Network Security Engineer

Overview

Join DRW’s network security team to safeguard our hybrid, high-performance trading infrastructure. In this role you will design, implement, and audit security controls that protect our global networks while supporting resilient trading operations. You will apply micro-segmentation, IPS/NDR solutions, and VPN technologies to reduce risk and maintain secure remote access. You will leverage automation and AI to enhance detection and response, and you will analyze network captures to drive continuous improvements. You will collaborate with cross-functional teams and contribute to a culture of innovation and integrity.

Responsibilities

• Collaborate with cross-functional security, technology, and trading teams to design and deploy solutions that enhance system integrity and trading performance
• Design, implement, and maintain mission-critical trading infrastructure for resilient and scalable market operations
• Implement strategies to reduce network risk using micro-segmentation, port-based security, and related methods
• Evaluate, diagnose, and deploy security solutions such as firewalls, NDR, IDS/IPS, and VPN concentrators to improve security and remote access
• Leverage automation, AI, and emerging technologies to enhance security event detection and response capabilities
• Perform in-depth analysis of network packet captures to investigate incidents and identify improvements
• Pursue opportunities to automate tasks and streamline security operations for efficiency and effectiveness

Key requirements

• Passion for network security
• Hands-on experience with firewalls, client VPNs, SASE, NDR, and IDS
• Scripting and coding ability to automate processes
• Solid understanding of TCP/UDP/IP, OSI model, and Layer 1–3 principles
• Willingness to on-call, including nights or weekends
• Continuous drive to innovate and improve security solutions
• Effective communication to translate technical insights to cross-functional teams

• effective communication
• collaboration
• problem-solving
• firewalls
• client VPNs
• SASE

…