Senior Firewall Engineer (Cybersecurity)

Location: US, Remote

Base salary: $175,000–$230,000 annually across Tier 1 and Tier 2 ranges; full-time roles are also eligible for equity in the form of stock options.

Company

hirify.global is a remote cybersecurity company developing NodeZero, a platform for production-safe autonomous penetration testing and security assessment operations.

What you will do

• Partner with Product to define firewall effectiveness, tuning requirements, product outcomes, and buildable specifications.
• Define acceptance criteria for detection, effectiveness, and tuning features, and validate releases before customer delivery.
• Serve as the domain reference for Engineering and AI research through design reviews, technique questions, and vendor behavior analysis.
• Maintain detailed knowledge of AWS WAF, Palo Alto PAN-OS, Fortinet FortiOS, Cisco Secure Firewall, and Check Point Quantum across consoles, policies, traffic, logging, and APIs.
• Define vendor-specific policy semantics and standards for firewall tuning recommendations that block validated attack paths while preserving legitimate traffic.
• Track platform changes and partner with the Attack team to keep firewall coverage, attack-path validation, and remediation guidance aligned with current adversary tradecraft.

Requirements

• 6+ years in firewall engineering, network security, security operations, incident response, or threat hunting, including meaningful practitioner experience.
• Hands-on production administration and tuning of enterprise firewall platforms such as Palo Alto PAN-OS, Fortinet FortiGate/FortiOS, Cisco Secure Firewall, or Check Point Quantum, including rulebases, NAT, segmentation, and policy exceptions.
• Deep understanding of firewall policy outcomes and traffic/threat logs used for triage, containment, and investigation.
• Strong knowledge of false-positive and false-negative tradeoffs, permissive rules, service-availability risks, firewall effectiveness, and coverage assessment.
• Strong working knowledge of MITRE ATT&CK and network-control coverage frameworks, including their limitations.
• Understanding of post-compromise attacker behavior in network traffic and firewall telemetry, including command-and-control, lateral movement, and data exfiltration.
• Experience shaping a product or platform as a security domain expert, with the ability to influence without authority.
• Exceptional technical writing and the ability to translate between engineers, AI researchers, product managers, SOC analysts, and executives.
• Scripting ability, ideally Python, for querying APIs, inspecting telemetry, and prototyping analyses; comfort with SQL and large volumes of event and telemetry data.

Culture & Benefits

• 100% remote work with a culture centered on respect, collaboration, ownership, and results.
• Inclusive environment with diversity, equity, and inclusion as core principles.
• Health, vision, and dental insurance for employees and families.
• Flexible vacation policy and generous parental leave.
• Career development opportunities, collaborative work, competitive compensation, and equity.

Hiring process

• Submitted materials may redact age-identifying information, including age, date of birth, and dates of school attendance or graduation, without penalty.