Role Description The Senior Network Security Engineer is responsible for designing, implementing, and maintaining secure enterprise network architectures across on-premises, cloud, and hybrid environments. This role serves as a technical leader for network security initiatives, driving Zero Trust adoption, secure remote access solutions, firewall strategy, segmentation, and advanced threat protection capabilities. - Design, implement, and support secure network architectures across enterprise and cloud environments. - Engineer and maintain firewalls, VPNs, proxies, IDS/IPS solutions, and network access control technologies. - Lead network segmentation and Zero Trust initiatives. - Perform firewall rule reviews, policy optimization, and attack surface reduction efforts. - Design secure remote access and multi-factor authentication solutions. - Integrate security telemetry into SIEM platforms for monitoring, alerting, and incident response. - Support cloud networking security controls across AWS, Azure, and hybrid environments. - Lead major security infrastructure upgrades and architecture modernization efforts. - Collaborate with cybersecurity, infrastructure, and cloud teams to implement enterprise security standards. - Develop technical documentation, network diagrams, and security design artifacts. Qualifications - Bachelor's degree in Networking, Cybersecurity, Information Technology, or related field. - 6 to 10 years of network security engineering experience. - Proven experience leading enterprise security architecture upgrades or transformation projects. - Knowledge of: - Firewalls - Routers and switches - VPN technologies - Proxy solutions - IDS/IPS platforms - Network Access Control (NAC) - Segmentation technologies - Strong understanding of: - Secure network architecture - Zero Trust principles - Cloud networking - Hybrid environments Requirements - Hands-on experience with: - Palo Alto Prisma Access - Palo Alto Virtual Firewalls - Knowledge of: - NIST SP 800-160 - Executive Order 14028 - CISA Binding Operational Directives - Experience with additional SASE platforms: - Zscaler - Fortinet - Cloudflare - VMware - Must be United States Citizen. - The flexibility to work occasional non-duty hours or on weekends to support specific project or mission requirements. Benefits - Health Care Plan (Medical, Dental & Vision). - Retirement Plan (401K w/ employer matching). - Paid Time Off & 11 Paid Public Holidays. - Short and Long-Term Disability. - Healthy Work-Life Balance. - Training & Development.

• Perform weekly code reviews to catch vulnerabilities before they ship • Track, prioritize, and drive remediation of security vulnerabilities across the stack • Coordinate external security audits and penetration tests, and follow through on findings • Maintain and evolve our risk register, mapping all company services and prioritizing what's exposed • Support audit follow-up and keep GRC documentation up to date • Communicate new threats to the team, document findings, and broadcast security updates company-wide • Run phishing simulations and security training (via Riot) • Own the monitoring of security channels and alerts, including weekend coverage, so nothing goes unanswered • Set up and secure new employee devices (MDM), manage access provisioning/deprovisioning • Keep an eye on emerging attack techniques targeting generative AI (prompt injection, jailbreaks, content filter bypass) • Track security incidents and vulnerabilities disclosed by the third-party AI providers we rely on

• As a Security Engineer, you will take ownership of protecting our product, users, and collaborators as we scale a fast-growing AI dating platform • You'll work hands-on across application security, risk & compliance, and security awareness (plus keeping an eye on AI-specific threats as our product line evolves) • Perform weekly code reviews to catch vulnerabilities before they ship • Track, prioritize, and drive remediation of security vulnerabilities across the stack • Coordinate external security audits and penetration tests, and follow through on findings • Maintain and evolve our risk register, mapping all company services and prioritizing what's exposed • Support audit follow-up and keep GRC documentation up to date • Communicate new threats to the team, document findings, and broadcast security updates company-wide • Run phishing simulations and security training (via Riot) • Own the monitoring of security channels and alerts, including weekend coverage, so nothing goes unanswered • Set up and secure new employee devices (MDM), manage access provisioning/deprovisioning • Keep an eye on emerging attack techniques targeting generative AI (prompt injection, jailbreaks, content filter bypass) • Track security incidents and vulnerabilities disclosed by the third-party AI providers we rely on

• Take ownership of protecting our product, our users, and our collaborators • Work hands-on across application security, risk & compliance, and security awareness • Perform weekly code reviews to catch vulnerabilities before they ship • Track, prioritize, and drive remediation of security vulnerabilities across the stack • Coordinate external security audits and penetration tests, and follow through on findings • Maintain and evolve our risk register, mapping all company services and prioritizing what's exposed • Support audit follow-up and keep GRC documentation up to date • Communicate new threats to the team, document findings, and broadcast security updates company-wide • Run phishing simulations and security training (via Riot) • Own the monitoring of security channels and alerts, including weekend coverage • Set up and secure new employee devices (MDM), manage access provisioning/deprovisioning • Keep an eye on emerging attack techniques targeting generative AI (prompt injection, jailbreaks, content filter bypass) • Track security incidents and vulnerabilities disclosed by the third-party AI providers we rely on