Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 4 days ago

Senior Network Security Engineer

SWBC107 open roles

Where
San Antonio, TX
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Network Security EngineerSWBC · San Antonio, TX

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on SWBC's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.6% of postings close within 7 days. Measured by our own scanner across the market. SWBC postings stay open a median of 27 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.7%3 days
  3. 13.6%7 days
  4. 21.9%14 days
  5. 36.9%30 days
  6. 59.0%60 days
This job: posted 4 days ago

SWBC median: 27 days open

The posting

SWBC is seeking an experienced Senior Network Security Engineer to design, implement, operate, and improve enterprise network security controls across on-premises, cloud, and hybrid environments. This position owns or supports major network security platforms and capabilities, including firewalls, segmentation, VPNs, secure cloud connectivity, intrusion prevention, and network security telemetry.

The Senior Network Security Engineer collaborates with Network Operations, Cloud Operations, Security Operations, infrastructure, application, and development teams to provide secure and resilient connectivity across the enterprise. The role requires strong hands-on experience with Palo Alto Networks and Cisco firewalls, enterprise routing, AWS and Microsoft Azure networking, production change control, and complex incident resolution.

Why you’ll love this role:

This role is ideal for an experienced network security professional who enjoys solving complex technical challenges and shaping secure, resilient enterprise connectivity. You will have the opportunity to own critical security platforms, influence hybrid-cloud architecture, lead major changes and incident resolution, mentor technical team members, and strengthen security across SWBC’s enterprise environment.

Essential duties include the following:

  • Design, implement, operate, and improve secure enterprise network architectures across on-premises, cloud, and hybrid environments.
  • Deploy, configure, manage, and troubleshoot Palo Alto Networks and Cisco firewalls, including security policies, NAT policies, security zones, objects, application controls, and access-control policies.
  • Design and implement network segmentation, micro-segmentation, and isolation controls to reduce attack surfaces and limit lateral movement.
  • Perform firewall migrations, upgrades, configuration changes, policy optimization, and complex troubleshooting.
  • Develop and maintain network security standards, architecture documentation, network diagrams, implementation procedures, and operational runbooks.
  • Design, implement, and troubleshoot remote-access VPN solutions and site-to-site IPsec tunnels, including authentication, encryption, routing, and tunnel connectivity.
  • Establish secure connectivity among corporate offices, data centers, cloud environments, remote users, and third-party organizations.
  • Design, implement, and troubleshoot enterprise routing architectures, including BGP, OSPF, route redistribution, route filtering, route summarization, and routing policies.
  • Apply strong knowledge of TCP/IP, subnetting, VLANs, NAT, DNS, DHCP, network segmentation, high availability, and redundancy.
  • Design and implement secure AWS VPC and Microsoft Azure VNet architectures, including subnets, route tables, network security controls, and hybrid connectivity.
  • Evaluate cloud network architectures and configurations for security risks, misconfigurations, and control gaps and support cloud transformation initiatives.
  • Configure and maintain IDS/IPS, firewall logging, and network security telemetry and coordinate integration into centralized monitoring and incident-response workflows.
  • Serve as a senior technical resolver for complex network security incidents and service disruptions and lead or contribute to root-cause analysis and corrective actions.
  • Participate in the defined on-call rotation and support major technical escalations.
  • Support compliance and audit activities by maintaining controls, producing audit-ready evidence, and coordinating remediation related to PCI DSS, SOC 2, NIST, ISO 27001, and other applicable requirements.
  • Own assigned network security platforms or major subsystems throughout their operational lifecycle.
  • Plan, sponsor, present, test, validate, implement, and review non-trivial production changes through established change-control processes, including appropriate rollback plans.
  • Coordinate remediation of vulnerabilities affecting firewalls, VPN services, network appliances, edge controls, and cloud network infrastructure.
  • Support disaster recovery planning and testing for assigned network security platforms and services.
  • Use operational metrics to improve service reliability, change quality, vulnerability remediation, and incident resolution.
  • Maintain complete and accurate change, incident, problem, vulnerability, and technical evidence records in ServiceNow or other approved systems.
  • Collaborate with technical teams, translate security requirements into practical solutions, and provide guidance for network, cloud connectivity, infrastructure, and application architecture decisions.
  • Mentor analysts, administrators, and engineers and provide technical guidance during complex changes and incidents.
  • Communicate complex technical and security concepts effectively to technical and non-technical stakeholders.
  • Support Security Assurance and Governance, Risk, and Compliance activities through technical evidence, control validation, and remediation support.
  • Perform all other duties as assigned.

Serious candidates will possess the minimum qualifications:

  • Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field, or equivalent professional experience.
  • Minimum of seven (7) years of experience in network engineering, network security, cloud network security, infrastructure security, or a combination of these areas.
  • Extensive experience designing, implementing, securing, and supporting enterprise network environments.
  • Extensive hands-on experience with Palo Alto Networks firewalls and hands-on experience with Cisco firewalls, including Cisco ASA or Cisco Secure Firewall/FTD.
  • Strong experience with remote-access VPN and site-to-site IPsec VPN technologies.
  • Strong understanding of enterprise routing concepts, including BGP and OSPF.
  • Hands-on experience with routing, network security, and hybrid connectivity in AWS and Microsoft Azure.
  • Strong knowledge of TCP/IP, VLANs, subnetting, NAT, network segmentation, DNS, DHCP, defense-in-depth, and network security architecture.
  • Experience implementing production changes through formal change-control processes, including testing, validation, rollback planning, and documentation.
  • Demonstrated ability to troubleshoot and resolve complex technical incidents beyond established runbooks and contribute to root-cause analysis, corrective actions, vulnerability remediation, and recurrence reduction.
  • Experience creating technical standards, architecture diagrams, implementation procedures, automation, or design documentation.
  • Knowledge of IDS/IPS, firewall logging, network security monitoring, SIEM integration, and related telemetry.
  • Familiarity with infrastructure-as-code and automation technologies such as Terraform, CloudFormation, Ansible, Python, or PowerShell.
  • Working knowledge of security standards and control frameworks applicable to network and cloud security.
  • Strong analytical, troubleshooting, documentation, problem-solving, written communication, and verbal communication skills.
  • Ability to work independently and collaboratively in a fast-paced, evolving environment and participate in defined on-call responsibilities as a senior technical resolver.
  • Current Cisco CCNP, preferably CCNP Enterprise or an equivalent certification, or Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.
  • AWS Certified Advanced Networking – Specialty, AWS Certified Solutions Architect – Professional, a relevant Microsoft Azure network or security certification, CISSP, or an equivalent advanced security certification is preferred.
  • Experience working in financial services or another regulated industry is preferred.

SWBC offers*:

  • Competitive overall compensation package
  • Work/Life balance
  • Employee engagement activities and recognition awards
  • Years of Service awards
  • Career enhancement and growth opportunities
  • Leadership Academy and Mentor Program
  • Continuing education and career certifications
  • Variety of healthcare coverage options
  • Traditional and Roth 401(k) retirement plans
  • Lucrative Wellness Program

*Based upon employee eligibility

Additional Information:

SWBC is a Substance-Free Workplace and requires pre-employment drug testing.

Please note, SWBC does not hire tobacco users as allowed by law.

To learn more about SWBC, visit our website at www.SWBC.com. If interested, please click the appropriate apply button.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against SWBC's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on SWBC's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    SWBC's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.