Title: Principal Network Security Engineer - Location: 999 Peachtree Street NE Atlanta, GA 222 North LaSalle St Chicago, IL 8214 Westchester Dr Dallas, TX 7 Easton Oval Columbus, OH 7906 North Sam Houston Parkway West Houston, TX 2025 Woodward Ave Detroit, MI 101 South Tryon Street Charlotte, NC - Reference Number:R0071244 Job Description: This position is onsite and available to be filled at any Huntington Corporate office location (see location options on posting) Summary: The Principal Network Security Engineer provides technical and engineering expertise for the Network Security Department. Will demonstrate their expertise on provisioning, supporting, and ongoing maintenance of Network Security operating platforms, applications and services. Is responsible for providing and implementing the technological solutions and configurations that are in alignment with the overall enterprise Network Security strategy and objectives. Provide management, design, and support for Internet proxy systems and enterprise web browser systems. Duties & Responsibilities: - Conduct security engineering necessary to maintain the confidentiality, availability, and integrity of enterprise data and information systems. - Provide excellent customer service for internal and external customers in support of security initiatives, incident response, and support. - Evaluate, design, and implement security related solutions, adhering to established change control processes. - Lead the design, implementation, and delivery of Network Security applications and appliances, including NGFWs, IDS/IPS, Anti-virus, Web Application Firewalls, etc. - Lead the Security Architecture and/or senior level enterprise engineering programs and committees. - Maintain a high level of technical expertise on Network Security defense-in-depth technology and best practices by performing ongoing research and engagement to maintain awareness of industry trends, best practices. - Other duties as assigned. Basic Qualifications: - 8+ years of production support and design of Network Security technologies. - 8+ years of operational experience with security technologies. - 8+ years of implementing or utilizing technology lifecycles and best practices. - Associate's Degree or 4+ additional years of equivalent experience. Preferred Qualifications: - 5+ years of experience with web URL filtering, browser security, and/or remote browser isolation. (iBoss, Zscaler, or Netskope, etc) - 2+ years of professional experience with secure enterprise internet browsers - Expert level knowledge of core networking protocols including BGP, DNS, HTTP/S, DNS, etc... - Expert level knowledge of operating systems, e.g. Windows, Linux, & Unix - Expert level network troubleshooting skills utilizing packet capture/analysis packages such as Wireshark, TCPdump, etc… - Excellent customer facing communication skills (both written and verbal) - Experience writing professional level documentation covering topics related to networking or application Network Security technologies. These include design and implementation documents, process documents, SLAs, etc. Exempt Status: (Yes = not eligible for overtime pay) (No = eligible for overtime pay) Yes Workplace Type: Office Our Approach to Office Workplace Type Certain positions outside our branch network may be eligible for a flexible work arrangement. We're combining the best of both worlds: in-office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team. Compensation Range: $93,000 - $189,000 Annual Salary The compensation range represents the anticipated low and high end of the base compensation range for this position. Actual compensation will vary based on various factors including but not limited to location, experience, and education.  Colleagues in this position are also eligible to participate in an applicable incentive compensation plan.  In addition, Huntington provides a variety of benefits to colleagues, including health insurance coverage, wellness program, life and disability insurance, retirement savings plan, paid leave programs, paid holidays and paid time off (PTO). Huntington is an Equal Opportunity Employer. Tobacco-Free Hiring Practice: Visit Huntington's Career Web Site for more details. Note to Agency Recruiters: Huntington will not pay a fee for any placement resulting from the receipt of an unsolicited resume. All unsolicited resumes sent to any Huntington colleagues, directly or indirectly, will be considered Huntington property. Recruiting agencies must have a valid, written and fully executed Master Service Agreement and Statement of Work for consideration.

• Delivering timely and accurate development of cyber artifacts needed for the program • Lead cybersecurity efforts for specific software development and engineering projects • Develop the cybersecurity requirements to be included in and allocated to the product baseline(s) • Assess, document, and report on the cybersecurity posture of various systems. • Develop and implement cyber mitigation strategies in response to identified vulnerabilities • Managing the cybersecurity policies, best practices, controls, and technologies used to secure applications, data, and infrastructure in cloud environments • Creating a framework for integrating security measures and controls into the design and implementation of a software solution • Identifying and prioritizing potential threats to a system, application, or organization • Accurately monitor, track, and report on cybersecurity project status to internal and external stakeholders • Coordinates with Leidos PMO and customer stakeholders to prioritize cybersecurity tasks

• design, develop, and implement security controls and solutions that enhance AbbVie’s security hygiene • ensure that security measures are effectively integrated into IT systems and applications • collaborate with IT, network, and other relevant departments to align security measures with organizational goals and compliance requirements • partner with platform and application teams to establish clear security baseline requirements, following the Center for Internet Security Critical Security Controls (CIS 18) • utilize existing enterprise tools dedicated to vulnerability management, asset inventory, and cyber hygiene to ensure that all assets meet established security baseline requirements • develop custom integrations using APIs or other scripting tools for high-risk applications to enable proactive monitoring of critical security controls • demonstrate a foundational understanding of how artificial intelligence (AI) and machine learning technologies work, including their strengths, limitations, and common enterprise use cases, particularly as they relate to cybersecurity • leverage AI-enabled tools and capabilities to improve security posture and hygiene outcomes, such as enhancing visibility, identifying configuration drift, prioritizing risk, or accelerating analysis and decision-making • lead posture and hygiene efforts to effectively drive and complete initiatives successfully. This includes coordinating stakeholders, setting clear objectives, and maintaining sustained focus on improving the organization’s security posture • manage documentation such as baselines, Standard Operating Procedures (SOPs), policies, and work instructions in accordance with AbbVie requirements, ensuring accuracy, currency, and alignment with organizational standards

• Deliver high-impact security engineering solutions across detection and platform engineering service streams • Design and implement detection capabilities, automate security workflows, and enhance security platform infrastructure • Lead incident response coordination and act as escalation point for security incidents across Canva's cloud-native infrastructure, including participation in on-call rotation • Investigate and triage security alerts, coordinating containment, eradication, and recovery activities across a range of security events • Lead and contribute to post-incident reviews, translating incident learnings into improved detections, playbooks, and response processes • Build and maintain automation workflows and response playbooks that streamline investigation, triage, and response, reducing analyst toil and improving mean-time-to-respond • Partner with CTI, Application Security, and Red Team to turn threat intelligence and emerging risks into practical detection and response outcomes • Develop and improve security response tooling and capabilities across areas including case management, automation, SOAR, SIEM, and forensics