Lumin Digital

Lumin Digital

Network Security Software Engineer

Remote- United States · Senior

Sponsorship not specifiedDetected 55 days ago
PythonAWSTerraformCI/CDSite Reliability EngineeringMachine LearningCybersecurityNetwork SecuritySOC OperationsDetection EngineeringIncident ResponseComplianceDNSFirewallCiscoSD-WANZero TrustNetwork EngineeringCommunicationCollaboration

About the role

  • Basic Function Lumin Digital is standing up a dedicated Network Security function within its Risk Engineering group to protect a growing product suite that handles sensitive financial data across multiple product lines.
  • Travel: - Minimal, generally 12 days or less per year (~2 team get-togethers per year).
  • LIFE AT LUMIN DIGITAL Lumin Digital is a trailblazer in digital banking solutions, driven by a unique approach to technology, service, and people.

Responsibilities

  • Own the architecture, implementation, and continuous improvement of Lumin's network security program across cloud, SD-WAN, and ZTNA layers-designing identity-aware, policy-driven controls that secure both human and machine (agent) identities.
  • Design and deliver fully automated, end-to-end network security change management pipelines that eliminate manual toil, accelerate change velocity, and maintain audit-ready evidence at every step.
  • Build and operate real-time network telemetry, monitoring, and alerting systems that provide deep visibility into network activity - integrating threat intelligence feeds, cloud connectivity data, and asset inventories into a unified, automated network defense posture.
  • Manage and tune network-layer detection capabilities - including IDS/IPS signatures, firewall rules, and WAF configuration - to ensure high-fidelity signals for SOC consumption.
  • Operate at the leading edge of AI-assisted development: write precise engineering specifications, direct AI coding agents (e.g., Claude Code, Cursor), and review/validate generated output to build secure, lights-off agentic pipelines that the broader team can learn from.
  • Build and maintain API integrations across the network security technology stack (e.g., Cloudflare, Zscaler, cloud-native controls) with reliability, observability, and audit-readiness designed in from day one.
  • Support compliance audit and assessment activities - including evidence collection, control testing, and auditor walkthroughs for network security domains; maintain an accurate network diagram inventory documenting topology, segmentation boundaries, and data flows.
  • Partner with the Security Operations Center, SRE, and IT to ensure network security controls integrate cleanly with existing infrastructure pipelines, CI/CD workflows, and incident response processes; participate in security architecture reviews and contribute to runbook development and operational documentation-raising the network security bar across the engineering organization.
  • Perform other duties as assigned.
  • Substantive hands-on engineering experience: you write production code, build integrations, and ship tooling-not just policies and diagrams.

Requirements

  • While performing the duties of this job, the employee is regularly required to sit
  • Ability to occasionally lift/move up to 25 pounds.
  • While performing the duties of this job, the employee is regularly required to sit; use hands to type, handle, or feel and talk or hear.

Nice to have

  • CCNP Security, PCNSE (Palo Alto), AWS Solutions Architect, Cloudflare certifications, or equivalent.
  • Relevant certifications are valued but not required if depth of hands-on experience is demonstrated.
  • Direct experience with network security platforms such as Cloudflare (WAF, Workers, Rulesets, Terraform provider), Zscaler (ZIA, ZPA), Palo Alto, or equivalent tier-one solutions.
  • Experience in fintech, banking, payments, or other regulated financial services environments (PCI-DSS, SOC 2, ISO 27001) strongly preferred.
  • Experience with infrastructure-as-code (Terraform, CloudFormation) and CI/CD-driven infrastructure provisioning.
  • Hands-on experience with agentic coding tools and workflows (Claude Code, Cursor, or equivalent)-or demonstrated eagerness and aptitude to adopt them as a primary development methodology.
  • Strong proficiency in at least one backend language (Python strongly preferred
  • Thorough understanding of identity-aware network security-designing controls that authenticate and authorize not just users but services, workloads, and autonomous agents.

Skills

  • Familiarity with agent-to-agent authentication, service mesh architectures, and securing AI/ML workload communications.
  • Experience integrating threat intelligence feeds and automating indicator-of-compromise enrichment into network defense workflows.
  • Lumin Digital is a trailblazer in digital banking solutions, driven by a unique approach to technology, service, and people.
  • These values shape a workplace where collaboration thrives, ideas flourish, and new possibilities are discovered every day.
  • Additional details are provided during the interview process.

Compensation

  • Travel: - Minimal, generally 12 days or less per year (~2 team get-togethers per year).

Benefits

  • Include We take care of our people with medical, dental, and vision insurance, a 401(k) with company match, flexible PTO plus 12 paid holidays, paid sick leave, and paid parental and family leave.
  • We also offer a lifestyle spending account, tuition reimbursement, and a cell phone stipend.

Company info

  • At Lumin, we thrive on curiosity and innovation.
  • Our culture is built on trust in our expertise and decisions, respect for diverse perspectives and talents, and boldness in pursuing new ideas.

Equal opportunity

  • Individuals with a disability who are otherwise able to perform the essential functions of the job may request reasonable accommodation through the Human Resources department.
  • equal opportunity employer.
  • We consider all qualified applicants without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender identity, or any other legally protected basis.
Apply directly at Lumin Digital →Create a free account for alerts like thisView Lumin Digital immigration profile

This listing is sourced directly from Lumin Digital's careers page and normalized into a canonical job model.