Network Security Engineer
Etched is an AI-hardware company building rack-scale frontier inference clusters.
Funding history
About Etched
Etched co-designs chips, racks, software, and manufacturing systems for efficient inference of frontier AI models, targeting throughput, latency, cost, and power efficiency across prefill and decode workloads.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own network security architecture across on-premise datacenters, offices, HPC clusters, and cloud platforms. You will implement segmentation, zero-trust access, security monitoring, vulnerability management, incident response, and automated security controls. You will integrate endpoint, network, cloud, and data-loss-prevention tooling into a unified security posture.
Requirements
- Networking expertise including packet analysis, firewall log forensics, BGP, multi-cloud networking, and CASB/SASE integration
- Experience with Fortinet firewalls, FortiSASE, FortiAPs, and switches
- Experience with Arista switches and EOS automation
- Network-security automation and version-controlled configuration
- Experience securing high-value compute environments
- Experience integrating EDR/XDR, MDM/MAM, SASE, and CASB
- Experience with ZTNA-based access models
- Linux networking knowledge including iptables, nftables, network namespaces, and eBPF
- Experience operating network security monitoring at scale
- Risk communication skills
Responsibilities
- Design and implement zero-trust network architecture
- Define and enforce network segmentation policies
- Deploy, tune, and operate NDR, IDS/IPS, and next-generation firewalls
- Automate assessment and enforcement of firewall, ACL, and routing policies
- Integrate EDR/XDR, MDM/MAM, SASE, and CASB tooling
- Own network-layer vulnerability management
- Lead incident response for network security events
- Architect segmentation for HPC clusters
- Deploy ZTNA-based corporate access
- Design a network detection and response pipeline feeding a SIEM
- Develop incident runbooks and automated playbooks
- Support regulatory requirements and customer security reviews
Benefits
- Medical, dental, and vision coverage
- $500 per month credit for waiving medical benefits
- $2,500 per month housing subsidy for eligible employees living within walking distance of the office
- Relocation support for moves to San Jose
- Wellness benefits
- Daily office lunch and dinner
- Unlimited compute budget subject to ROI justification