Network Security-NDR

Calling all innovators - find your future at Fiserv.

We’re Fiserv, a global leader in Fintech and payments, and we move money and information in a way that moves the world. We connect financial institutions, corporations, merchants and consumers to one another millions of times a day - quickly, reliably, and securely. Any time you swipe your credit card, pay through a mobile app, or withdraw money from the bank, we’re involved. If you want to make an impact on a global scale, come make a difference at Fiserv.

Job Title

Network Security-NDR

About your role:

In this role, we will rely on you to engineer, implement and support network security controls that protect enterprise infrastructure across on-premises, cloud and hybrid environments. You will help strengthen network defenses, improve visibility into traffic and threats, and support secure, resilient connectivity across the organization.

This role requires strong hands-on experience in network security engineering, operational support and continuous improvement. The ideal candidate brings practical expertise with enterprise security technologies, strong troubleshooting ability and experience using ExtraHop to enhance network visibility and threat detection.

What you’ll do:

• Engineer, implement, and support enterprise network security solutions while partnering with infrastructure, cloud, architecture, and security operations teams to maintain secure connectivity.
• Develop custom applications, integrations, and automation services that enhance Network Detection and Response (NDR) capabilities, improve network visibility, and reduce analyst workload.
• Build and continuously improve detection analytics, enrichment pipelines, and automated response workflows to identify anomalous and malicious network activity.
• Create automated mechanisms to collect, normalize, enrich, and analyze network telemetry to improve detection fidelity and operational effectiveness.
• Deploy, maintain, and scale security automation solutions using modern software engineering, DevOps, Infrastructure-as-Code, and CI/CD practices; Administer, optimize, and maintain security technologies including firewalls, VPNs, IDS/IPS, network segmentation controls, and secure access platforms.
• Utilize ExtraHop and other monitoring tools to analyze network traffic, investigate anomalies, identify suspicious activity, and improve overall network visibility. Monitor and analyze network activity and security events to support threat detection, incident response, forensic investigations, and operational troubleshooting.
• Support vulnerability management, risk assessments, audits, compliance activities, and remediation efforts related to network security controls; Develop engineering documentation, operational procedures, runbooks, and standards.

Experience you’ll need to have:

• Hands-on expertise with enterprise firewalls (Palo Alto, Check Point, Cisco Firepower, Fortinet) including deployment, administration, and troubleshooting.
• Strong network security engineering experience with firewall policy management, rule optimization, and network segmentation.
• Hands-on experience with ExtraHop or NDR for network traffic analysis, anomaly detection, threat investigation, and operational visibility.
• Proficiency in TCP/IP networking fundamentals, including routing, switching, DNS, DHCP, and load balancing.
• Experience with VPN technologies supporting secure remote access and site-to-site connectivity.
• Knowledge of IDS/IPS technologies, network threat detection, and traffic analysis methodologies.
• Strong troubleshooting skills using packet capture and analysis tools to investigate network and security incidents.
• Understanding security controls across on-premises, cloud, and hybrid environments, including segmentation and Zero Trust principles.

Experience that would be great to have:

• 5+ years’ experience with AI coding tools such as GitHub Copilot, Microsoft Copilot, Cursor, or Claude Code.
• Exposure to AI agents, workflow automation, and process orchestration.
• Experience developing APIs, integrations, or automation solutions and familiarity with DevOps, CI/CD, Infrastructure-as-Code, and Git-based development.
• Understanding of cybersecurity and cloud technologies, including firewalls, Zero Trust, Azure, AWS, or GCP.
• Familiarity with SIEM platforms, centralized logging, and event correlation to support network security monitoring and investigations.
• Expe…