Lead Security & Network Engineer

With multiple awards to our name, Larian Studios has proven that we’re dedicated to delivering high-quality role-playing games. As we move on to new projects, the studio that brought you Baldur’s Gate 3 & Divinity: Original Sin 2 is looking for a Lead Security & Network Engineer to lead the efforts on the company's security strategy and to ensure secure infrastructure.

Responsibilities

1. Manage a team of 5 security/network engineers
2. Identify, assess, and mitigate vulnerabilities in infrastructure components and applications
3. Deploy and use security tools to identify and resolve issues across a wide range of systems and applications
4. Run security monitoring, vulnerability assessments, and forensic log analysis to proactively detect security incidents and threats
5. Enforce network security policies and procedures
6. Install and maintain network equipment (switches, routers, firewalls)
7. Implement and manage network security components such as next-generation firewalls, intrusion detection and prevention (IDS/IPS) systems
8. Maintain documentation regarding network hardware and software
9. Assist in technical design and implementation
10. Perform technical security audits
11. Develop best practices and ensure documentation is up to date
12. Design and implement security baselines for operating systems
13. Educate and train staff on information system security best practices
14. Investigate and utilize new technologies, tools, and techniques to enhance security capabilities and performance
15. Work closely with the IT management team on the company’s information security strategy
16. Participate in change management workflow
17. Responsible for ensuring incident handling procedures and security incident reporting

Requirements

1. Experience managing a team of 5+ people
2. Minimum 5 years’ relevant experience working in a challenging IT environment
3. Expert knowledge of network design, systems, and protocols
4. Experience in WAN/LAN technologies (ethernet/fiber/MPLS)
5. Experience working in datacenter environments
6. Background in design, configuration, and troubleshooting of routing protocols OSPF, BGP, EIGRP, VRF
7. Experience with enterprise network switching, routers, and firewalls
8. Experience with Cisco equipment
9. Experience with Palo Alto hardware/software
10. Knowledge of multiple security domains
11. Experience with vulnerability assessments and penetration testing
12. Proven ability to implement proper system security controls, metrics, and performance indicators for IT systems and service security
13. Knowledge of security frameworks and industry best practices
14. Excellent communication skills in English

Nice to have

1. Responsibility for security across multi-site locations
2. AWS experience
3. Experience with automation platforms such as Terraform & Ansible
4. Experience with scripting for automations