Network Operations Security Engineer (US - Remote)

The Network Operations Security Engineer serves as the designated Security Champion for Network Operations. The role translates enterprise security requirements, vulnerabilities, and threat information into actionable operational controls and coordinated remediation across production networks, cloud infrastructure, Kubernetes-based services, and device-management environments. The engineer partners with centralized Information Security, Engineering, DevOps, NOC, and Support to reduce operational security risk without compromising service reliability or customer availability. This is an embedded, production-focused security engineering role-not ownership of the enterprise information security program, not a general compliance analyst position, and not a replacement for Engineering or system-owner responsibility to implement technical fixes. Responsibilities Security Champion and Information Security Partnership • Act as the designated Network Operations representative in the Security Champions Council; communicate security requirements, emerging threats, standards, and priorities to operational teams. • Coordinate with centralized InfoSec on risk classification, remediation deadlines, escalations, exceptions, evidence, and technical guidance. • Promote security awareness, practical controls, and repeatable secure operating practices within NOC, Support, and Operational Excellence. Production Vulnerability Remediation • Assess how reported CVEs, scanner findings, misconfigurations, and exposures affect production network and infrastructure services; work with asset and service owners to confirm applicability and customer impact. • Coordinate remediation plans with Engineering, DevOps, Cloud Operations, and system owners; identify maintenance windows, dependencies, service risks, rollback requirements, and validation steps. • Track operational execution and provide verified closure evidence to InfoSec; escalate overdue or high-risk remediation while avoiding a duplicate enterprise vulnerability tracking program. Operational Security and Change Readiness • Review production-impacting designs, releases, and changes for operational security readiness, including access, network exposure, segmentation, logging, monitoring, recovery, and rollback. • Identify negative/failure scenarios and security-sensitive operational dependencies; recommend controls and document residual risks for the appropriate approval authority. • Partner with Change Management and Operational Readiness functions to ensure secure deployment and post-change validation. Network, Cloud and Infrastructure Security • Assess operational security posture of network devices, connectivity, management interfaces, cloud workloads, containers, Kubernetes, IAM, secrets, and service-to-service access within the supported environment. • Work with platform and network engineering owners to improve configuration baselines, privileged access, patching, network segmentation, telemetry, and resilience. • Help identify and reduce risk in CPE/device-management workflows, remote management, firmware rollouts, and associated production services where applicable. Security Incident Readiness and Response • Participate in security-related production incidents, supporting scoping, triage, containment, recovery, customer-impact analysis, and evidence preservation under the enterprise incident response framework. • Coordinate NOC/Support/Engineering response and operational communications with InfoSec; support post-incident reviews and ensure operational corrective actions are completed. • Improve security-relevant alerts, runbooks, escalation paths, and operational response exercises. Automation, Metrics and Continuous Improvement • Partner with Operational Excellence and automation engineers to reduce manual security checks and improve security-related monitoring and response workflows. • Maintain operational metrics for remediation execution, overdue actions, security change readiness, control coverage, and recurring security incidents; feed authoritative data into InfoSec reporting. • Drive lessons learned into monitoring, documentation, change procedures, and production Required qualifications • 5+ years in network/infrastructure security engineering, production operations, cloud infrastructure, SRE, or a closely related technical role. • Strong understanding of TCP/IP, routing, DNS, TLS, firewalls, segmentation, access controls, and troubleshooting in production environments. • Practical experience assessing vulnerabilities, CVEs, exposure, risk, remediation planning, and validation; familiarity with vulnerability and cloud security tools. • Experience with production incidents, change management, rollback planning, operational readiness, and cross-functional engineering coordination. • Working knowledge of cloud environments, containers/Kubernetes, monitoring/logging, and infrastructure security concepts. • Ability to communicate technical risk and operational tradeoffs clearly to Engineering, Operations, and Information Security. Preferred Qualifications • Telecom/broadband/ISP, CPE, gateways, routers, ONTs, Wi-Fi, ACS, TR-069, TR-369/USP, or fleet/device-management environments. • GCP or OCI experience; Kubernetes workload security; IAM, infrastructure-as-code, CI/CD, or DevSecOps collaboration. • Familiarity with Tenable, Qualys, Rapid7, Wiz, Orca, Prisma Cloud, Trivy, SIEM, or comparable tools. • Automation/scripting experience (Python, Bash, APIs); relevant certifications such as Security+, CISSP, CCSP, or GIAC. Success Measures • Timely remediation of Network Operations-owned security actions within InfoSec-defined targets. • Fewer repeat security-related production incidents and unresolved operational exposures. • Security requirements consistently incorporated into production change and operational readiness reviews. • Improved security telemetry, runbooks, escalation readiness, and remediation validation. • Effective participation in the Security Champions Council and clear cross-team accountability. This position is fully remote within North America. Please note that we are unable to offer visa sponsorship for this role. Annual salary range: $120,000 - $175,000 USD