[Remote] Information Security Engineer, Network Security Engineering

Note: The job is a remote job and is open to candidates in USA. JLL is a leading global provider of real estate and investment management services, committed to empowering talented individuals to thrive in their careers. They are seeking an Information Security Engineer to secure their global network infrastructure, requiring expertise in Palo Alto Networks technologies and a security-first mindset to optimize security controls and collaborate with various teams.ResponsibilitiesServe as the primary subject matter expert for Palo Alto Networks technologies (NGFWs, Cloud NGFW, Panorama), Web Application Firewall, Content Delivery Network, API Security, IDS/IPS, and DDoS preventionOwn onboarding, policy tuning, and lifecycle management for WAF and CDN platforms; lead firewall ruleset optimization, IDS/IPS tuning, and DDoS protection configurationPartner with internal teams to drive the global rollout, tuning, and operational management of URL filtering and TLS decryption across the network estateLead API security efforts — ensuring API traffic routes through security tooling, identifying vulnerabilities, and working with application teams on fixesLead troubleshooting of complex, multi-layer global network and application issues — from packet captures on inter-continental BGP topologies to WAF false-positive triagePartner with business and application teams to produce clear, actionable security documentation, change proposals, and executive-ready findingsAnalyze existing network security architectures, processes, and procedures to identify gaps and drive meaningful improvementsConfigure and report on defensive measures against advanced threat actor tactics; maintain current awareness of the evolving threat landscape and the effectiveness of our defenses against themCommunicate complex technical problems and solutions clearly to both global engineering teams and C-suite stakeholdersChampion the broader Security team’s initiatives, not just Network Security EngineeringParticipate in the maintenance and tuning of all network security technologies including WAFs, CDNs, VPNs, and application-aware firewallsLeverage and contribute to automation pipelines for global firewall rule deployment and policy management across the network estateUtilize security tooling telemetry and data collection automations to produce actionable reporting and metrics for internal teams and executive stakeholdersSkills5+ years of hands-on network security engineering experience designing and implementing enterprise-scale security solutionsExpert-level proficiency in Palo Alto Networks — NGFWs, Panorama policy management, and PAN-OS; PCNSE or PCNSC certification strongly preferredExpert troubleshooting skills across network and application layers, including packet capture analysis on complex, dynamically routed architecturesDeep understanding of layer 7 web application technologies and WAF/CDN platforms (e.g. Akamai, Cloudflare, Imperva, F5) — onboarding, policy tuning, break/fix troubleshooting, and operational managementSolid grounding in API security — ensuring API traffic routes through security tooling, evaluating identified vulnerabilities, and partnering with application teams to drive remediationStrong HTTP/application security knowledge: TLS interception, SQL injection, XSS, CSRF, command injection, LFI/RFI, rate limiting, bot detection, geo-blocking, and sinkholingIntermediate to advanced network routing and switching knowledge with focus on DNS, TCP/IP, IPsec, TLS, GRE, OSPF, and BGPProficiency in at least one scripting language (Python preferred) and familiarity with Linux/CLI toolingWorking knowledge of public cloud environments (Azure, AWS, GCP)Experience with at least one SIEM platform for log analysis, behavioral analytics, and rule tuningProven written and verbal communication skills, including presenting to both technical and non-technical audiencesProven track record of taking ownership in unstructured environments — cutting through ambiguity, making sound decisions with incomplete information, building stakeholder consensus, and delivering security improvements without waiting for top-down directionIndustry certifications: PCNSE, PCNSC, CCNP/CCIE Security, GIAC (GWAPT, GPEN, or similar)Experience building metrics pipelines and KPI reporting for security operationsFamiliarity with interconnecting disparate security technologies to solve unique application and security challengesBenefits401(k) plan with matching company contributionsComprehensive Medical, Dental & Vision CarePaid parental leave at 100% of salaryPaid Time Off and Company HolidaysEarly access to earned wages through Daily PayCompany OverviewWe’re a leading professional services firm that specializes in real estate and investment management. It was founded in 1783, and is headquartered in Chicago, Illinois, USA, with a workforce of 10001+ employees. Its website is http://www.jll.com/.