{"id":3924778,"url":"https://alion.io/job/altera-network-security-engineer","title":"Network Security Engineer","company":{"id":5328,"name":"Altera","domain":"altera.com","url":"https://alion.io/company/altera","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":86,"open_postings":17,"ghost_share":0,"stale_share":0.471,"repost_share":0.118,"time_to_fill_p50_days":53,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Jose, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":133200,"max":192825,"currency":"USD","period":"year","gross":null,"usd_annual":192825},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DNS","optional":false},{"name":"Least Privilege","optional":false},{"name":"NIST CSF","optional":false},{"name":"SIEM","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"BGP","optional":true},{"name":"Python","optional":true},{"name":"TCP/IP","optional":true}],"status":"live","first_seen_at":"2026-11-07T18:13:44Z","employer_posted_date":"2026-11-07","last_verified_at":"2026-11-07T18:13:44Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Job Details:\nJob Description:\nAbout the Role\nAs a Senior Network Security Engineer at Altera, you will serve as a senior technical authority responsible for defining and advancing the enterprise network security strategy, architecture, and technical roadmap across on-premises, cloud, data center, laboratory, campus, WAN, and hybrid environments. You will architect secure, resilient, and scalable network solutions grounded in Zero Trust, least-privilege access, micro-segmentation, and secure-by-design principles, while providing technical leadership across firewalls, ZTNA, SASE, SD-WAN, NDR, IDS/IPS, network telemetry, and security automation.\nThis role combines deep hands-on engineering expertise with strategic architecture ownership and cross-functional influence. You will partner closely with Network Engineering, Cloud, Infrastructure, DevOps, Product Security, and Risk teams to translate security requirements into implementable designs, serve as a senior escalation point for complex security incidents and architecture decisions, and drive measurable improvements in attack-path reduction, segmentation, rule hygiene, visibility, resilience, and overall security posture. You will also help establish engineering standards, reference architectures, governance practices, and repeatable processes while mentoring engineers and communicating complex technical risks and recommendations to both technical and executive audiences.\nResponsibilities:\nTechnical Strategy & Architecture Ownership\nDefine and evolve Altera’s enterprise network security strategy, target-state architecture, technical roadmap, and reusable reference patterns.\nServe as the senior technical authority for complex network security decisions, design exceptions, and modernization initiatives.\nDrive adoption of Zero Trust, least-privilege access, micro-segmentation, and secure-by-design network principles.\nEstablish architecture standards, decision criteria, and measurable outcomes for attack-path reduction, rule hygiene, segmentation coverage, resilience, and network visibility.\nNetwork Security Architecture & Engineering\nArchitect and review secure designs for data center, campus, laboratory, cloud, WAN, remote-access, and hybrid environments.\nDesign segmentation and traffic-control models using security zones, VRFs, next-generation firewalls, secure routing, identity-aware access, and workload-level controls.\nEvaluate and guide adoption of ZTNA, SWG, SASE, SD-WAN, NDR, IDS/IPS, firewall, and network-security automation capabilities.\nPartner with network, cloud, platform, product security, and operations teams to translate security requirements into implementable designs.\nValidate architecture through design reviews, configuration analysis, packet and flow analysis, resilience testing, and post-implementation verification.\nConduct ongoing firewall administration and operations including policy lifecycle management, rule administration, hardening, and exception governance.\nThreat Detection, Monitoring, & Incident Response\nProvide senior technical expertise during investigations involving network intrusion, lateral movement, command-and-control activity, privilege misuse, and data exfiltration.\nDesign and improve network telemetry, logging, detection coverage, and correlation across SIEM, NDR, firewalls, proxies, DNS, VPN, and cloud network services.\nPerform or guide packet capture, flow analysis, protocol troubleshooting, and root-cause analysis for complex security events.\nAct as a technical escalation point during major incidents and translate findings into architecture improvements, detection enhancements, and remediation plans.\nRisk Management, Governance & Compliance\nPerform security architecture and risk assessments for new systems, cloud services, network changes, and exceptions.\nAuthor and maintain network security standards, reference architectures, technical guidelines, and control requirements.\nAlign designs with relevant frameworks and requirements, including NIST CSF, NIST SP 800-53, NIST SP 800-207, and ISO/IEC 27001.\nProvide technical evidence and remediation guidance for audits, assessments, and control-validation activities.\nCross-Functional Collaboration & Communication\nServe as a trusted technical advisor to IT & Engineering teams including Network Engineering, Cloud, Infrastructure, DevOps, Product Security, Risk, Privacy, and Legal stakeholders.\nFacilitate architecture workshops and design reviews, clearly documenting decisions, risks, assumptions, and required controls.\nTranslate complex technical risks into practical, business-aligned recommendations for engineering and executive audiences.\nInfluence delivery teams without direct authority and mentor engineers through technical guidance, peer review, and knowledge sharing.\nCommunication & Influence\nExcellent executive-level communication skills.\nAbility to translate technical concepts into business-aligned recommendations.\nStrong stakeholder management across technical and non-technical teams.\nSalary Range\nThe pay range below is for Bay Area California only. Actual salary may vary based on a number of factors including job location, job-related knowledge, skills, experiences, trainings, etc. We also offer incentive opportunities that reward employees based on individual and company performance.\n$133,200 - $192,825 USD\nWe use artificial intelligence to screen, assess, or select applicants for the position. Applicants must be eligible for any required U.S. export authorizations.\nQualifications:\nMinimum Qualifications:\nBachelor’s degree in Computer Science, Information Technology, Cybersecurity, Electrical Engineering, or a related technical field.\n8+ years of experience in enterprise networking and cybersecurity, including substantial experience designing security architecture for large, distributed environments.\nDemonstrated success serving as a principal engineer, architect, or senior technical authority for complex network-security programs and transformations.\nProven ability to own technical outcomes from discovery and requirements through design, implementation guidance, validation, and operational transition.\nPreferred Qualifications:\nDeep expertise in enterprise network architecture, TCP/IP, routing, switching, BGP, DNS, TLS, proxies, VPN, firewalls, IDS/IPS, segmentation, and Zero Trust.\nHands-on experience with next-generation firewalls, firewall policy governance, ZTNA, SWG, SASE, SD-WAN, NDR, SIEM, and related network-security controls.\nStrong packet capture, protocol analysis, network-flow analysis, and complex troubleshooting skills.\nExperience designing secure network connectivity and controls across on-prem, cloud and hybrid environments.\nExperience with common enterprise platforms such as Cisco, Palo Alto Networks, Tufin, Azure, AWS, or comparable technologies.\nStrong understanding of high availability, failover, capacity, secure management planes, encrypted connectivity, and resilient architecture.\nOperational & Strategic Skills\nExperience in firewall management, administration, and operations including firewall architecture, policy lifecycle management, rule recertification, configuration hardening, and operational governance.\nAbility to identify and reduce attack paths, improve rule hygiene, expand segmentation coverage, and strengthen network telemetry.\nProficiency in network incident response, technical escalation, root-cause analysis, and remediation design.\nAbility to establish repeatable engineering processes, architecture review methods, validation criteria, and operational runbooks.\nExperience automating network-security analysis, policy management, validation, or reporting using Python, APIs, infrastructure-as-code, KQL, or similar technologies.\nJob Type:\nRegularShift:\nShift 1 (United States of America)Primary Location:\nSan Jose, California, United StatesAdditional Locations:\nPosting Statement:\nAll qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.","description_format":"text","description_chars":8330,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Processors, MCUs & AI Chips","EDA Software"],"lifecycle":[{"event":"open","at":"2026-11-07T18:13:44Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 71","filings_12m":71,"filings_prev_12m":39,"green_card_filings_12m":0,"median_offered_wage_usd":157500,"route":null,"cap_exempt":false,"checked_at":"2026-11-07T07:57:00+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":1}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":53,"reasons":["conf:2","win:early","comp:brand"],"computed_at":"2026-11-07T20:47:49Z"},"pay":{"stated_usd_annual":192825,"is_top_pay":true},"html_url":"https://alion.io/job/altera-network-security-engineer","json_url":"https://alion.io/job/altera-network-security-engineer.json","meta":{"generated_at":"2026-11-07T20:47:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33220,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5328},"rest":"https://alion.io/mcp/rest/get_company?id=5328"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faltera-network-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faltera-network-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faltera-network-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/altera-network-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faltera-network-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3924778}},{"tool":"search_jobs","arguments":{"company":"altera.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3924778},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}