Lead Network Security Engineer
NYU Langone Health · New York, NY
$121,792–$166,950from the description
Jul 15, 2026
New York, NY
Jul 20, 2026
What this job asks for AI summary
A senior individual-contributor role focused on designing, implementing, and maintaining network security infrastructure — primarily firewalls (Palo Alto, Fortinet, Cisco ASA), F5 load balancers, VPNs, and IDS/IPS systems — within a large healthcare environment. The position handles second and third-level support, vulnerability assessments, incident response, and ongoing documentation, reporting to a director-level leader. It suits an experienced network security engineer with at least five years of hands-on firewall and F5 expertise.
Senior level · 5+ years · New York-Newark-Jersey City, NY-NJ-PA · Bachelor's required · Full-time
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $143,559 (middle half $110,181–$179,574). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (6)
The title 'Lead Engineer - Network Security Systems' carries no standard seniority level word, so the title states no level; however, the 5+ years requirement and scope (2nd/3rd level support, design ownership, incident response leadership) support a Senior classification.
SOC is Medium confidence: the role blends network security engineering (15-1212) with deep network infrastructure operations (15-1244). The dominant emphasis on security architecture, vulnerability assessment, penetration testing, and incident response tips it toward 15-1212.
Gigamon, Forescout, DNS, and network routing appear in the required 'Skills' section alongside Fortinet, Palo Alto, and F5, so they are treated as hard gates despite being listed more briefly.
Cisco ASA, F5 APM, and F5 Enterprise Manager appear only under the 'Preferred Qualifications' section and are therefore marked as preferred.
The degree requirement states 'Bachelor's or Master's degree'; Bachelor's is the minimum and is treated as the hard gate. Equivalent experience is not offered as a substitute.
The '5 or more years of relevant experience' gate is stated at the role level in Minimum Qualifications; the separate '5 years working with Network Firewalls / Fortinet' appears under Preferred Qualifications and is therefore captured on the Fortinet skill's years demanded from the required section only.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.