{"id":1030179,"url":"https://alion.io/job/arrowstreet-capital-senior-network-security-engineer","title":"Senior Network Security Engineer","company":{"id":704902,"name":"Arrowstreet Capital","domain":"arrowstreetcapital.com","url":"https://alion.io/company/arrowstreet-capital","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":88,"open_postings":17,"ghost_share":0.118,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":60,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Boston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":110000,"max":315000,"currency":"USD","period":"year","gross":null,"usd_annual":315000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AIOps","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Incident Management","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true}],"status":"live","first_seen_at":"2026-09-18T13:37:54Z","employer_posted_date":"2026-09-18","last_verified_at":"2026-11-08T16:10:39Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":50},"description":"Job Overview\nWe are seeking a hands-on Network Security Engineer with deep experience in NexGen firewalls such as Palo Alto Networks, Checkpoint and Fortinet technologies to help operate, secure, and continuously improve Arrowstreet’s network security environment. This role will focus on the administration, tuning, troubleshooting, and lifecycle management of NexGen firewalls and NexGen VPN security policies, threat prevention profiles, URL filtering, VPN connectivity, and related network security controls.\nThe successful candidate will have strong practical knowledge of enterprise networking, firewall policy management, packet-level troubleshooting, secure remote access, segmentation, logging, monitoring, and incident support.\nThis role requires someone who can work independently, partner effectively with infrastructure and security teams, and apply sound judgment when supporting production network security infrastructure.\nResponsibilities\nAdminister, maintain, and improve NexGen firewall infrastructure, including policy rules, NAT, security profiles, zones, interfaces, objects, and routing configurations.\n\nManage management portal configuration, templates, device groups, policy pushes, configuration backups, and rule-base hygiene across the environment.\n\nConfigure and tune threat prevention, antivirus, anti-spyware, vulnerability protection, URL filtering, DNS security, sandboxing, decryption, and logging profiles.\n\nSupport remote connectivity operations, including authentication flows, client connectivity, portal and gateway configuration, troubleshooting, and user-impacting incidents.\n\nLeverage advanced AI modeling within our SIEM platform to monitor firewall logs, traffic patterns, system health, policy hits, blocked activity, and IPS security events. Use AI to associate and contextualize threats detected by these alerts, uncover attack patterns, prioritize incidents based on risk, and identify policy gaps-enabling proactive tuning and continuous improvement of our security posture.\n\nTroubleshoot network security issues across Layer 3 through Layer 7, including routing, NAT, VPN, application identification, SSL decryption, asymmetric traffic, and policy-matching behavior.\n\nPerform packet captures, traffic analysis, and root-cause investigations using vendor tools, CLI diagnostics, logging platforms, and network troubleshooting utilities.\n\nParticipate in firewall rule reviews, access request evaluations, segmentation efforts, cleanup activities, and control validation exercises.\n\nExpand the development and integration of advanced AI-powered features within AI Operations (AIOps) service platforms to proactively detect, diagnose, and remediate network and security issues. Drive this innovation by integrating AIOps solutions to strengthen incident management, optimize firewall performance, and enhance user experience across network capacity and routing.\n\nPlan and execute routine maintenance, including content updates, firmware upgrades, high-availability validation, license checks, and capacity monitoring.\n\nPartner with network engineering, infrastructure, cloud, identity, endpoint, and application teams to ensure security controls are integrated cleanly into enterprise technology changes.\n\nMaintain accurate operational documentation, diagrams, procedures, support runbooks, change records, and evidence for audit or control review purposes.\n\nQualifications\nFive or more years of hands-on experience in network security, firewall administration, security operations engineering, network engineering, or a closely related technical role.\n\nStrong working knowledge of NexGen firewall technologies, including next-generation firewalls, management portals, NexGen VPN, L7 application, User based ID's, security profiles, and logging.\n\nSolid understanding of networking fundamentals, including TCP/IP, subnetting, routing, switching, DNS, DHCP, NAT, VPN, TLS, HTTP/S, and common enterprise network architectures.\n\nExperience implementing and troubleshooting firewall policies, traffic flows, application identification, URL filtering, threat prevention, decryption, and remote access controls.\n\nExperience supporting production change management, maintenance windows, firewall upgrades, rule-base changes, and operational troubleshooting in a business-critical environment.\n\nStrong documentation skills, including the ability to maintain clear runbooks, diagrams, implementation notes, incident summaries, and control evidence.\n\nAbility to communicate effectively with technical teams, service owners, end users, vendors, and security stakeholders.\n\nSelf-motivated, detail-oriented, and able to take ownership of issues through investigation, escalation, resolution, and follow-up.\n\nWillingness to support scheduled after-hours maintenance and participate in incident response activities when required.\n\nFamiliarity with security frameworks, audit expectations, change management, incident response processes, and enterprise control documentation.\n\nUnderstanding of AI concepts and their applications in network and firewall security is a plus.\n\nNexGen Palo Alto Networks, Checkpoint and Fortinet technologies certifications such as PCNSA or PCNSE or equivalent are a plus.\n\nExperience with VPN, cloud network security, SIEM integrations, vulnerability management, EDR/XDR platforms, or Microsoft 365 security telemetry is an asset.\n\nExperience in financial services, asset management, banking, insurance, or another regulated industry is valuable.\n\nAzure/AWS Cloud experience is a plus.\n\nIaaS and automation experiences are a plus.\n\nThe base salary range for this position is $110,000 - $315,000 per year.\nArrowstreet Capital operates a robust talent acquisition program, and we also seek to compensate and reward our employees competitively within our industry and in line with our merit-based culture. Our approach to total compensation includes base salaries and annual discretionary bonuses, as well as a robust benefits package. The determination of a successful candidate’s base salary placement within the listed range will vary based on the candidate’s relevant experience and qualifications (which may also include relevant certifications, credentials and other education), the job responsibilities and scope, the commensurate resulting level of the position and other relevant factors. The listed range is also an estimate, and additional information regarding base salary and other elements of total compensation offered by Arrowstreet Capital to successful applicants will be communicated during the recruitment process.\nArrowstreet Capital is a Boston-based systematic investment firm that manages global equity portfolios for institutional investors around the world.\nAll qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, ancestry, genetic information, age, pregnancy, medical condition, disability, veteran or military status, marital status or any other characteristic protected by federal, state, or local law.\nArrowstreet Capital is committed to working with and providing reasonable accommodations for qualified individuals with disabilities and disabled veterans. If you need a reasonable accommodation for any part of the employment process due to a disability, contact us to discuss the nature of your request and contact information.","description_format":"text","description_chars":7389,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Asset Management & Funds"],"lifecycle":[{"event":"open","at":"2026-09-18T13:37:54Z"}],"visa":[],"liveness":{"score":62,"band":"ok","label":"Likely open","p_open":1,"p_active":0.821,"p_room":0.75,"age_days":50,"expected_fill_days":60,"reasons":["conf:0","win:late"],"computed_at":"2026-11-08T05:47:12Z"},"pay":{"stated_usd_annual":315000,"is_top_pay":true},"html_url":"https://alion.io/job/arrowstreet-capital-senior-network-security-engineer","json_url":"https://alion.io/job/arrowstreet-capital-senior-network-security-engineer.json","meta":{"generated_at":"2026-11-08T18:23:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":38580,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":704902},"rest":"https://alion.io/mcp/rest/get_company?id=704902"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Farrowstreet-capital-senior-network-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Farrowstreet-capital-senior-network-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Farrowstreet-capital-senior-network-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/arrowstreet-capital-senior-network-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Farrowstreet-capital-senior-network-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1030179}},{"tool":"search_jobs","arguments":{"company":"arrowstreetcapital.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1030179},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}