We understand that the world we want tomorrow starts with how we do business today, and that’s why we’re inspired to make A Better World for Pets. Antech is comprised of a diverse team of individuals who are committed to each other’s growth and development. Our culture is centered on our guiding philosophy, The Five Principles: Quality, Responsibility, Mutuality, Efficiency and Freedom. Today Antech is driving the future of pet health as part of Mars Science &amp; Diagnostics, a family-owned company focused on veterinary care.Current Associates will need to apply through the internal career site. Please log into Workday and click on Menu or View All Apps, select the Jobs Hub app, then click the magnifying glass to Browse Jobs.This is a hybrid role that can be based in any of our three hub locations: Fountain Valley, CA; Loveland, CO; or New York City. The Target Pay Range for this position in Loveland, CO  is $124,000-$155,000 annually. The Target Pay Range for this position in NYC is  $ 135,000- $169,000 annually. The Target Pay Range for this position in Fountain Valley, CA is  $130,000-$162,00 annually. At Antech, pay decisions are determined using factors such as relevant job-related skills, experience, education, training and budget. Job Summary: The Network Security Engineer is responsible for designing, implementing and maintaining security controls that protect SDx enterprise network from cyber threats. This role requires expertise in firewalls, intrusion prevention and detection systems (IDS/IPS), content network delivery, and routing tools, Network Access Control (NAC) equipment, Virtual Private Networks and Secure Remote technologies, as well as developing perimeter-less and/or zero-trust security architectures. As part of the cybersecurity team, you will collaborate with information technology departments such as networking and infrastructure, Research &amp; Development-Product Management, DevOps-Software Development, and other members of the cybersecurity team to ensure a secure and resilient network infrastructure.   Key Responsibilities: <ul><li>Design and enforce network security policies and best practices to protect against threats.</li><li>Design and implement secure network architectures, including segmentation, micro segmentation, DDoS protection, and zero trust-based policies within the relationships, workflow, and access to resources.</li><li>Deploy, configure and manage firewalls, IDS/IPS, Network Access Control-NAC, VPNS, proxy solutions including Palo Alto, Cisco, Zscaler, among other.</li><li>Monitor network traffic for anomalies, analyze security logs and respond to network-based threats and intrusions, in coordination with the Mars Incident Response and security teams.</li><li>Conducts and coordinate risk assessments, vulnerability scanning, and penetration testing for network security.</li><li>Implement and enforce network security policies, access controls and encryption.</li><li>Work with the Mars SOC team to assist in investigating security incidents to support forensic investigation and analysis. Further assist with integration of managing Security Incident Event Monitoring-SIEM, Security Orchestration Automation &amp; Response-SOAR, and threat intelligence solutions, among other.</li><li>Automate network security tasks using automation tools such as Python, PowerShell, Ansible, among other.</li><li>Ensure compliance with security frameworks as well as regulatory requirements for network security including NIST, ISO, PCI, among others.</li><li>Optimize security for hybrid and multi-cloud environments including AWS, GCP and Azure, Salesforce, among others.</li></ul>Qualifications &amp; Experience: <ul><li>Bachelors in Cybersecurity, Information Technology, Computer Science, Engineering or related field. Master’s degree is a plus, but not essential.</li><li>8+ years of experience in network security, threat detection, or cybersecurity operations.</li><li>Hand-on experience with firewalls (Palo Alto, Cisco, Checkpoint), IDS/IPS, VPNs, as well as network access control solutions (NAC).</li><li>Strong knowledge of network protocols and technologies (TCP/IP, BGP, OSPF, VLANs, MPLS, DNS, DHCP, etc.).</li><li>Familiarity with Cloud-Native network protection tools.</li><li>Experience with SIEM platforms (Splunk, QRadar, etc.) and log analysis.</li><li>Understanding of Zero Trust architecture.</li></ul>Preferred Qualifications:<ul><li>Experience in regulated industries (finance, healthcare, manufacturing, etc.) applying regulatory regulations and/or security frameworks.</li><li>Hands -on knowledge of security tools (SIEM, EDR, XDR, IDS/IPS, etc.).</li><li>Hands -on knowledge of Content Delivery Network (CDN) and tools such as Cloudflare, Fastly, Azure CDN, Route 53, among other.</li><li>Experience in a laboratory setting, veterinary clinics, healthcare or related systems.</li><li>Experience communicating complex security concepts effectively (technical, non-technical and executive level audiences).</li><li>Relevant certifications such as Certified Ethical Hacker, Cisco Certified CyberOps Associate or CCNP Security, Palo Alto Networks Certified Network Security Engineer (PCNSE) are highly preferred.</li></ul>Physical Demands:<ul><li>Extensive sitting, phone, and computer use</li><li>Extend and reach with hands and arms and use hands and fingers</li><li>Occasionally required to bend, kneel, stoop, or crouch</li><li>May be required to lift, move, and carry up to 15 lbs.</li><li>Specific vision abilities required including close vision, color vision, depth perception, and the ability to adjust focus.</li><li>Hearing ability to effectively communicate via the telephone and in person</li><li>Ability to communicate verbally on the telephone and in person</li><li>Fluency in the English language</li><li>Extended hours may be needed</li></ul>Work Environment:The employee will primarily work in a typical office environment including use of cubicles, computers and overhead lighting. Temperature extremes will be minimal to nonexistent. The noise level in the work environment is usually moderate.  The employee will be required to use a computer, spreadsheets, database management, email, and the Internet.  The employee is frequently required to use a calculator; fax, copy machine, and phone system. About AntechAntech is a leader in veterinary diagnostics, driven by our passion for innovation that delivers better animal health outcomes. Our products and services span 90+ reference laboratories around the globe; in-house diagnostic laboratory instruments and consumables, including rapid assay diagnostic products and digital cytology services; local and cloud-based data services; practice information management software and related software and support; veterinary imaging and technology; veterinary professional education and training; and board-certified specialist support services.Antech offers an industry competitive benefits package and continues to invest in and evolve benefits programs that meet the health, wellness and financial needs of our associates. <ul><li>All Full-time associates are eligible for the following benefits and more: </li><li>Paid Time Off &amp; Holidays </li><li>Medical, Dental, Vision (Multiple Plans Available) </li><li>Basic Life (Company Paid) &amp; Supplemental Life </li><li>Short and Long Term Disability (Company Paid) </li><li>Flexible Spending Accounts/Health Savings Accounts </li><li>Paid Parental Leave </li><li>401(k) with company match </li><li>Tuition/Continuing Education Reimbursement </li><li>Life Assistance Program </li><li>Pet Care Discounts</li></ul>We are proud to be an Equal Opportunity Employer - Veterans / Disabled. For a complete EEO statement, please see our Career page at <a href="http://careers.antechdiagnostics.com/us/en/affirmative-action" target="_blank">Antech Careers</a>. Note to Search Firms/AgenciesAntech Diagnostics, Inc. and its subsidiaries and affiliates (Antech) do not compensate search firms for unsolicited assistance unless they have a written search agreement with Antech and the requisition is position-specific. Any resumes, curriculum vitae, and other unsolicited assistance from search firms that do not have a written search agreement or position-specific requisition submitted to any Associate of Antech will be deemed the sole property of Antech and no fee will be paid in the event the candidate is hired by Antech.