Senior Network Security Engineer

We need to output HTML fragment with sections only if content present. Use

for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must not repeat job title. No Job ID. Remove boilerplate. We need to preserve substantive info. We have job description: includes company overview, role description, responsibilities (Major Accountabilities / Critical Responsibilities with subcategories), Qualifications/Requirements, Additional Skills (list of platforms), Benefits & Culture, Pay Transparency, Accessibility & Accommodations (maybe not needed). We need to decide which sections to include. We have content for About the role? The description includes an overview of company and role. Could put under "About the role". Could also combine with responsibilities? But we need sections only when real content. We have responsibilities: major accountabilities with sub-bullets. We'll output under

Responsibilities

with

• items. Could group subcategories as separate
  maybe but we can just list each bullet. We have Qualifications/Requirements: list of qualifications. We'll output under

  Qualifications

  (or Requirements). The instruction says use headings like Qualifications, Skills, Benefits, Pay, Schedule. So we can have Qualifications and Skills separate. The posting has "Qualifications / Requirements" and then "Additional Skills". So we can put qualifications under Qualifications heading, and skills under Skills heading. Benefits: there is Benefits & Culture section. We'll output under

  Benefits

  . Pay: there is Pay Transparency section with salary range description. We'll output under

  Pay

  . Schedule: not mentioned (no schedule info). So we omit Schedule. Also we might include About the role heading with company overview and role summary. We must not include boilerplate like EEO, equal opportunity, accessibility? The instruction says remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. The Accessibility & Accommodations might be considered legal/EEO? It's about accommodation for disabilities, could be considered EEO. Probably remove it. Also the equal opportunity statement in Benefits & Culture: "We are an equal opportunity employer..." should be removed. Also the Accessibility & Accommodations paragraph should be removed. We need to preserve all substantive information; do not invent or summarize away detail. So we need to keep the benefits list: competitive compensation with performance-based incentive awards, health, and dental insurance, a 401(k) and DC retirement plan, LTD and life insurance, paid vacation, day care reimbursement, tuition assistance for undergraduate and graduate programs, an award-winning wellness program, and much more! Also mention respectful and inclusive environment. We need to keep Pay Transparency paragraph: compensation based on factors, salary range posted reflects good faith estimate, actual compensation may vary, additional compensation possible. We need to keep the role description: reporting to Manager of Security Engineering, lead design etc. That's substantive. We need to keep the responsibilities bullet points. We need to keep qualifications list. We need to keep additional skills list (platforms). Might be long; we should keep them as list items. We must not repeat job title as heading. So no

  Senior Security Engineer

  . We must not put Job ID/requisition numbers as headings. We must output only HTML fragment, no /, no markdown fences. Let's craft. Structure:

  About the role

  Rockland Trust is a full-service commercial bank ... (company overview) ... At Rockland Trust, our employees are at the heart of our success. We foster a collaborative, inclusive, and values driven culture that encourages professional growth, innovation, and work life balance. We are deeply committed to community involvement, financial education, and creating a workplace where individuals can build meaningful, long-term careers. Rockland Trust is hiring a Senior Security Engineer. Reporting to the Manager of Security Engineering, this role will lead the design, implementation, and continuous improvement of security solutions that protect the Bank's data, systems, applications, and cloud environments. This role requires expertise across multiple security domains, including network security, endpoint protection, security monitoring, threat detection and response, identity and access management, privileged access management, cloud security, data protection, email security, and Zero Trust architectures. The Senior Security Engineer will lead strategic security initiatives, enhance the organization's security posture, and support Security Operations Center (SOC) functions through advanced monitoring, threat hunting, incident response, and security automation. This position requires the ability to be on call and available 24x7 as needed to support the organization during security incidents, critical upgrades, or other time-sensitive issues, ensuring continuous protection of the organization's systems, applications, and data. The Senior Security Engineer collaborates closely with Network Engineering, Infrastructure, Cloud Operations, Security Operations, Application Development, Risk, and Compliance teams to identify risks, implement security controls, and drive enterprise-wide security initiatives. This role also serves as a mentor and technical leader for junior team members.

  Then Responsibilities:

  Responsibilities

  • Security Architecture & Engineering: Provide technical leadership for the design, deployment, and lifecycle management of enterprise security technologies; develop and maintain secure architectures for on-premises, cloud, and hybrid environments utilizing Zero Trust principles; design, implement, and maintain next-generation network security controls, secure remote access solutions, and cloud-delivered security services; develop and maintain secure configurations for security platforms, firewalls, security monitoring tools, identity services, and access controls; design and implement network segmentation and micro-segmentation strategies to limit lateral movement and reduce organizational risk; partner with infrastructure and application teams to ensure secure system and application architectures.
  • Threat Detection, Security Operations & Incident Response: Act as a senior technical resource for security incident response efforts, threat containment, remediation, and post-incident reviews; partner with SOC personnel to improve threat detection, monitoring, alerting, and response capabilities; develop and maintain SIEM use cases, correlation rules, dashboards, security metrics, and automated response workflows; conduct proactive threat hunting activities leveraging endpoint, network, cloud, and security telemetry sources; support and enhance endpoint detection and response (EDR/XDR) capabilities across the enterprise; lead investigations related to malware, phishing, insider threats, unauthorized access, and advanced persistent threats.
  • Identity, Privileged Access & Zero Trust: Lead the implementation and ongoing management of identity security, identity governance, and privileged access management controls; ensure least-privilege access principles are implemented across critical systems and applications; support Zero Trust initiatives focused on identity-centric security, continuous verification, and secure access controls; review and enhance authentication, authorization, and privileged account management processes.
  • Cloud, Data & Endpoint Security: Lead implementation and management of cloud security solutions supporting hybrid and multi-cloud environments; oversee endpoint security technologies, ensuring effective prevention, detection, and response capabilities; implement and maintain controls that protect sensitive data across endpoints, networks, cloud platforms, collaboration platforms, and file-sharing solutions; support data classification, data loss prevention (DLP), insider risk management, and data governance initiatives; monitor and secure managed file transfer and business-critical data exchange platforms.
  • Email Security & Information Protection: Oversee email security controls designed to protect against phishing, business email compromise, malware, spoofing, and other messaging threats; enhance the organization's information protection capabilities through advanced threat prevention and data security controls; collaborate with business units to improve user awareness and reduce human-centered security risks.
  • Vulnerability Management & Risk Mitigation: Lead vulnerability management and remediation programs across infrastructure, applications, endpoints, cloud platforms, and security devices; conduct security risk assessments and architectural reviews to identify gaps and recommend mitigation strategies; collaborate with stakeholders to prioritize remediation efforts based on business impact and risk; validate the effectiveness of implemented security controls through testing, assessment, and continuous improvement activities.
  • Collaboration & Leadership: Partner with Network, Infrastructure, Cloud, Security Operations, and Application teams to design and implement secure solutions; serve as a technical mentor for junior security engineers and analysts; provide guidance regarding security architecture, incident response, threat detection, and security best practices; support audits, regulatory reviews, and compliance initiatives.
  Qualifications:

  Qualifications

  • Bachelor's degree in Computer Science, Information Security, Cybersecurity, or related field, or equivalent experience.
  • Minimum of 8 years of progressive experience in information security, including at least 4 years in a senior engineering, lead engineering, or security architect role.
  • Demonstrated expertise across network security, cloud security, endpoint security, identity security, privileged access management, data protection, and threat detection technologies.
  • Hands-on experience administering and supporting SIEM, EDR/XDR, security monitoring, and SOC technologies.
  • Strong knowledge of Zero Trust security principles and enterprise security architecture frameworks.
  • Experience designing and implementing network segmentation or micro-segmentation solutions within enterprise environments.
  • Experience securing cloud-based applications, infrastructure, and SaaS environments.
  • Expertise with privileged access management, identity governance, Active Directory, authentication services, and access control technologies.
  • Strong understanding of email security, data protection, DLP, insider risk management, and information governance concepts.
  • Proven experience leading major security incidents, investigations, and remediation efforts.
  • Strong knowledge of security frameworks and standards such as NIST and CIS Controls.
  • Excellent communication, documentation, leadership, and stakeholder management skills.
  • Relevant certifications such as CISSP, CISM, CCSP, or equivalent are strongly preferred.
  Skills:

  Skills

  • Security Platforms: CrowdStrike Falcon, CyberArk PAM, Proofpoint, Netskope, Qualys VMDR, Palo Alto Networks, Microsoft Defender Suite
  • Security Operations: SIEM, SOC Operations, Threat Hunting, Incident Response, Detection Engineering, Security Monitoring, SOAR, EDR/XDR
  • Identity & Access Security: Active Directory, Microsoft Entra ID, Identity Governance (IGA), Privileged Access Management (PAM), MFA, SSO, Conditional Access, Zero Trust
  • Cloud & Data Security: Azure Security, Microsoft 365 Security, CASB, SSE, ZTNA, DLP, Information Protection, Data Classification, Data Access Governance, Insider Risk Management, Hybrid Cloud Security
  • Network Security: Network Segmentation, Micro-Segmentation, IDS/IPS, VPN Technologies, Secure Remote Access, Firewall Management
  • Governance & Risk: NIST Cybersecurity Framework, CIS Controls, Vulnerability Management, Security Architecture Reviews, Risk Assessments, Compliance Support
  • Leadership & Professional Skills: Technical Leadership, Cross-Functional Collaboration, Project Leadership, Technical Mentoring, Process Improvement, Strategic Planning, Technical Documentation
  Benefits:

  Benefits

  Our goal is to offer our colleagues the most generous benefits package possible. We provide a comprehensive suite of benefits designed to support your health, financial security, and overall well-being. Benefits include competitive compensation with performance-based incentive awards, health, and dental insurance, a 401(k) and DC retirement plan, LTD and life insurance, paid vacation, day care reimbursement, tuition assistance for undergraduate and graduate programs, an award-winning wellness program, and much more! At Rockland Trust, you’ll find a respectful and inclusive environment where everyone has the opportunity to succeed.

  Pay:

  Pay

  Compensation for this role will be based on a variety of factors, including skills, experience, education, and internal equity. The salary range posted reflects the company’s good faith estimate of the range for this position at the time of posting. Actual compensation may vary. In addition to