Job Details
Job Id:
Network Security Engineer
Job Type:
Los Angeles CA 
The Network Security Engineer is responsible for planning and implementing firm-wide security measures to protect computer systems, networks and data in the firm. This position reports directly to the Chief Information Security Officer and is expected to stay up-to-date on the latest intelligence, including hackers’ methodologies, in order to anticipate security breaches. The Network Security Engineer will also monitor and prevent data loss and service interruptions by researching new technologies and find innovative ways to effectively protect TCW’s network.

Primary Responsibilities:

Review daily security reports and analyze data to identify potential viruses or threats to the network
Regularly test and monitor the network infrastructure for potential security vulnerabilities
Maintain firm’s security systems by troubleshooting networks, systems and applications to identify and correct malfunctions and other operational difficulties
Follow up on security incidents and perform hardening of systems in the following areas:
* Application security settings
* Data integrity for data in motion and at rest
* Identity & access management
* Infrastructure & operations security
*Privacy & data protection
Research and recommend changes to enhance firm’s systems security
Assist in installation and support of new security systems
Complete other network security related projects as assigned
Provide 24x7 on-call support as required.

Minimum Qualifications:
5+ years of experience supporting network security in enterprise data security environment
Strong knowledge in SIEM, Microsoft, Linux, CheckPoint, Network devices (Juniper & Cisco), McAfee Suite
Solid understanding of security industry standards (ISO 27002, NIST 800 series, etc.)
Previous involvement/experience with GRC
Demonstrated knowledge in Access Controls, Network Security Operations, and Identity Management
Strong analytical and troubleshooting skills
Ability to work independently, as well as collaboratively on cross-technology teams

Desired Qualifications:
Demonstrated knowledge in one or more of the following information security domains:
- Security Governance and Management
- Security Policies and Procedures
- Application Security Controls
- Incident Response
- Security Architectures
- Risk Management
- Privacy and Data Protection
Experience with internal controls, risk assessments, business process, and internal IT control testing or operational auditing (SSAE 16)
Familiarity with Nessus, Kali, FireEye, Juniper Network device, McAfee suite – ePO, DLP, Burp suite, SecureAuth, MobileIron, Maltego, Metasploit, Python, and Citrix suite
CISSP or similar certifications in network security
Excellent verbal and written communication skills