Senior Network Security Engineer at Penumbra
Alameda, CA
$146,000–$220,000from the description
Jul 21, 2026
Alameda, CA
Jul 22, 2026
What this job asks for AI summary
A hands-on senior-level role focused on designing, enforcing, and validating network security controls across a hybrid on-premises and cloud environment. Day-to-day work spans managing firewalls, intrusion detection systems, VPNs, and related technologies, conducting security assessments, leading incident response, and ensuring regulatory compliance. Suits an experienced enterprise network security engineer with deep knowledge of cloud platforms and security frameworks.
Senior level · 10+ years · San Francisco-Oakland-Berkeley, CA · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 4 people in the San Francisco-Oakland-Berkeley, CA area plausibly meet what this posting asks for (information security analysts). range 1–7
Applicant volume Light — Few people clear these requirements, so an application that does clear them gets looked at. Worth applying to even if you miss a nice-to-have.
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $165,879 (middle half $117,529–$206,125). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (9)
The role title is 'Senior Network Security Engineer' but the day-to-day work spans both network security engineering (firewall/IPS/NAC/VPN configuration and design) and broader information security analysis (audits, compliance, incident response, threat modeling). 15-1212 (Information Security Analysts) was chosen as primary because the scope — compliance frameworks, security assessments, incident response, and policy — goes well beyond pure network operations; 15-1244 is the runner-up given the heavy network infrastructure hands-on component.
The JD requires a Bachelor's degree 'or equivalent combination of education and experience,' so no formal degree is hard-gated. A Master's is explicitly preferred only.
The 10+ years of overall experience requirement is captured at the role level. The 5+ years of cloud platform experience and 5+ years of network security experience are stated as separate requirements; the cloud years are reflected on the cloud platform skill (Azure/AWS/GCP), and the network security years are reflected in the overall years minimum as the higher overall gate.
Azure, AWS, and GCP are listed as interchangeable cloud platform options ('i.e., Azure, AWS or Google Cloud Platform'); emitted as one skill with alternatives.
SAML and OIDC are listed together as a single authentication/federation requirement; emitted as one skill with OIDC as an alternative.
RADIUS and TACACS+ are listed together as a single AAA protocol requirement; emitted as one skill with TACACS+ as an alternative.
OSPF, BGP, and ISIS are listed as routing protocol options; emitted as one skill with BGP and ISIS as alternatives.
Microsoft Word, Excel, Visio, and PowerPoint are listed under the requirements section. Word, Excel, and Visio are emitted as separate skills. PowerPoint was omitted as it is a generic productivity tool rather than a concrete technical technology relevant to this role.
The role is on-site at Penumbra's Alameda, CA headquarters (within the San Francisco-Oakland-Berkeley CBSA); remote=false is consistent with the explicit 'willingness and ability to work on site' requirement.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.