Senior Network Security Engineer

Uney GmbH seeks a Senior Network Security Engineer to lead R&D for next-generation firewall and secure web gateway solutions using open-source technologies.

This position is dedicated to the research and development of advanced firewall and secure web gateway products. The engineer will focus on leveraging open-source tools to build robust IDS/IPS and proxy solutions, driving innovation in network security architecture.

Responsibilities

• Perform deep-dive research to propose new architectures and features for next-generation firewall and secure web gateway platforms.
• Manage the integration, customization, and performance optimization of core open-source technologies, including OPNsense, Suricata, and Squid.
• Develop and implement advanced security modules such as application control, content filtering, and basic data loss prevention mechanisms.
• Construct proof-of-concept and laboratory environments to test solution stability and performance metrics.
• Create comprehensive technical documentation, deployment guides, and operational manuals.
• Work closely with software development teams to ensure seamless integration of new features.
• Assist in troubleshooting complex network security and performance issues.

Requirements

• At least three years of hands-on experience in network security, with a focus on designing, implementing, and managing large-scale security solutions.
• Strong understanding of TCP/IP models, routing protocols (OSPF, BGP), switching (VLAN, Spanning Tree), and VPN technologies (IPsec, SSL VPN).
• Expert-level knowledge of firewall, UTM, and NGFW functionalities, including NAT, policies, and load balancing.
• Advanced proficiency with OPNsense or pfSense, including customization and feature development.
• Experience deploying, configuring, and writing custom rules for IDS/IPS systems like Suricata or Snort, including alert analysis.
• Proficiency with Squid, including transparent proxy configuration, SSL interception, and complex ACLs.
• Competence in Java and Go programming languages.
• Ability to use scripting languages such as Python or Bash for automation, log analysis, and tool development.
• Skill in using packet analysis tools like Wireshark and tcpdump to diagnose network and security problems.