Malibu TN Network Security Engineer

Summary:

The Network Security Engineer is responsible for WAN, LAN, cloud, Wi-Fi, and voice networks across Malibu Boat’s campuses. Responsibilities include configuring security platforms (routers, switches, firewalls, VPNs, WAF, cloud infrastructure), executing vulnerability tests, monitoring and supporting daily performance, and ensuring compliance with policies and security framework controls. The engineer collaborates on security projects, implements best practices, monitors threats, and advises on security solutions. They also perform security incident investigations and mitigate as needed.

Essential Duties and Responsibilities

• Implementation and administration of advanced network security solutions and security appliances.
• Configuration of AWS networking services.
• Monitor and analyze network traffic for security threats and vulnerabilities.
• Perform routine tasks including switch port configurations, monitoring network and circuit performance, firewall rule creations and changes.
• Conduct vulnerability testing and remediation.
• Participate in penetration testing engagements.
• Develop and implement solutions that align with security framework controls.
• Develop, implement, and enforce security policies, procedures, and best practices.
• Respond to and manage security incidents, providing detailed analysis and remediation plans.
• Collaborate with IT and other departments to integrate security measures into all aspects of the network infrastructure.
• Stay current with the latest security trends, threats, and technologies.
• Generate and maintain network documentation.
• Provide after-hours on-call support on a rotation basis

Qualifications

• Bachelor’s or associate’s degree in a technical field or an equivalent combination of education and experience.
• CISSP, CCNA, CCNP, or other security and network certifications preferred.
• 5+ years configuring, troubleshooting, and maintaining LAN/WAN/Wireless networks.
• 2+ years AWS experience, specifically AWS Transit Gateway, IAM, Security Groups, and WAF.
• Experience supporting and optimizing VoIP and QoS.
• Knowledge of external DNS and load balancers.
• Knowledge of network security principles and practices.
• Familiarity with CIS Controls Framework.
• Experience configuring firewalls, dynamic routing protocols, IPsec VPN tunnels, point to point circuits.
• Experience implementing and managing SD WAN.
• Strong verbal and written communication skills, with an ability to express complex technical concepts in business terms.
• Must be able to lead meetings and discuss implications of systems implementations, deployment and changes.
• Solid teamwork and interpersonal skills and ability to communicate with customers, associates, and management.
• Strong problem-solving and conceptual skills.

Education and/or Experience:  Bachelor's degree from four-year college preferred; or associate’s degree from a two-year program; or three to five years related experience and/or training; or equivalent combination of education and experience.

Language Skills:  Ability to read, analyze, and interpret common scientific and technical journals, financial reports, and legal documents.  Ability to respond to common inquiries or complaints from customers, regulatory agencies, or members of the business community.  Ability to effectively present information to management.

Mathematical Skills:  Ability to calculate figures and amounts such as discounts, interest, commissions, proportions, percentages, area, circumference, and volume.  Ability to apply concepts of basic algebra and geometry.

Reasoning Ability:  Ability to define problems, collect data, establish facts, and draw valid conclusions. Ability to interpret an extensive variety of technical instructions in mathematical or diagram form and deal with several abstract and concrete variables.