Network Security Engineer - Onsite

Kforces client is looking for a Network Security Engineer in either New York, NY or Boston, MA. This role will be onsite.

Summary This is a hands-on engineering role for someone who enjoys building operating and improving security controls across modern infrastructure - from traditional networks to cloud and identity-driven environments. Youll work across network, endpoint, email, identity, data, and cloud security, partnering closely with infrastructure and security teams to design resilient, scalable defenses.

Duties

• Design, implement, and operate network security controls including firewalls, VPNs, IDS/IPS, and network segmentation.
• Monitor and analyze network traffic to detect threats and anomalous behavior.
• Define and maintain security standards, policies, and architectures for enterprise networks.
• Manage secure email gateways to protect against phishing, malware, and other email-based attacks.
• Implement encryption and authentication controls for email systems.
• Deploy and manage endpoint security tooling such as EDR, antivirus, and DLP.
• Respond to and remediate endpoint security incidents.
• Run vulnerability scanning and assessment programs.
• Partner with IT and engineering teams to prioritize remediation based on risk.
• Track remediation progress and communicate status clearly.
• Implement and maintain security controls across cloud platforms such as AWS and Azure.
• Help secure cloud infrastructure applications and services in hybrid environments.
• Contribute to cloud security best practices and guardrails.
• Script and automate security workflows to improve efficiency and reliability.
• Support incident response and investigations when security events occur.
• Contribute to documentation, architecture standards, and continuous improvement efforts.