Network Security Engineer
Etched · San Jose
About this role
**About Etched** Etched is building hardware for frontier intelligence—co-designing chips, racks, software, and manufacturing to deliver best-in-class throughput and latency across prefill and decode workloads. Their first products focus heavily on inference, backed by hundreds of millions from top-tier investors. **Role: Network Security Engineer** As Etched’s first dedicated Network Security Engineer, you’ll own the design and implementation of Etched’s network security posture end to end. You’ll partner with the infrastructure team to harden physical and virtual networks, enforce least-privilege access to chip design environments, and build detection and response capabilities to protect the company’s most sensitive assets. This is a high-ownership role where you’ll shape security architecture for compute infrastructure supporting the next decade of AI. **Key Responsibilities** - Design and implement a **zero-trust network architecture** across on-prem datacenters, multiple office locations, and multi-cloud platforms, including secure remote access that reduces VPN sprawl. - Define and enforce **network segmentation** to isolate sensitive ASIC development workflows from general infrastructure, customer access, validation labs, and manufacturing. - Deploy, tune, and operate **NDR, IDS/IPS, and next-generation firewalls** across physical and virtual network fabric; build automation to continuously assess and enforce firewall rules, ACLs, and routing policies (treating network security configuration as code). - Integrate and operate **EDR/XDR, MDM/MAM, SASE, and CASB** tooling to enforce unified DLP policies and device compliance across endpoint, cloud, and network control planes. - Own **vulnerability management** for network-layer exposure: scanning, prioritization, and remediation tracking. - Lead **incident response** for network-layer security events: detection, containment, root-cause analysis, and post-incident hardening. - Support **regulatory requirements** and customer security reviews in partnership with legal, compliance, and leadership. - Architect and deploy **network segmentation for HPC clusters**, isolating EDA tool traffic, ASIC simulation workloads, and CI pipelines. - Architect and deploy **ZTNA-based corporate access** to eliminate VPN sprawl and maintain consistent device security posture for on-site, remote, and traveling engineers. - Build a scalable **NDR pipeline** ingesting flow data across bare-metal switches and cloud VPCs, feeding a centralized SIEM and generating actionable alerts with low false positives. - Develop **runbooks and automated playbooks** for high-probability scenarios (credential compromise, lateral movement, exfiltration). - Integrate EDR/XDR telemetry with **SASE enforcement and CASB inline controls** to build a unified DLP detection/response pipeline across endpoints, cloud SaaS, and the corporate network. - Partner with end-user and IT teams to roll out **MDM/MAM policies** that containerize sensitive IP and enforce compliance-based conditional access. **Must-Have Qualifications** - Deep, broad networking expertise (packet analysis, firewall log forensics, BGP, multi-cloud networking, CASB/SASE integration). - Hands-on experience with the **Fortinet ecosystem** (firewalls, FortiSASE, FortiAPs, switches) and comfort with **Arista** switch platforms (configuration, EOS automation, integration). - Treat security as an engineering discipline: write code/automation, version-control configu
Listing freshness
CronJobs last confirmed this listing 3h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.