Network Security Engineer

Network Security Engineer Firewall Rule Optimization

Location: Jersey City, NJ / New York, NY (Hybrid 3 days/week onsite)

Relocation candidates- Not accepted

Position Overview

Years of incremental change can leave an enterprise network with broad firewall rules and routing paths that bypass proxy controls. This role is focused on finding those exposures, tightening them, and doing so safely. You will use rule-analysis tooling to identify overly permissive rules, work with application and infrastructure owners to validate required access, and implement changes under formal change control. The US-based engineer will cover the Eastern time zone portion of the follow-the-sun cycle and partner closely with counterparts in the UK and India.

Key Responsibilities

• Review and tighten overly permissive firewall rules using AlgoSec analysis, including rule usage, risk, and shadowed or redundant rule findings

• Right-size rules by narrowing sources, destinations, services, and ports based on observed traffic and validated application requirements

• Identify routing configurations that allow traffic to bypass proxy controls, and drive remediation with the network and infrastructure teams

• Analyze traffic flows across Layer 4 through Layer 7 to confirm the business need for access before rules are modified or removed

• Partner with application and infrastructure owners to review proposed changes, confirm impact, and validate results after implementation

• Prepare and execute changes under formal change-control processes, including implementation plans, testing, and rollback procedures

• Document rule changes, rationale, and validation results so work can be handed off cleanly between India, UK, and US team members each day

• Participate in regular follow-the-sun handoffs and status updates, tracking progress and open items across regions

• Align rule and routing remediation with the target-state security design, flagging conflicts or gaps to the architecture and security teams

• Support audit and risk review requests by providing evidence of changes, approvals, and outcomes

Required Qualifications

• Hands-on firewall engineering and rule-base optimization experience in an enterprise environment

• Strong routing knowledge and solid understanding of Layer 4 through Layer 7 traffic behavior

• Ability to analyze traffic flows and determine the least-privilege access an application actually needs

• Experience working within formal change-control processes in a regulated enterprise

• Clear written communication and the discipline to document work for handoff across time zones

Preferred Qualifications

• Experience with AlgoSec or similar firewall rule-analysis and policy-management tools

• Proxy experience, such as Blue Coat/Symantec or Skyhigh

• Financial services background