• •Serve as a technical mentor and day-to-day escalation point for junior and mid-level security engineers, providing guidance on technical approach, tooling, and professional development.
• •Lead technical design and implementation efforts for assigned security initiatives, producing clear documentation, runbooks, and knowledge artifacts for the broader team.
• •Participate in hiring processes including technical interviews and candidate assessments.
• •Represent the security engineering team in cross-functional technical discussions, translating security requirements and findings clearly for both engineering peers and non-technical stakeholders.

Minimum qualifications:

• •4-8 years of hands-on experience in enterprise security engineering, with a focus on network security.
• •Hands-on experience with common security tools such as EDR, XDR, SIEM, CNAPP, CSPM, CWP, etc. and strong knowledge of applicable security technologies at all layers of the OSI model.
• •Demonstrated experience in threat hunting, digital forensics, and/or detection engineering experience, including writing automation scripts and rules for security enforcement and observability.
• •Solid knowledge of industry standard common security benchmarks and frameworks (e.g., MITRE, NIST, etc.)
• •Demonstrated expertise in at least one scripting/automation language (Python, Bash, or PowerShell) applied to modern containerized services, CLI based commands, and/or security specific use cases.
• •Demonstrated experience owning and driving complex security initiatives end-to-end, including cross-functional coordination, stakeholder communication, and delivery of technical outcomes.[BM2.1][CD2.2]
• •Ability to communicate technical findings clearly to both engineering peers a