Network Operations Security Engineer (US - Remote)

AXON Networks is hiring a Network Operations Security Engineer to serve as the Security Champion for Network Operations. The role coordinates vulnerability remediation and operational security readiness across production networks, cloud infrastructure, Kubernetes-based services, and device-management environments, partnering with InfoSec and operational and engineering teams.

Responsibilities:

• Act as the designated Network Operations representative in the Security Champions Council; communicate security requirements, emerging threats, standards, and priorities to operational teams
• Coordinate with centralized InfoSec on risk classification, remediation deadlines, escalations, exceptions, evidence, and technical guidance
• Promote security awareness, practical controls, and repeatable secure operating practices within NOC, Support, and Operational Excellence
• Assess how reported CVEs, scanner findings, misconfigurations, and exposures affect production network and infrastructure services; work with asset and service owners to confirm applicability and customer impact
• Coordinate remediation plans with Engineering, DevOps, Cloud Operations, and system owners; identify maintenance windows, dependencies, service risks, rollback requirements, and validation steps
• Track operational execution and provide verified closure evidence to InfoSec; escalate overdue or high-risk remediation while avoiding a duplicate enterprise vulnerability tracking program
• Review production-impacting designs, releases, and changes for operational security readiness, including access, network exposure, segmentation, logging, monitoring, recovery, and rollback
• Identify negative/failure scenarios and security-sensitive operational dependencies; recommend controls and document residual risks for the appropriate approval authority
• Partner with Change Management and Operational Readiness functions to ensure secure deployment and post-change validation
• Assess operational security posture of network devices, connectivity, management interfaces, cloud workloads, containers, Kubernetes, IAM, secrets, and service-to-service access within the supported environment
• Work with platform and network engineering owners to improve configuration baselines, privileged access, patching, network segmentation, telemetry, and resilience
• Help identify and reduce risk in CPE/device-management workflows, remote management, firmware rollouts, and associated production services where applicable
• Participate in security-related production incidents, supporting scoping, triage, containment, recovery, customer-impact analysis, and evidence preservation under the enterprise incident response framework
• Coordinate NOC/Support/Engineering response and operational communications with InfoSec; support post-incident reviews and ensure operational corrective actions are completed
• Improve security-relevant alerts, runbooks, escalation paths, and operational response exercises
• Partner with Operational Excellence and automation engineers to reduce manual security checks and improve security-related monitoring and response workflows
• Maintain operational metrics for remediation execution, overdue actions, security change readiness, control coverage, and recurring security incidents; feed authoritative data into InfoSec reporting
• Drive lessons learned into monitoring, documentation, change procedures, and production

Requirements:

• 5+ years in network/infrastructure security engineering, production operations, cloud infrastructure, SRE, or a closely related technical role
• Strong understanding of TCP/IP, routing, DNS, TLS, firewalls, segmentation, access controls, and troubleshooting in production environments
• Practical experience assessing vulnerabilities, CVEs, exposure, risk, remediation planning, and validation; familiarity with vulnerability and cloud security tools
• Experience with production incidents, change management, rollback planning, operational readiness, and cross-functional engineering coordination
• Working knowledge of cloud environments, containers/Kubernetes, monitoring/logging, and infrastructure security concepts
• Ability to communicate technical risk and operational tradeoffs clearly to Engineering, Operations, and Information Security
• we are unable to offer visa sponsorship for this role
• Telecom/broadband/ISP, CPE, gateways, routers, ONTs, Wi-Fi, ACS, TR-069, TR-369/USP, or fleet/device-management environments
• GCP or OCI experience; Kubernetes workload security; IAM, infrastructure-as-code, CI/CD, or DevSecOps collaboration
• Familiarity with Tenable, Qualys, Rapid7, Wiz, Orca, Prisma Cloud, Trivy, SIEM, or comparable tools
• Automation/scripting experience (Python, Bash, APIs)
• relevant certifications such as Security+, CISSP, CCSP, or GIAC