Network Operations Security Engineer (US - Remote)

About this role

AXON Networks delivers a robust AI-driven, analytics-based orchestration platform and a wide portfolio of next-gen high-speed routers that leverage the newest Wi-Fi technologies. Together, these technologies give ISPs the ability to manage and troubleshoot their networks in real time, and to deliver an outstanding customer experience.

AXON Networks is a trusted strategic partner for its customers, helping them evaluate their current technologies and business models, and creating and executing strategies that enable them to innovate faster, accelerate their digital transformations, and strengthen their relationships with consumers.

AXON Networks is headquartered in Irvine, CA USA with Asia HQ in Singapore and also operating in Denmark, Spain and Vietnam.

The Network Operations Security Engineer serves as the designated Security Champion for Network Operations. The role translates enterprise security requirements, vulnerabilities, and threat information into actionable operational controls and coordinated remediation across production networks, cloud infrastructure, Kubernetes-based services, and device-management environments. The engineer partners with centralized Information Security, Engineering, DevOps, NOC, and Support to reduce operational security risk without compromising service reliability or customer availability.

This is an embedded, production-focused security engineering role—not ownership of the enterprise information security program, not a general compliance analyst position, and not a replacement for Engineering or system-owner responsibility to implement technical fixes.

Responsibilities

Security Champion and Information Security Partnership

• Act as the designated Network Operations representative in the Security Champions Council; communicate security requirements, emerging threats, standards, and priorities to operational teams.

• Coordinate with centralized InfoSec on risk classification, remediation deadlines, escalations, exceptions, evidence, and technical guidance.

• Promote security awareness, practical controls, and repeatable secure operating practices within NOC, Support, and Operational Excellence.

Production Vulnerability Remediation

• Assess how reported CVEs, scanner findings, misconfigurations, and exposures affect production network and infrastructure services; work with asset and service owners to confirm applicability and customer impact.

• Coordinate remediation plans with Engineering, DevOps, Cloud Operations, and system owners; identify maintenance windows, dependencies, service risks, rollback requirements, and validation steps.

• Track operational execution and provide verified closure evidence to InfoSec; escalate overdue or high-risk remediation while avoiding a duplicate enterprise vulnerability tracking program.

Operational Security and Change Readiness

• Review production-impacting designs, releases, and changes for operational security readiness, including access, network exposure, segmentation, logging, monitoring, recovery, and rollback.

• Identify negative/failure scenarios and security-sensitive operational dependencies; recommend controls and document residual risks for the appropriate approval authority.

• Partner with Change Management and Operational Readiness functions to ensure secure deployment and post-change validation.

Network, Cloud and Infrastructure Security

• Assess operational security posture of network devices, connectivity, management interfaces, cloud workloads, containers, Kubernetes, IAM, secrets, and service-to-service access within the supported environment.

• Work with platform and network engineering owners to improve configuration baselines, privileged access, patching, network segmentation, telemetry, and resilience.

• Help identify and reduce risk in CPE/device-management workflows, remote management, firmware rollouts, and associated production services where applicable.

Security Incident Readiness and Response

• Participate in security-related production incidents, supporting scoping, triage, containment, recovery, customer-impact analysis, and evidence preservation under the enterprise incident response framework.

• Coordinate NOC/Support/Engineering response and operational communications with InfoSec; support post-incident reviews and ensure operational corrective actions are completed.

• Improve security-relevant alerts, runbooks, escalation paths, and operational response exercises.

Automation, Metrics and Continuous Improvement

• Partner with Operational Excellence and automation engineers to reduce manual security checks and improve security-related monitoring and response workflows.

• Maintain operational metrics for remediation execution, overdue actions, security change readiness, control coverage, and recurring security incidents; feed authoritative data into InfoSec reporting.

• Drive lessons learned into monitoring, documentation, change procedures, and production

Required qualifications

• 5+ years in network/infrastructure security engineering, production operations, cloud infrastructure, SRE, or a closely related technical role.

• Strong understanding of TCP/IP, routing, DNS, TLS, firewalls, segmentation, access controls, and troubleshooting in production environments.

• Practical experience assessing vulnerabilities, CVEs, exposure, risk, remediation planning, and validation; familiarity with vulnerability and cloud security tools.

• Experience with production incidents, change management, rollback planning, operational readiness, and cross-functional engineering coordination.

• Working knowledge of cloud environments, containers/Kubernetes, monitoring/logging, and infrastructure security concepts.

• Ability to communicate technical risk and operational tradeoffs clearly to Engineering, Operations, and Information Security.

Preferred Qualifications

• Telecom/broadband/ISP, CPE, gateways, routers, ONTs, Wi-Fi, ACS, TR-069, TR-369/USP, or…