About the Company
Interactive Brokers Group, Inc. (NASDAQ: IBKR), a member of the S&P 500, is a global financial services company headquartered in Greenwich, Connecticut, with offices in over 15 countries. Through its affiliates, Interactive Brokers provides automated trade execution and custody of securities, commodities, foreign exchange, and prediction markets on over 170 markets in numerous countries and currencies.
For more than four decades, Interactive Brokers has focused on technology, automation, and innovation to provide clients worldwide with a sophisticated, unified platform to manage their investment portfolios. We serve individual investors, hedge funds, proprietary trading groups, financial advisors, and introducing brokers.
Our culture is driven by problem-solving, efficiency, and continuous improvement. We look for individuals who are intellectually curious, collaborative, and motivated to contribute to technology that helps simplify and enhance access to global financial markets. Interactive Brokers has consistently been recognized as a top broker by respected industry sources including Barron’s, Investopedia, Stockbrokers.com, and others.
Job Summary
We are looking for a seasoned Network Security Engineer with 10+ years of experience to drive network security implementation, architecture, and risk management. This role is focused on strengthening the organization’s security posture through design validation, policy enforcement, and continuous assessment of network security controls.
The role does not involve day-to-day deployment or operational maintenance but instead partners closely with network and infrastructure teams to ensure secure design and adherence to best practices.
Key Responsibilities
- Define, review, and enforce network security architecture standards and best practices
- Perform detailed firewall rule reviews (NGFW/WAF) to ensure compliance with security policies and least privilege principles
- Evaluate and approve firewall change requests based on risk, business justification, and security impact
- Conduct periodic network security posture assessments, identifying gaps and recommending remediation strategies
- Lead initiatives to improve network security maturity, including segmentation, zero trust adoption, and attack surface reduction
- Review and validate configurations of WAF platforms such as Akamai, Cloudflare, AWS WAF for effectiveness against modern threats
- Assess NGFW policies for rule optimization, redundancy removal, and risk exposure
- Partner with network operations teams to ensure secure implementation of approved designs and policies
- Provide security guidance during architecture reviews, solution design discussions, and project onboarding
- Analyze threat intelligence and emerging attack patterns to recommend proactive control improvements
- Support audit and compliance efforts by ensuring network security controls align with standards (ISO 27001, PCI-DSS, etc.)
- Develop and maintain security policies, standards, and review frameworks for network controls
- Act as a subject matter expert for network security in internal governance forums
Required Skills & Qualifications
- 10+ years of experience in network security, with a strong focus on design, review, and implementation
- Deep understanding of networking fundamentals (TCP/IP, routing, switching, DNS, load balancing)
- Hands-on knowledge (not necessarily operational ownership) of:
- WAF solutions such as Akamai, Cloudflare, AWS WAF
- NGFW platforms: Palo Alto (preferred) or similar technologies
- Strong experience in firewall policy analysis, rule lifecycle management, and risk-based approvals
- Proven experience in network security posture assessment and gap analysis
- Strong understanding of security principles such as least privilege, defense-in-depth, and zero trust
- Familiarity with common attack vectors (OWASP Top 10, DDoS, bot mitigation techniques)
- Experience working with cloud environments (AWS/Azure/GCP) from a security architecture perspective
- Ability to interpret logs, traffic flows, and security events for risk evaluation
Preferred Qualifications
- Certifications such as CISSP, CISM, PCNSE, CCSP, or CCIE Security
- Experience with CDN and edge security architectures
- Exposure to threat modeling and risk assessment methodologies
- Familiarity with security governance frameworks and audit processes
- Experience working in large enterprise or regulated environments
Key Competencies
- Strong risk assessment and decision-making ability
- Attention to detail in policy review and control validation
- Ability to challenge and influence technical decisions constructively
- Clear communication with both technical and non-technical stakeholders
- Strategic mindset with a focus on continuous security improvement
Company Benefits & Perks:
- Competitive salary package.
- Performance based annual bonus (cash and stocks).
- Hybrid working model (3 days office/week).
- Group Medical & Life Insurance.
- Modern offices with free amenities & fully stocked cafeterias.
- Monthly food card & company paid snacks.
- Hardship/shift allowance with company provided pickup & drop facility*
- Attractive employee referral bonus.
- Frequent company sponsored team building events and outings.
* Depending upon the shifts.
**The benefits package is subject to change at the management's discretion.