Network Security Assessment Engineer

About the role

The Network Security Assessment Engineer will deliver expert-level security services across enterprise network infrastructure, focusing on comprehensive security assessments, threat hunting, and documentation of findings.

Responsibilities

• Assess Cisco ACI fabric policies, review EPGs and contracts, and analyze micro-segmentation gaps to optimize network segmentation.
• Evaluate Cisco Firepower Threat Defense (FTD) configurations, policies, rules, and platform hardening measures.
• Review Check Point firewalls (physical and virtual), including SmartConsole policies, IPS modules, and signatures.
• Conduct security configuration assessments of Cisco routers and switches, including IOS/IOS-XE, control plane protection, and routing protocol security (BGP, OSPF).
• Perform cloud-native security controls review on virtualized Cisco routers deployed in AWS, including security group alignment and route table integrity.
• Analyze Cisco ISE policies, profiling, MAB/802.1X configurations, and segmentation for guest and BYOD networks.
• Review web proxy policies, SSL inspection, and category hygiene for Broadcom/Symantec Blue Coat.
• Conduct DNS/IPAM security assessments, DNSSEC validation, rogue record detection, and access control evaluations.
• Evaluate load balancers (F5 BIG-IQ, LTM, AFM) for security policies, SSL profiles, and RBAC.
• Audit traffic visibility tools such as Gigamon and ExtraHop for filtering, threat detection, and SIEM/SOAR integration.
• Cross-reference network platforms against CVE databases, CISA KEV catalog, and vendor advisories to identify unpatched vulnerabilities.
• Document findings with CVE identifiers, CVSS scores, affected assets, and remediation recommendations.

Requirements

• Minimum of 7 years of enterprise network security engineering experience with demonstrated assessment and threat hunting expertise.
• Hold at least two of the following: CCIE (Security or Enterprise), CCNP Security, Check Point CCSE, F5 301B, AWS Advanced Networking Specialty.
• At least one team member must possess a recognized threat hunting or threat intelligence credential (GCIA, GCIH, GCFE, GCTI, or equivalent).
• Proven experience supporting formal security assessments, red team engagements, and remediation efforts.

Preferred Qualifications

• Experience with Cisco ACI, Firepower Threat Defense, Check Point firewalls, Cisco routing and switching, AWS cloud security, and vulnerability management.
• Knowledge of threat hunting methodologies, CVE analysis, and security gap remediation.
• Certifications in threat intelligence or related fields.

Benefits

Delphi-US offers competitive compensation packages, comprehensive benefits, and opportunities for career growth and development.

Pay

Hourly Pay Range: $80-$100

Schedule

Contract