Etched
Network Security Engineer
San Jose
Sponsorship not specifiedDetected 26 days ago
AWSGCPAzureCloud PlatformsLinuxNLPCybersecurityNetwork SecuritySIEMIncident ResponseComplianceFirewallVPNBGP/OSPFWiresharkZero TrustResearchLeadership
About the role
- As we scale from early silicon to production, securing these environments is foundational - not an afterthought.
Responsibilities
- build automation to continuously assess and enforce firewall rules, ACLs, and routing policies - treating network security configuration as code
- Own our vulnerability management process for network-layer exposure: scanning, prioritization, and remediation tracking in partnership with infrastructure engineers
- Lead incident response for network-layer security events: detection, containment, root-cause analysis, and post-incident hardening
- Partner with legal, compliance, and leadership to support regulatory requirements and customer security reviews as they arise
- Design and implement a scalable NDR pipeline that ingests flow data across bare-metal switches and cloud VPCs, feeds a centralized SIEM, and generates actionable alerts with low false-positive rates
- Develop runbooks and automated playbooks for the highest-probability incident scenarios - credential compromise, lateral movement, and exfiltration from IP-sensitive environments
- Integrate EDR/XDR telemetry with SASE enforcement and CASB inline controls to build a unified DLP detection and response pipeline spanning endpoints, cloud SaaS, and the corporate network
- Partner with end-user and IT teams to roll out MDM/MAM policies that containerize sensitive IP on engineer devices and enforce compliance-based conditional access across managed and unmanaged environments
- Relocation support for those moving to San Jose (Santana Row)
Requirements
- Have built or operated network security monitoring at scale - you know the difference between a good alert and noise, and you can architect a detection pipeline that surfaces real signal
- Experience with EDA environments or semiconductor IP security
- Familiarity with cloud-native network security controls on AWS, GCP, or Azure (security groups, VPC flow logs, cloud firewalls, CSPM)
- Experience with eBPF-based network observability and security tooling
Benefits
- Medical, dental, and vision packages with generous premium coverage
- $500 per month credit for waiving medical benefits
- Various wellness benefits covering fitness, mental health, and more
Company info
- We are the first inference-focused frontier AI system, betting early on transformer and transformer-like architectures and on increasing model sizes.
- We are a fully in-person team in San Jose (Santana Row), and greatly value engineering skills.
This listing is sourced directly from Etched's careers page and normalized into a canonical job model.