Lead Network Security Engineer

Who are we hiring? The Lead Network Security Engineer is a member of MSG’s Information Technology Security Engineering & Architecture organization and leads the efforts around IT Cyber Security service design, solution selection and configuration, technology delivery and long-term platform evolution, focusing on network and cloud technology platforms. This technology thought leader has a history of developing complex technical security capabilities and automation which enables the organization to efficiently implement the controls, governance and protection that is needed to ensure the company’s assets are secure. This outcomes-oriented person is both a security specialist having worked with a wide variety of security related technologies but is also a broad technologist with experience in securing complex network environments from LAN, WAN, SD-WAN to firewalls and perimeter protection solutions. This unique individual should have vast experience in setting and fulfilling network security standards and configuration management for all aspects of the network fabric and its third-party dependencies. From working on solutions for leading professional sports teams to building capabilities for some of the world’s most renown entertainment venues, the Lead Network Security Engineer will play a critical role in influencing the technical direction of the Madison Square Garden Company and protecting its digital interests. What will you do? Working closely with the Head of Technology Security, Security Architect and other leaders, will be responsible for the evaluation of existing and future security solutions inclusive of hardware, software and services as it relates to network and connectivity technologies. Leads in the security testing of products, including internal penetration testing; works with third-party security assessment and pen testing vendors. Leads in analyzing software, firmware, and hardware for security vulnerabilities and collaborates with developers and infrastructure teams to plan/implement security controls. Partners with MSG counterparts to implement processes, designs, and implement technologies that reduce network security deficiencies and implement network strategy. Conducts research to identify new attack vectors and formulates strategies and executables to remediate. Responsible for creating & enhancing security requirements for Network Segmentation and Cloud Security programs, with an emphasis on requirements, design, use cases, vendor selection and Analyzes & designs network/security use cases/scenarios for current and future application platforms hosted in 3rd Party Data Centers, Azure & AWS. As a lead member of project steering committees, presents security solutions and supporting material to senior/executive leaders assuring network architecture designs (HLD and LLD) are well vetted for security requirements. Must be fluent in all aspects of network security elements – collaborates with Network Architects in designing networks with proper controls and governance- from conception to execution. Acts as the L3 escalation point for operational issues and security incidents – this is “roll up your sleeves” role who will need to be accepting of some operational responsibilities as the need arises. Responsible for defining, delivering and evolving the approach to network security strategy and firewall management. This is inclusive of security configuration standards, security platforms and tools, configuration management approaches and reporting for all elements of the enterprise network. Works closely with third parties and other solution providers to both drive the efficacy of the security practice at MSG but also implement solutions that continue to evolve the security posture of the company. Responsible for the curation of an effective perimeter defense approach and drives proper techniques throughout the network environment to ensure an appropriate level of protection. This includes driving such initiatives as network segmentation, IP addressing schemes and automated defense practices. Responsible for the technical development of recovery and business continuity plans – ensures that regardless of incident the security infrastructure can survive system shocks and external or internal events. Works closely with Security Architecture and other Technology leaders to define, market and implement the 3-5year technology roadmap inclusive of the security technology platform. Drives hyper-automation into all security products and services ensuring minimal human engagement is necessary to deliver desired outcomes. Leverages partners, cloud services and other resources to lead with an “automation first – cloud first” mentality. Must be able to design for the future. What do you need to succeed? 8-10 years of experience working with the market leading cloud providers which MSG has defined as Amazon AWS, Microsoft Azure and Google Cloud. 8-10 years of security engineering experience inclusive of end point management, cloud security, network segmentation, firewalls and forensics tool sets. 5-8 years-experience operationalizing security services and technologies – must have focused security operations experience, not just product design. 5+ years of integration experience – hands on keyboard experience developing integrated technologies with authentication and authorization platforms, scheduling platforms and enabling on-prem and off-prem systems to work together. Preferred product experience includes: Palo Alto Firewalls & Security modules, Cisco Networks, Private LTE technologies, Tanium, Microsoft Intune, PAM Technologies and AppGate. Bachelor’s degree mandatory. Working knowledge of the following systems/technologies: I&AM, AD, Radius, IBAC, 802.1x, Linux, Windows 10 and networking. Strong knowledge in current security threats and corresponding technologies. Strong understanding of Network Security principles and networking concepts. Ability to work with changing priorities and with multiple projects. Ability to be precise and attentive to detail is essential. SUPERVISION: Ability to work with minimal supervision. SPECIAL REQUIREMENTS OF THE JOB: Will this role require travel? Does this role have specific physical demands? Will this job require operation of a vehicle? Candidate selected may have to travel several times throughout the year to other business locations. Ability to work weekend and off-hour work as and when needed. The Company requires that all individuals, subject to certain limited exceptions, be fully vaccinated against COVID-19. The Company will consider requests for reasonable accommodations regarding this requirement. Why is MSG for me? Madison Square Garden Entertainment Corp. (MSG Entertainment) is a leader in live entertainment. The Company presents or hosts a broad array of events in its diverse collection of venues: New York’s Madison Square Garden, Hulu Theater at Madison Square Garden, Radio City Music Hall and Beacon Theatre; and The Chicago Theatre. MSG Entertainment is also building a new state-of-the-art venue in Las Vegas, MSG Sphere at The Venetian. In addition, the Company features the original production – the Christmas Spectacular Starring the Radio City Rockettes – and through Boston Calling Events, produces the Boston Calling Music Festival. The Company’s two regional sports and entertainment networks, MSG Network and MSG+, deliver a wide range of live sports content and other programming. Also under the MSG Entertainment umbrella is Tao Group Hospitality, with entertainment dining and nightlife brands including: Tao, Marquee, Lavo, Beauty & Essex, Cathédrale, Hakkasan and Omnia. More information is available at www.msgentertainment.com. We invite you to create an exceptional career at MSG Candidates who have completed 60 credits of college-level coursework (representing 2 years), or have shown similar self-development through certifications, trade school coursework, etc. are preferred. Educational requirements may differ from job to job based on the role. We value diversity and are looking for extraordinary employees of all backgrounds At MSG we value diversity and are looking for extraordinary employees of all backgrounds! MSG is an Equal Opportunity Employer and provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, sexual and reproductive health choices, national origin, citizenship, age, genetic information, disability, or veteran status. In addition to federal law mandates, MSG complies with all applicable state and local laws governing nondiscrimination in all locations and will consider requests for reasonable accommodations as required.