We are seeking an experienced and motivated Network Security Engineer (L2/L3) to manage, monitor, and enhance the security posture of our IT infrastructure. This role involves advanced troubleshooting, implementation of security solutions, and support for network security technologies across enterprise environments.
Key Responsibilities:
Level 2 Responsibilities:
- Monitor and manage firewalls, intrusion detection/prevention systems, and VPNs.
- Analyze and respond to security events, threats, and incidents.
- Apply security patches and updates to network devices.
- Support day-to-day operational issues related to security infrastructure.
- Perform routine audits of system logs and configurations.
- Manage user access, privileges, and secure connectivity.
- Work with SOC teams and escalate unresolved issues to L3 when required.
Level 3 Responsibilities:
- Lead design, deployment, and optimization of network security solutions (Firewalls, IPS/IDS, WAF, etc.).
- Perform root cause analysis for critical incidents and complex issues.
- Develop and implement network security policies and procedures.
- Conduct vulnerability assessments and risk analysis.
- Maintain and upgrade security architecture documentation.
- Evaluate and recommend new security technologies and improvements.
- Act as a mentor for junior security engineers and provide training.
Key Technologies/Skills Required:
- Firewalls: Palo Alto, Fortinet, Cisco ASA, Check Point
- IDS/IPS, WAFs (e.g., Snort, Suricata, F5, Imperva)
- VPN and Remote Access technologies (IPSec, SSL VPN)
- Network protocols (TCP/IP, BGP, OSPF, DNS, DHCP)
- SIEM platforms (Splunk, QRadar, etc.)
- Scripting (Python, Bash) and automation tools
- Understanding of ISO 27001, NIST, GDPR, and other compliance frameworks
- Experience with cloud security (AWS, Azure, GCP) is a plus