Network Security Engineer

Job Title

Network Security Engineer

Role Summary

As Etched's first dedicated Network Security Engineer, you will design and implement the company's network security posture across on‑prem datacenters, office locations, and multi‑cloud environments. You will harden physical and virtual networks, protect ASIC/HPC development workflows and IP, and build detection and response capabilities.

This is a high‑ownership role working with infrastructure, IT, legal, and compliance to establish least‑privilege access, segmentation, and continuous monitoring for mission‑critical compute environments.

Experience Level

Mid-level (Level - Mid-Career). Typically 3–7 years of relevant network or security engineering experience.

Responsibilities

Primary responsibilities include designing, deploying, and operating network security controls and processes that protect high‑value compute and chip‑design environments.

• Design and implement a zero‑trust (ZTNA) network architecture for on‑prem datacenters, offices, and multi‑cloud, including secure remote access that replaces VPN sprawl.
• Define and enforce network segmentation to isolate ASIC/HPC/EDA workflows from corporate, customer, and manufacturing networks.
• Deploy, tune, and operate NDR, IDS/IPS, and next‑generation firewalls across physical and virtual network fabrics; treat network configuration as code and automate rule enforcement.
• Integrate and operate EDR/XDR, MDM/MAM, SASE, and CASB tooling to enforce unified DLP and device compliance across endpoints, cloud, and network planes.
• Own vulnerability management for network‑layer exposures: scanning, prioritization, and remediation tracking with infrastructure teams.
• Lead incident response for network‑layer events: detection, containment, root‑cause analysis, and post‑incident hardening; develop runbooks and automated playbooks.
• Architect and operate an NDR pipeline that ingests flow data from switches and cloud VPCs, feeds SIEM, and produces low‑noise actionable alerts.
• Partner with legal, compliance, and leadership to support regulatory requirements and customer security reviews.

Requirements

Must-have qualifications:

• Deep networking and packet‑level analysis expertise across firewalls, routing (BGP), multi‑cloud networking, and CASB/SASE integrations.
• Hands‑on experience with Fortinet (firewalls, FortiSASE, FortiAPs, switches) and Arista switch platforms, including EOS automation.
• Proven experience designing and operating ZTNA models and secure remote access for distributed engineer populations.
• Experience deploying and integrating EDR/XDR, MDM/MAM, SASE, and CASB into unified DLP and access control frameworks.
• Strong Linux networking fundamentals (iptables/nftables, network namespaces, eBPF) and experience building network security monitoring at scale.
• Ability to treat security as engineering: write automation, version‑control configurations, and produce intent‑driven network automation.
• Experience securing high‑value compute environments (datacenters, HPC clusters, semiconductor or similar environments) and operating with minimal oversight.
• Clear communicator who can explain risk to technical peers and non‑technical leadership and translate security requirements into actionable infrastructure changes.

Nice‑to‑have:

• Experience with EDA environments or semiconductor IP security.
• Familiarity with cloud‑native network security controls on AWS, GCP, or Azure (security groups, VPC flow logs, cloud firewalls, CSPM).
• Exposure to NIST, SOC 2, or ISO 27001 frameworks.
• Experience with eBPF‑based network observability and security tooling.

Education Requirements

Not specified.

About the Company

Company: Etched

Headquarters: San Jose, CA, United States

Etched develops purpose-built AI inference ASICs and systems optimized for transformer models, aiming to deliver significantly higher performance, lower cost, and lower latency than GPUs. The company focuses on enabling applications like real-time video generation and advanced reasoning agents, and is backed by leading investors and engineers.