10888 - Network and Cybersecurity Engineer II Location: Joliet , IL (5 days on-site)
Company Overview
Hyundai AutoEver America (HAEA) is the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis.
HAEA offers a truly global and collaborative environment. Here, you'll drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group.
At HAEA, we understand that IT is the cornerstone of today's fast-evolving digital world. By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai's Global Headquarters and North American operations.
If you're passionate about technology and eager to make a real impact at a world-class company, Hyundai AutoEver America is the place to grow your career. Join us and be part of the transformation that's driving the future of automotive innovation.
Website: http://www.haeaus.com
Role Overview:
The selected Network Security Engineer will ensures Service Provider delivery of managed services across Network and Cybersecurity functions meet HAEA's Network, Security & Business requirements. This position requires in-depth knowledge of HAEA's Network Infrastructure (LAN/Switches, DNS – DHCP, WAN, Load Balancers, VOIP, VPN, etc.) and enterprise security operations (SIEM, vulnerability management, threat detection and response) to address complex incidents and problems and to provide a stable, reliable, and secure infrastructure. This position is also responsible for ensuring that Network and Security Infrastructure meets availability requirements, contracted service levels, and cybersecurity compliance standards. The person is also responsible for managing vendor technical performance, network/security-specific contracts and suppliers, prioritizing customer business requests, and managing project schedules and budgets. Key
Responsibilities:
Develop and provide Network and Security architecture
Provide Network and Security documentation standards and requirements
Develop business and functional requirements for Projects relating to Network and Cybersecurity Management Services
Manage circuit provisioning for new WAN connectivity, including obtaining favorable circuit pricing
Work with Client's facility personnel to build necessary facility requirements
Order and expedite delivery of Network and Security equipment, circuits and services
Manage the performance of public carriers (and other third parties) to meet Client requirements (e.g., schedules, projects) and SLAs
Approve router configuration files, firewall rules, and IP addressing schemas and standards
Provide requirements (e.g., security, performance) for physical and logical Network traffic segmentation
Administer, tune, and monitor SIEM (Splunk) for security event correlation, alerting, log aggregation, and compliance reporting
Lead vulnerability management using Rapid7 (InsightVM/InsightIDR) — scanning, prioritization, remediation tracking, and reporting
Manage and respond to security incidents, perform threat detection, triage, containment, and root cause analysis across the enterprise
Administer and optimize firewalls, IDS/IPS, VPN, multi-factor authentication, and endpoint/network security controls
Manage technical third-party relationships for facility cable management services (e.g., physical wiring between servers and wiring closet and between wiring closet and desktop)
Support activities related to Client-planned or third-party planned and unplanned outages
Monitor Service Provider's end-to-end support of Network and Security Services
Manage Service Provider overall performance & SLAs and quality in accordance with contract
Ensure that Patch Monitoring and Deployments are performed timely and in accordance with service levels
Provide on-site support to compliment service provider's remote management services
Oversee infrastructure hardware and software acquisition, installation, and changes
Ensure high availability of infrastructure via service level management
Ensure that Incident Management and upgrades are resolved
Identify change requests in lieu of performance improvements, security hardening, and cost efficiencies
Basic Qualifications:
Bachelor's degree or equivalent in the field of business, computers, information systems or related degree.
5-7 years relevant work experience in a related network and/or cybersecurity functional role.
Extensive knowledge of networking technologies and protocols including TCP/IP, QoS, IPT, VoIP, IOS; Routing and Switching; Routing protocols such as OSPF and BGP; WAN Optimization technologies
Hands-on expertise with SIEM platforms (Splunk) — search, dashboards, correlation searches, log ingestion, and alerting
Hands-on expertise with vulnerability management platforms (Rapid7 InsightVM/InsightIDR) — scanning, risk scoring, and remediation workflows
Demonstrated experience with Wired and wireless local area network ("LAN") segments including infrastructure supporting all Network traffic originating from computing devices (e.g., wireless access points, desktop devices, local file and print servers, peripherals, and other End User devices)
Demonstrated experience with setup and configuration of redundant networking environments.
Demonstrated ability to manage IP management components – Domain Name Services (DNS) and Dynamic Host Configuration Protocol (DHCP) components and central, real-time logging components
Firewalls, Multi-factor authentication Equipment and Software (e.g., tokens), Intrusion prevention and detection devices
Deep knowledge in designing and developing functional SDN and SDDC technology, understanding of security, physical networking is required
Working knowledge of security frameworks and compliance standards (e.g., NIST, ISO 27001) and security operations best practices
Expertise ensuring Network and Security Components provisioned are included in all IT Life Cycle and IT Service Management Services-related documentation (e.g., asset management and configuration management, i.e. CMDB)
Preferred Qualifications
Ability to design processes that ensure rapid Incident determination, alert identification and correlation, escalation and resolution for all Network and Security environments on a 24x7x365 basis
Industry certifications such as CISSP, CISM, Security+, CCNP Security, or Splunk/Rapid7 product certifications
Demonstrated experience with continuous improvements to Networking and Security Solutions