Network Security Engineer

About the role

Levi Strauss & Co. is seeking a skilled Network Security Engineer to design, implement, and maintain secure network infrastructures. You will protect the organization from cyber threats by applying deep expertise in network security protocols, firewalls, intrusion detection systems, and vulnerability management.

Key responsibilities

• Develop and maintain secure network and zero‑trust architectures, including firewalls, VPNs, Network Access Control, and intrusion‑prevention systems (e.g., FortiGate, Zscaler, Aruba).
• Collaborate with the Network Engineering team to troubleshoot performance issues and apply configuration changes to security tools.
• Monitor network traffic for suspicious activity using auditing and policy orchestration tools (Tufin, Firemon, FortiManager) and implement mitigation strategies.
• Conduct regular security assessments, penetration testing, and patch management to address vulnerabilities.
• Establish, enforce, and update security policies, procedures, and best practices.
• Ensure compliance with standards such as NIST, ISO 27001, CIS, and GDPR, providing technical guidance to staff.
• Develop and execute incident response plans, perform forensic analysis, and produce post‑incident reports.

Required profile

• Proven experience as a Network Security Engineer or in a similar network administration role.
• Strong knowledge of networking concepts, TCP/IP, HTTP, and VPN technologies.
• Proficiency with firewalls, intrusion detection/prevention systems, and network security tools.
• Hands‑on experience designing and implementing LAN, WAN, WLAN, and WWAN solutions.
• Effective communication, documentation, and teamwork skills in fast‑paced, security‑sensitive environments.

Required skills

• FortiGate
• Zscaler
• Aruba
• Tufin
• Firemon
• FortiManager
• Firewalls
• Intrusion detection systems
• Intrusion prevention systems
• VPN
• Network Access Control
• Zero‑trust architecture
• TCP/IP
• HTTP
• LAN/WAN/WLAN/WWAN design
• Penetration testing
• Patch management
• NIST
• ISO 27001
• CIS
• GDPR