Sr. Network Security Engineer

ABOUT OPORTUN

Oportun (Nasdaq: OPRT) is a digital banking platform that puts its 1.9 million members' financial goals within reach. With intelligent borrowing, savings, budgeting, and spending capabilities, Oportun empowers members with the confidence to build a better financial future. Since inception, Oportun has provided more than $15.5 billion in responsible and affordable credit, saved its members more than $2.3 billion in interest and fees, and helped our members save an average of more than $1,800 annually. For more information, visit Oportun.com.

WORKING AT OPORTUN

Working at Oportun means enjoying a differentiated experience of being part of a team that fosters a diverse, equitable and inclusive culture where we all feel a sense of belonging and are encouraged to share our perspectives. This inclusive culture is directly connected to our organization's performance and ability to fulfill our mission of delivering affordable credit to those left out of the financial mainstream. We celebrate and nurture our inclusive culture through our employee resource groups.

POSITION OVERVIEW

Network Security Engineering works in partnership with Network Services for the deployment of new and enhanced network security tools and technologies. In this role as a Sr. Network Security Engineer, you will be responsible for the design, implementation, and maintenance of Oportun’s network security infrastructure. This includes the development and implementation of security policies, procedures and controls, the evaluation and selection of security products and services. You will work closely with key stakeholders across networks, operations, engineering, and Cyber-Security.

RESPONSIBILITIES

• Provide senior level network services including installing, configuring, and integrating network security technologies.
• Identify and validate project solutions, justifies business need, and manages product procurement.
• Monitor network traffic, analyze security events, and promptly respond to potential threats or vulnerabilities.
• Participate in advanced security policy decisions including firewall, Zero Trust, Web Proxy, micro-segmentation, and SASE logic reviews to improve user experience and security posture.
• Identify and implement automation opportunities to increase productivity and maintain high quality deployments.
• Partner with vendors and internal partners to design and optimize security solution deployments.
• Provide advanced network analytics for complex issues elevated from Tier I/II support groups.
• Work closely with engineering and security team to implement reliable, manageable, and secure solutions that meet Oportun standards.
• Identify performance issues and implement improvements.
• Produce documentation, including policies and procedures. Create diagrams, including solution designs.
• Comply with IT/security policies and procedures, especially those for quality and productivity standards that enable the team to meet established client service levels.
• Participate in special projects and performs other related duties as assigned.

QUALIFICATIONS

• Bachelor's degree or equivalent experience in Computer Science, Information Systems, Cybersecurity and/or equivalent.
• 8+ years of experience with mid to large enterprise managing and securing network infrastructure.
• Knowledge of Firewalls, Load Balancers, Web application firewalls, IPS, and 802.11x.
• Knowledge of NIST/CIS frameworks, application security standards such as OWASP.
• Cloud Network Security knowledge and experience.
• Designing, integrating, and managing complex network security solutions.
• Excellent problem-solving and analytical skills.
• Strong communication and interpersonal skills to collaborate effectively with team members and clients.
• Good understanding of cyber security concepts and security threats applicable to network devices and services.

• Good understanding of industry standards like NIST, CIS and MITRE.
• Advanced understanding of CASB, SASE, SWG Proxy. Micro-segmentation and DLP.
• Advanced knowledge on other networking services and technologies: AWS/Azure, routing, switching, spanning tree, BGP, TCP/IP, DHCP, DNS, QOS, ACLs.
• Scripting language like Python or PowerShell to create automation.

Highly Desired Experience:

• Advanced knowledge on Palo Alto Network firewalls and management tools such as Panorama.
• Advance knowledge on SentinelOne XDR/EDR/EPP solution.
• Advance knowledge on Onna eDiscovery solution.
• Solid experience in deploying Zero Trust frameworks.
• Solid experience in admin