Network Security Engineer

Terumo Medical Corporation (TMC) develops, manufactures, and markets a complete, solutions-based portfolio of high-quality medical devices used in a broad range of applications for numerous areas of the healthcare industry. TMC places a premium on providing customers with world-class products, training and education programs that drive clear economic value, better clinical outcomes and improved quality of life for patients. TMC is part of Tokyo-based Terumo Corporation; one of the world's leading medical device manufacturers with $5+ billion in sales, 20,000+ employees worldwide and operations in more than 160 nations. Terumo Medical Corporation is comprised of two strategic business divisions: Terumo Interventional Systems and Terumo Medical Products.

Job Summary

The Network Security Engineer will report to the Director of Infrastructure and will support the design, implementation and maintenance of network solutions, tools, processes and policies especially as it pertains to overall security. Working within the framework of the security program for TAH, they will facilitate accurate documentation of the network environment, accurate reporting from the network devices and secure solutions to networking challenges posed through business activity. The person in this position will support the TAH organization by providing timely troubleshooting and remediation of network & security events, as well as get involved in business unit projects to provide input on secure network design.

Job Details/Responsibilities

• Supports the execution of the corporate security and communication initiatives

• Ensures accurate documentation of corporate networking systems

• Acts as primary network support in the event of security events or other major business-impacting incidents

• Assists in technical projects in alignment with organizational goals where it pertains to networking and security

• Evaluate and recommend necessary changes in performance tuning, infrastructure design and monitoring.

• Serve as the highest level of in-house SME around networking and network security

• Work with various TAH entities to analyze problems, evaluate solutions and help implement as needed

• Contribute to the implementation of networking and security devices commensurate with corporate device lifecycle policies.

• Contribute on organization-wide network and security-based application projects to ensure applications optimal performance and related infrastructure.

• Involve actively in teams of cross functional project to assist solve problems inclusive of different technologies straddling multiple work groups.

• Consult project engineers and managers to assure technology is suitably deployed and used to deliver applications along with technology solutions.

Knowledge, Skills and Abilities (KSA)

• Familiar with next generation firewall technology

• Experience with cloud (GCP, Azure) network and security is desirable

• Solid understanding of TCP/IP and network troubleshooting

• Excellent verbal and written communication skills

• Experience troubleshooting and responding to customer concerns

• Excellent analytical, interpersonal and communication skills with the ability to communicate complex technical issues in an easy-to-understand manner

• Resourceful, with the ability to work independently

• Strong time management skills and attention to detail

• Ability to multi-task activities with shifting priorities

• Ethical and trustworthy

• Incident Response experience related to network analysis

Qualifications/ Background Experiences

• A Bachelors degree in computer network related field, cyber security preferred or combination of equivalent experience

• Minimum 3 years experience administering and maintaining Fortigate, FortiManager and FortiAnalyzer required

• 5 years of practical implementation and maintenance of network routing equipment

• 5 years of relevant professional network engineering or administration experience, with significant exposure to a variety of technologies and domains

• 3 years of advanced working knowledge of SDWAN and Network architecture.

• Experience patching and managing network configurations to include standard build installations and network system security hardening

• Experience with different routing protocols, OSPF, eBGP, iBGP

• Experience with the following technologies preferred:

• IDS, IPS, AV, Application, DNS security

• Network infrastructure (Cisco, Fortinet, etc.)

• Network admission control (NAC) (Aruba ClearPass, ForeScout, Cisco, etc.)

• Firewall management and auditing (FireMon, Tufin, AlgoSec, RedSeal, Skybox, etc.)

• Network packet brokers (Gigamon, IXIA, NetScout, etc.)

• SSL decryption (Blue Coat, F5, Gigamon, IXIA, etc.)

• Wi-Fi deployment and configuration (Cisco)

• Public key infrastructure (PKI)

• Hardware security modules (HSM)

• Authentication solutions (RSA, Entrust, smartcard, biometrics, etc.)

• Log collection and aggregation (ArcSight, McAfee / Nitro, Splunk, IBM/QRadar, etc.)

• Network gear OS Hardening (Fortinet, Cisco.)

It is Terumo's policy to provide equal employment opportunity to all its employees and applicants for employment regardless of their race, creed, color, national origin, age, ancestry, nationality, marital or domestic partnership or civil union status, sex, pregnancy, gender identity or expression, disability status, liability for military service, protected veteran status, sexual orientation, atypical cellular or blood trait, genetic information (including the refusal to submit to genetic testing), or any other category protected by law. As a Company, we value diversity of background and opinion, and prohibit discrimination or harassment on the basis of any legally protected class in the areas of hiring, recruitment, promotion, transfer, demotion, training, compensation, pay, fringe benefits, layoff, termination or any other terms and conditions of employment.

Nearest Major Market: Orange County

Nearest Secondary Market: Los Angeles