Principal Engineer, Network Security Capabilities

The Paramount Technology department supports our global content company through the delivery of a high-quality viewing experience, system infrastructure support, and crafting innovative ways for our employees to collaborate. If you are interested in a strategy that has growth, transformation, and ongoing innovation where you can help “reinvent the broadcasting wheel”, Paramount Tech has a role for you!

Overview & Responsibilities:
As the Principal Engineer, Network Security Capabilities, you will join the Paramount Security Capabilities Team and work with technology and business teams across the globe to expand and mature Paramount’s network security capabilities! The ideal candidate will have experience handling common network security tools, developing reference architectures, and building network specific guidelines, standards, and procedures. They will be eager to explore innovative solutions to improve the security stack, enhance user experience, and contribute positively to company business objectives. They should also excel at communication and engagement with partners. This role is an integral part of the team and will have day-to-day operational and advisory responsibilities. 

Responsibilities:
•    Ensure network security solutions are appropriately configured and maintained in accordance with our internal MITRE ATT&CK based framework
•    Leverage industry standard benchmarks (i.e., CIS) to develop Paramount network security baselines
•    Drive adoption of network security guidelines and standards
•    Document, maintain, and improve standard operation procedures (SOPs), processes and standards regarding Network Capabilities Management
•    Champion network security technologies to business partners, helping them to understand network-based risks and gain their support for the program
•    Advise technical partners on appropriate configuration of security adjacent network management tools, including Palo Alto Prisma, Global Protect, CISCO ASA and FTD platforms, Solarwinds, Infoblox, Gigamon
•    Provide day-to-day support of network security technologies, including Stealthwatch, Forescout, Palo Alto Panorama, Cisco FMC, Skybox or other similar firewall management tools (Firemon/Tufin)
•    Support implementation of network privileged access and device trust programs
•    Liaise with vendors to ensure network security products are updated at appropriate intervals and are deployed and configured according to vendor standard processes, particularly as products evolve
•    Apply AI/ML to optimize and improve the efficiency of the network security stack and enrich Paramount’s network-based threat detection capabilities
•    Identify network security controls gaps in the environment and seek innovative solutions to mitigate those risks
•    Develop and issue technical requirements and proposals for new network security technologies
•    Stay ahead of network security technologies, standard processes, threats, and control methodologies

Basic Qualifications:
•    8+ years of experience in Information Security in a global enterprise environment
•    5+ years of experience as a technical project lead and primary network security support role
•    Bachelor’s Degree or Equivalent Experience
•    Security Certification from Industry Standards (i.e., CompTIA, (ISC)2, SANS, ISACA COBIT)
•    Certifications related to vendor specific Network Security technologies

Additional Qualifications:
•    Passion for technology, security, and providing superb customer service
•    Excellent verbal and written communication skills
•    Strong prioritization, problem solving, and troubleshooting skills
•    Experience developing network benchmarks using industry standard frameworks (i.e., CIS)
•    Ability to apply countermeasure techniques against common attack using MITRE ATT&CK and MITRE D3FEND frameworks
•    Deep understanding of network security adjacent domains, including endpoint security and identity and access management, vulnerability management, and incident response
•    Experience leading, implementing, and tuning network security management, observation and detection tools, including Stealthwatch, Skybox, Firemon, Tufin, and Forescout
•    Experience handling, implementing, and tuning next generation firewall configuration and security policies on a variety of platforms including Palo Alto, Cisco, and cloud firewall platforms (i.e., AWS, GCP, Azure, and OCI)
•    Experience hardening networking devices (i.e., Palo Alto, Cisco) and cloud networking configurations
•    Experiencing implementing zero trust with a focus on the network pillar
•    Experience using PowerShell, Python, or Shell scripting languages to automate tasks
•    Experience in media, entertainment industry, broadcasting
•    Experience working with Security Auditors, Compliance Officers, and BISOs
•    Experience with virtual and cloud firewalls including AWS, GCP, Azure, OCI.
•    Experience with SQL or Regular Expressions
•    Live in the Tri-State area with the ability to come into NYC when required

Paramount Global (NASDAQ: PARA, PARAA) is a leading global media and entertainment company that creates premium content and experiences for audiences worldwide. Driven by iconic studios, networks and streaming services, Paramount's portfolio of consumer brands includes CBS, Showtime Networks, Paramount Pictures, Nickelodeon, MTV, Comedy Central, BET, Paramount+, Pluto TV and Simon & Schuster, among others. Paramount delivers the largest share of the U.S. television audience and boasts one of the industry's most important and extensive libraries of TV and film titles. In addition to offering innovative streaming services and digital video products, the company provides powerful capabilities in production, distribution and advertising solutions.

ADDITIONAL INFORMATION

Hiring Salary Range: $185,000.00 - 200,000.00. 

The hiring salary range for this position applies to New York City, California, Colorado, Washington state, and most other geographies. Starting pay for the successful applicant depends on a variety of job-related factors, including but not limited to geographic location, market demands, experience, training, and education.  The benefits available for this position include medical, dental, vision, 401(k) plan, life insurance coverage, disability benefits, tuition assistance program and PTO or, if applicable,  as otherwise dictated by the appropriate Collective Bargaining Agreement. This position is bonus eligible.  

https://www.paramount.com/careers/benefits

Paramount is an equal opportunity employer (EOE) including disability/vet.

At Paramount, the spirit of inclusion feeds into everything that we do, on-screen and off. From the programming and movies we create to employee benefits/programs and social impact outreach initiatives, we believe that opportunity, access, resources and rewards should be available to and for the benefit of all. Paramount is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, creed, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, and Veteran status.

If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to use or access https://www.paramount.com/careers as a result of your disability. You can request reasonable accommodations by calling 212.846.5500 or by sending an email to paramountaccommodations@paramount.com. Only messages left for this purpose will be returned.