Role Description This position may be filled as a Level I, II, or III based on additional responsibilities and qualifications required. The responsibility of this position includes serving as a cybersecurity infrastructure engineer in the enterprise Cybersecurity Operations team. This position serves as a systems engineer responsible for the implementation, maintenance, analysis, and reporting of the enterprise cybersecurity related systems utilized by the IT department using a comprehensive security knowledge of Endpoint, Server, IOT, IT Security Management Platforms, LAN and WAN technologies. Responsibilities - Responsible for the monitoring and support of all Intrusion Detection/Intrusion Prevention Systems within the organization. - Conduct security monitoring and tuning recommendations for all Next Generation Firewall Systems, Routing and Switching infrastructure. - Monitor and manage enterprise logging and vulnerability management systems. - Assist management in the planning and implementation of a defense in depth program. - Serve as a liaison between the IT department and Information Security/Audit departments. - Responsible for monitoring and tuning recommendations for enterprise endpoint detection response and network detection response systems. - Provides 24x7x365 support operations for all security monitoring infrastructure. - Serve as a member of the Security Operations Center and provide daily support. - Perform additional duties as assigned. Qualifications - At least 1-4 years of experience in network infrastructure and security. - Demonstrated experience in the daily implementation, support, and auditing of networks, operating systems, and applications. - Solid understanding of how to implement vulnerability remediation technologies. - Proven experience in: - Security incident response - Intrusion Detection and Prevention - Next Generation Firewall - Penetration testing techniques and tools - Using project management methodologies - Firewalls, proxies, virus protection and remediation - Experience in routing and switching environments and routing protocols. - Working knowledge of network infrastructure components. - Knowledge of operating systems including Windows, UNIX, and Linux. - Understanding of Patch Management processes and procedures. - Administrative and security expertise in the implementation and support of network infrastructure. - CCNP, CCIE, GIAC, CISSP or other network and security certifications preferred. - Network Infrastructure and Security Experience in the Financial Industry preferred. - Experience with SIEM technology – Splunk preferred. - Experience with NGFW and NGFW Management Platforms – Fortinet FortiManager, Fortinet FortiAnalyzer preferred. - Experience with Vulnerability Management Platforms – Rapid7 preferred. Requirements - At least 5-7 years of experience in network infrastructure and security (Level II). - System administration experience in a large production environment (500+ Servers, 200+ routers, 5000 devices). - Experience in the daily implementation, support, and auditing of networks, operating systems, and applications based on best practices. - Experience with implementing vulnerability remediation technologies. - Bachelor of Science degree preferred (Level II). Benefits - At least 8-10 years of experience in network infrastructure and security (Level III). - Ability to work in a heterogeneous computing environment. - Bachelor of Science degree preferred (Level III). Physical Requirements/Working Conditions - Must be able to sit for long periods of time and use computer keyboard and/or mouse, while viewing computer screens.

• Build next-generation security products – Shape and deliver innovative solutions by integrating Nira’s governance capabilities into Dropbox and driving a standalone security offering for the broader market. • Lead an AI-driven roadmap – Define and launch intelligent features that use AI and automation to streamline access control, enforce real-time DLP, and proactively detect security risks. • Expand Dropbox’s impact in the market – Identify opportunities in the SMB and mid-market security space, craft a clear product vision, and accelerate adoption with a differentiated value proposition. • Deliver breakthrough product experiences – Partner with engineering and design to launch automated access reviews, AI-powered security insights, and compliance workflows that raise the bar on security. • Turn insights into action – Work directly with customers to uncover their toughest data governance and AI security challenges, and translate those needs into high-impact product features. • Drive seamless execution – Collaborate across engineering, security, compliance, and go-to-market teams to launch products that meet global standards (SOC 2, ISO 27001, GDPR, etc.) and delight customers.

• Perform security assessments, control effectiveness review, and cyber incident response • Build and write scripts/queries to assess the security posture of CIS infrastructure • Provide regular reporting on the status of the information security program to senior staff • Ensure continued compliance of the security and privacy programs with all applicable laws and regulations • Assist with security incidents and events to protect corporate information assets, including IP, data, and company reputation • Develop and monitor continuous audit and assessment practices; Support the implementation and maintenance of current laws, regulations, and industry best practices • Maintain a current understanding of the Cyber threat landscape • Communicate best practices and risks across the organization • Assist with internal Phishing engagements and vulnerability management • Other tasks and responsibilities as assigned

• Lead major cybersecurity incidents from detection through containment, eradication, recovery, and post-incident review; including participating in on-call rotation. • Serve as the top escalation point for complex, high-severity incidents, ensuring rapid and effective resolution. • Develop, maintain, and optimize incident response playbooks, runbooks, and escalation procedures. • Oversee enterprise-wide monitoring of networks, cloud, and endpoints for threats, vulnerabilities, and anomalous activity. • Advance detection capabilities using EDR, SIEM, and behavioral analytics aligned with MITRE ATT&CK. • Act as subject matter expert on EDR and SIEM. • Design and implement automation frameworks (Python, PowerShell, AWS Lambda) to streamline response workflows and reduce manual effort. • Integrate AI/ML models into security monitoring and response processes for enhanced detection accuracy and prioritization. • Conduct forensic investigations and threat hunting to identify root causes and emerging threat patterns. • Collaborate cross-functionally with infrastructure, application, and network teams to enforce secure configurations and compliance. • Mentor and guide incident response analysts, fostering technical growth and operational excellence. • Communicate effectively with executives and technical teams during and after incidents, producing clear reports and recommendations. • Drive continuous improvement in detection, response, and prevention strategies to strengthen enterprise security posture.