Network Security Engineer

Stack

Responsibilities

• ▹Design, deploy and manage enterprise network security solutions
• ▹Configure and administer Fortinet, SonicWall and Palo Alto firewalls
• ▹Implement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs and segmentation policies
• ▹Monitor security events using SIEM, XDR and SOC monitoring platforms
• ▹Investigate security incidents, perform threat analysis and support incident response
• ▹Manage firewall policies, security rules and compliance controls
• ▹Implement Zero Trust Network Access (ZTNA) and identity-based security controls
• ▹Support cloud security initiatives across AWS, Azure and hybrid infrastructure
• ▹Configure and support SD-WAN and Secure Access Service Edge (SASE) solutions
• ▹Conduct vulnerability assessments and remediation
• ▹Collaborate with infrastructure, cloud and application teams to secure enterprise environments
• ▹Maintain security documentation, diagrams, SOPs and audit records
• ▹Participate in on-call rotations and critical incident handling

Requirements

• ▹Firewall and network security: Fortinet FortiGate, SonicWall, Palo Alto Networks, Cisco Firepower / ASA, VPN technologies (IPSec / SSL VPN), IDS/IPS, WAF, NAC
• ▹Modern security technologies: Zero Trust Architecture, ZTNA, SASE, SD-WAN security, SSE, CASB, micro-segmentation, secure remote access
• ▹SIEM experience with one or more of: Splunk, QRadar, Microsoft Sentinel, LogRhythm, ArcSight, Elastic SIEM
• ▹Knowledge of SOC operations, threat hunting, log correlation, MITRE ATT&CK, incident response and threat intelligence integration
• ▹Cloud and infrastructure security: AWS and Azure security, hybrid cloud networking, cloud firewall management, Security Groups / NSGs, IAM
• ▹Endpoint security: EDR/XDR platforms (CrowdStrike, Microsoft Defender, SentinelOne), endpoint hardening, DLP, email security
• ▹Networking fundamentals: TCP/IP, routing and switching, VLANs, BGP / OSPF, DNS / DHCP, load balancing, network troubleshooting

Nice to have

• ▹Check Point
• ▹Automation and scripting: Python, PowerShell, Bash, security automation, SOAR platforms
• ▹Certifications: Fortinet NSE / FCP, Palo Alto PCNSA / PCNSE, CCNP Security, CISSP, CEH, CompTIA Security+, Microsoft SC, AWS Security Specialty
• ▹Bachelor's degree in Computer Science, Cybersecurity, Information Technology or a related field

Soft skills