Note: The job is a remote job and is open to candidates in USA. AXON Networks is hiring a Network Operations Security Engineer to serve as the Security Champion for Network Operations. The role coordinates vulnerability remediation and operational security readiness across production networks, cloud infrastructure, Kubernetes-based services, and device-management environments, partnering with InfoSec and operational and engineering teams.
Responsibilities
- Act as the designated Network Operations representative in the Security Champions Council; communicate security requirements, emerging threats, standards, and priorities to operational teams
- Coordinate with centralized InfoSec on risk classification, remediation deadlines, escalations, exceptions, evidence, and technical guidance
- Promote security awareness, practical controls, and repeatable secure operating practices within NOC, Support, and Operational Excellence
- Assess how reported CVEs, scanner findings, misconfigurations, and exposures affect production network and infrastructure services; work with asset and service owners to confirm applicability and customer impact
- Coordinate remediation plans with Engineering, DevOps, Cloud Operations, and system owners; identify maintenance windows, dependencies, service risks, rollback requirements, and validation steps
- Track operational execution and provide verified closure evidence to InfoSec; escalate overdue or high-risk remediation while avoiding a duplicate enterprise vulnerability tracking program
- Review production-impacting designs, releases, and changes for operational security readiness, including access, network exposure, segmentation, logging, monitoring, recovery, and rollback
- Identify negative/failure scenarios and security-sensitive operational dependencies; recommend controls and document residual risks for the appropriate approval authority
- Partner with Change Management and Operational Readiness functions to ensure secure deployment and post-change validation
- Assess operational security posture of network devices, connectivity, management interfaces, cloud workloads, containers, Kubernetes, IAM, secrets, and service-to-service access within the supported environment
- Work with platform and network engineering owners to improve configuration baselines, privileged access, patching, network segmentation, telemetry, and resilience
- Help identify and reduce risk in CPE/device-management workflows, remote management, firmware rollouts, and associated production services where applicable
- Participate in security-related production incidents, supporting scoping, triage, containment, recovery, customer-impact analysis, and evidence preservation under the enterprise incident response framework
- Coordinate NOC/Support/Engineering response and operational communications with InfoSec; support post-incident reviews and ensure operational corrective actions are completed
- Improve security-relevant alerts, runbooks, escalation paths, and operational response exercises
- Partner with Operational Excellence and automation engineers to reduce manual security checks and improve security-related monitoring and response workflows
- Maintain operational metrics for remediation execution, overdue actions, security change readiness, control coverage, and recurring security incidents; feed authoritative data into InfoSec reporting
- Drive lessons learned into monitoring, documentation, change procedures, and production
Skills
- 5+ years in network/infrastructure security engineering, production operations, cloud infrastructure, SRE, or a closely related technical role
- Strong understanding of TCP/IP, routing, DNS, TLS, firewalls, segmentation, access controls, and troubleshooting in production environments
- Practical experience assessing vulnerabilities, CVEs, exposure, risk, remediation planning, and validation; familiarity with vulnerability and cloud security tools
- Experience with production incidents, change management, rollback planning, operational readiness, and cross-functional engineering coordination
- Working knowledge of cloud environments, containers/Kubernetes, monitoring/logging, and infrastructure security concepts
- Ability to communicate technical risk and operational tradeoffs clearly to Engineering, Operations, and Information Security
- We are unable to offer visa sponsorship for this role
- Telecom/broadband/ISP, CPE, gateways, routers, ONTs, Wi-Fi, ACS, TR-069, TR-369/USP, or fleet/device-management environments
- GCP or OCI experience; Kubernetes workload security; IAM, infrastructure-as-code, CI/CD, or DevSecOps collaboration
- Familiarity with Tenable, Qualys, Rapid7, Wiz, Orca, Prisma Cloud, Trivy, SIEM, or comparable tools
- Automation/scripting experience (Python, Bash, APIs)
- Relevant certifications such as Security+, CISSP, CCSP, or GIAC
Benefits
- Fully remote within North America
Company Overview