Sr. Network Security Engineer (Remote)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you. ​​About the Role: CrowdStrike is looking for a Senior Network Security Engineer who has a solid track record of building and operating hyper-scale hybrid cloud networks. In this role, you will develop and deploy the overall network security posture for the network edge, backbone and data centers, including DDoS defense and internet edge protection at scale. In addition, you will improve management, visibility and automation of our network security practices and changes. You will work collaboratively with other leads to own and drive security related major initiatives and drive strategy from concept, funding, implementation and support. This role will require the candidate to periodically undergo and pass additional background and fingerprint check(s) consistent with government customer requirements. What You’ll Do: Be the hands-on subject matter expert for Audit/Compliance, DDoS, VPNs, network segmentation spanning network infrastructure, hosts and services, and all things related to network security best practices Provide technical security direction and insight for projects, discovery, and problem management Operate and improve DDoS detection, mitigation, and response capabilities across scrubbing services, flow-based analysis, and edge traffic engineering Create network segmentation through various technologies such as routing, virtual networking, Software-Defined Networking(SDN), and host/service level controls Provide operational security support for multi-vendor, multi-region production network at-scale Manage Network Security protocols and concepts, access management (AAA), and network ACLs/Firewalls Identify, test and integrate new network security products, operating systems and feature sets Manage documentation and frameworks relative to network security practices Perform vulnerability scanning and create remediation plans Participate in 24x7 on-call rotation What You’ll Need: Proven track record in leading security initiatives independently with minimal supervision 7 years of experience in network security engineering Strong understanding of network protocols such as TCP/IP, BGP, OSPF, IPsec. Deep knowledge of DDoS attack vectors and mitigation strategies including scrubbing services and flow telemetry analysis (sFlow, NetFlow, IPFIX, BGP Flowspec, etc.) An in depth understanding of encryption and how it translates to network traffic (HTTPS, IPSec) Understand compliance requirements to perform and manage periodic audits Experience with security management and orchestration tools such as Tufin, Firemon, or AlgoSec Experience with load balancing, anycast and DNS. Experience with developing security automation tools/scripts used to manage, or interact with network infrastructure such as Ansible, NETCONG, or YANG Experience with cloud service providers such as AWS and GCP Bonus Points: Work experience in data center, telecom, SaaS, or cloud operations companies. Ability to communicate technical detail into succinct and ... (truncated, view full listing at source)