L2- Anti Dods

The L2 Network Security Engineer is responsible for the operational management, maintenance, and troubleshooting of the bank's core network security systems. This role is focused on handling security incidents, implementing change requests, and ensuring the robust protection of the bank's sensitive data and network infrastructure using Anti-DDoS technologies. 

Key Responsibilities

• Monitor and analyze firewall and IPS logs to detect and respond to security threats and anomalies.
• Analyze reports from malware sandboxing systems to identify zero-day threats and advanced persistent threats (APTs).
• Monitor Anti-DDoS mitigation systems to protect the bank's services from volumetric & application-layer attacks.
• Integrate sandboxing alerts with incident response workflows and threat intelligence platforms.
• Provide expert-level troubleshooting for complex firewall- and IPS-related issues.
• Manage and implement firmware upgrades and security patches for NGFW devices.
• Administer and manage web proxy infrastructure and content filtering policies.
• Troubleshoot web connectivity and protocol issues (e.g., HTTP, HTTPS, SSL) and analyze related logs.
• Participate in testing and validating the effectiveness of Anti-DDoS protections.
• Knowledge of malware analysis and sandboxing concepts.
• Act as a key player in incident response, participating in P1/P2 bridge calls and driving network-related incidents to resolution.
• In-depth technical troubleshooting and issue resolution. Implementation, Management and Monitoring all cyber security Solutions/ Devices/ Components.
• Deployment and Installation of all in scope solutions and their monitoring Implementation of service improvements.
• Collaboration with L3 for complex issues. Regular configuration tasks and change management
• Shall analyze incidents & identify root causes and act for containment and remediation.
• Shall co-ordinate with the different departments/stakeholders for incident analysis and remedial action.
• Provides engineering analysis and architectural design of technical solutions.

Education*: BE/B-Tech/BCA or master's degree in CS/IT

Certification*: CEH/CCNA/CCNP sec + OEM Firewall (PCNSA/ PCNSE)/Anti-DDOS solution (2 certifications)

Experience*: 5 years relevant experience.

Technology (OEM)*: Perimeter DDOS-NetScout or Arbor or Radware

Skills: Candidate should have expertise in NGFW platforms such as Palo Alto, IPS/IDS platforms, web security technologies, DDOS and other security devices.