Network Security Engineer - Onsite at KForce

DescriptionKforce's client is looking for a Network Security Engineer in either New York, NY or Boston, MA. This role will be onsite.Summary:This is a hands-on engineering role for someone who enjoys building, operating, and improving security controls across modern infrastructure - from traditional networks to cloud and identity-driven environments.You'll work across network, endpoint, email, identity, data, and cloud security, partnering closely with infrastructure and security teams to design resilient, scalable defenses. Duties:* Design, implement, and operate network security controls including firewalls, VPNs, IDS/IPS, and network segmentation* Monitor and analyze network traffic to detect threats and anomalous behavior* Define and maintain security standards, policies, and architectures for enterprise networks* Manage secure email gateways to protect against phishing, malware, and other email-based attacks* Implement encryption and authentication controls for email systems* Deploy and manage endpoint security tooling such as EDR, antivirus, and DLP* Respond to and remediate endpoint security incidents* Run vulnerability scanning and assessment programs* Partner with IT and engineering teams to prioritize remediation based on risk* Track remediation progress and communicate status clearly* Implement and maintain security controls across cloud platforms such as AWS and Azure* Help secure cloud infrastructure, applications, and services in hybrid environments* Contribute to cloud security best practices and guardrails* Script and automate security workflows to improve efficiency and reliability* Support incident response and investigations when security events occur* Contribute to documentation, architecture standards, and continuous improvement effortsRequirements* 6+ years of experience in network, infrastructure, or security engineering roles* Strong understanding of IP networking (TCP/IP, routing, switching, VLANs, DNS, DHCP, NAT)* Experience with next-generation firewalls and Layer 7 traffic inspection* Solid knowledge of cryptography concepts (TLS/SSL, VPNs, PKI, encryption)* Familiarity with modern attack techniques (phishing, ransomware, malware, DDoS, MITM, web attacks) and defensive controls* Experience securing cloud environments and modern infrastructure technologies (virtualization, SaaS, PaaS, containers)* Hands-on experience with Windows and Linux environments* Interest and ability to code or script for automation and operational efficiency* Strong communication skills and ability to work collaboratively in a global team* Can combine deep technical fundamentals with curiosity, automation mindset, and a strong sense of ownershipWhat Makes This Role Compelling:* Work on security challenges at enterprise scale in a highly visible environment* Broad exposure across network, cloud, endpoint, identity, and email security* Opportunity to influence how security is designed and implemented across the organization* Collaborative culture that values learning, ownership, and technical excellence* Stable, in-office team environment with strong peer partnership and knowledge sharingJob TypeDirect HireCompensation200000 - $250000