Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted yesterday

Network Security Engineer

Altera197 open roles

Where
San Jose, California, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowNetwork Security EngineerAltera · San Jose, California, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Altera's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.7% of postings close within 7 days. Measured by our own scanner across the market. Altera postings stay open a median of 16 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.8%3 days
  3. 13.7%7 days
  4. 22.1%14 days
  5. 37.2%30 days
  6. 59.1%60 days
This job: posted yesterday

Altera median: 16 days open

The posting

Job Details:

Job Description:

About the Role

As a Senior Network Security Engineer at Altera, you will serve as a senior technical authority responsible for defining and advancing the enterprise network security strategy, architecture, and technical roadmap across on-premises, cloud, data center, laboratory, campus, WAN, and hybrid environments. You will architect secure, resilient, and scalable network solutions grounded in Zero Trust, least-privilege access, micro-segmentation, and secure-by-design principles, while providing technical leadership across firewalls, ZTNA, SASE, SD-WAN, NDR, IDS/IPS, network telemetry, and security automation.

This role combines deep hands-on engineering expertise with strategic architecture ownership and cross-functional influence. You will partner closely with Network Engineering, Cloud, Infrastructure, DevOps, Product Security, and Risk teams to translate security requirements into implementable designs, serve as a senior escalation point for complex security incidents and architecture decisions, and drive measurable improvements in attack-path reduction, segmentation, rule hygiene, visibility, resilience, and overall security posture. You will also help establish engineering standards, reference architectures, governance practices, and repeatable processes while mentoring engineers and communicating complex technical risks and recommendations to both technical and executive audiences.

Responsibilities:

Technical Strategy & Architecture Ownership

  • Define and evolve Altera’s enterprise network security strategy, target-state architecture, technical roadmap, and reusable reference patterns.
  • Serve as the senior technical authority for complex network security decisions, design exceptions, and modernization initiatives.
  • Drive adoption of Zero Trust, least-privilege access, micro-segmentation, and secure-by-design network principles.
  • Establish architecture standards, decision criteria, and measurable outcomes for attack-path reduction, rule hygiene, segmentation coverage, resilience, and network visibility.

Network Security Architecture & Engineering

  • Architect and review secure designs for data center, campus, laboratory, cloud, WAN, remote-access, and hybrid environments.
  • Design segmentation and traffic-control models using security zones, VRFs, next-generation firewalls, secure routing, identity-aware access, and workload-level controls.
  • Evaluate and guide adoption of ZTNA, SWG, SASE, SD-WAN, NDR, IDS/IPS, firewall, and network-security automation capabilities.
  • Partner with network, cloud, platform, product security, and operations teams to translate security requirements into implementable designs.
  • Validate architecture through design reviews, configuration analysis, packet and flow analysis, resilience testing, and post-implementation verification.
  • Conduct ongoing firewall administration and operations including policy lifecycle management, rule administration, hardening, and exception governance.

Threat Detection, Monitoring, & Incident Response

  • Provide senior technical expertise during investigations involving network intrusion, lateral movement, command-and-control activity, privilege misuse, and data exfiltration.
  • Design and improve network telemetry, logging, detection coverage, and correlation across SIEM, NDR, firewalls, proxies, DNS, VPN, and cloud network services.
  • Perform or guide packet capture, flow analysis, protocol troubleshooting, and root-cause analysis for complex security events.
  • Act as a technical escalation point during major incidents and translate findings into architecture improvements, detection enhancements, and remediation plans.

Risk Management, Governance & Compliance

  • Perform security architecture and risk assessments for new systems, cloud services, network changes, and exceptions.
  • Author and maintain network security standards, reference architectures, technical guidelines, and control requirements.
  • Align designs with relevant frameworks and requirements, including NIST CSF, NIST SP 800-53, NIST SP 800-207, and ISO/IEC 27001.
  • Provide technical evidence and remediation guidance for audits, assessments, and control-validation activities.

Cross‑Functional Collaboration & Communication

  • Serve as a trusted technical advisor to IT & Engineering teams including Network Engineering, Cloud, Infrastructure, DevOps, Product Security, Risk, Privacy, and Legal stakeholders.
  • Facilitate architecture workshops and design reviews, clearly documenting decisions, risks, assumptions, and required controls.
  • Translate complex technical risks into practical, business-aligned recommendations for engineering and executive audiences.
  • Influence delivery teams without direct authority and mentor engineers through technical guidance, peer review, and knowledge sharing.

Communication & Influence

  • Excellent executive‑level communication skills.
  • Ability to translate technical concepts into business‑aligned recommendations.
  • Strong stakeholder management across technical and non‑technical teams.

Salary Range

The pay range below is for Bay Area California only. Actual salary may vary based on a number of factors including job location, job-related knowledge, skills, experiences, trainings, etc. We also offer incentive opportunities that reward employees based on individual and company performance.

$133,200 - $192,825 USD

We use artificial intelligence to screen, assess, or select applicants for the position. Applicants must be eligible for any required U.S. export authorizations.

#LI-MD1

Qualifications:

Minimum Qualifications:

  • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Electrical Engineering, or a related technical field.
  • 8+ years of experience in enterprise networking and cybersecurity, including substantial experience designing security architecture for large, distributed environments.
  • Demonstrated success serving as a principal engineer, architect, or senior technical authority for complex network-security programs and transformations.
  • Proven ability to own technical outcomes from discovery and requirements through design, implementation guidance, validation, and operational transition.

Preferred Qualifications:

  • Deep expertise in enterprise network architecture, TCP/IP, routing, switching, BGP, DNS, TLS, proxies, VPN, firewalls, IDS/IPS, segmentation, and Zero Trust.
  • Hands-on experience with next-generation firewalls, firewall policy governance, ZTNA, SWG, SASE, SD-WAN, NDR, SIEM, and related network-security controls.
  • Strong packet capture, protocol analysis, network-flow analysis, and complex troubleshooting skills.
  • Experience designing secure network connectivity and controls across on-prem, cloud and hybrid environments.
  • Experience with common enterprise platforms such as Cisco, Palo Alto Networks, Tufin, Azure, AWS, or comparable technologies.
  • Strong understanding of high availability, failover, capacity, secure management planes, encrypted connectivity, and resilient architecture.

Operational & Strategic Skills

  • Experience in firewall management, administration, and operations including firewall architecture, policy lifecycle management, rule recertification, configuration hardening, and operational governance.
  • Ability to identify and reduce attack paths, improve rule hygiene, expand segmentation coverage, and strengthen network telemetry.
  • Proficiency in network incident response, technical escalation, root-cause analysis, and remediation design.
  • Ability to establish repeatable engineering processes, architecture review methods, validation criteria, and operational runbooks.
  • Experience automating network-security analysis, policy management, validation, or reporting using Python, APIs, infrastructure-as-code, KQL, or similar technologies.

Job Type:

Regular

Shift:

Shift 1 (United States of America)

Primary Location:

San Jose, California, United States

Additional Locations:

Posting Statement:

All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Altera's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Altera's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Altera's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.