Job Title: Mid-Level - Network Security Engineer
Job Summary
The Mid-Level Network Security Engineer is a critical position within our organization, responsible for the design, implementation, and management of robust network security solutions. This role requires a proactive approach to leading security initiatives and responding to security incidents to ensure the integrity and security of the organization's network infrastructure. The ideal candidate will possess a strong technical background in network security, a deep understanding of current security threats, and the ability to collaborate effectively with cross-functional teams to enhance the overall security posture of the organization.
Key Responsibilities
- Design and configure network security solutions tailored to the organization's needs, ensuring optimal protection against threats.
- Perform comprehensive threat analysis, vulnerability assessments, and penetration testing to identify and mitigate security risks.
- Develop, implement, and enforce security policies and best practices to safeguard the organization's network and data.
- Manage and maintain firewalls, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), and endpoint security solutions to protect against unauthorized access and attacks.
- Monitor network traffic and respond to security incidents, conducting forensic analysis to determine the cause and impact of breaches.
- Collaborate with IT and security teams to enhance the overall security posture, ensuring alignment with organizational goals and compliance requirements.
- Conduct regular security audits and compliance checks to ensure adherence to industry standards and regulatory requirements.
- Provide mentorship and guidance to junior engineers, fostering a culture of continuous learning and improvement within the team.
Skills and Knowledge Required
- In-depth knowledge of networking concepts, including TCP/IP, VLANs, BGP, and OSPF.
- Expertise in firewall configuration and management across various platforms.
- Strong understanding of encryption technologies, VPNs, and authentication protocols.
- Experience with Security Information and Event Management (SIEM) solutions and log analysis techniques.
- Proficiency in scripting languages such as Python and PowerShell for automation of security tasks.
- Knowledge of cloud security practices across platforms like AWS, Azure, and Google Cloud.
- Familiarity with compliance frameworks such as NIST, ISO 27001, GDPR, and HIPAA.
Educational Qualifications
- Bachelor's degree in Computer Science, Cybersecurity, or a related field.
- Industry certifications such as Certified Ethical Hacker (CEH), Cisco CCNP Security, GIAC GSEC, or Certified Information Systems Security Professional (CISSP) are preferred.
Key Focus Areas
- Threat intelligence and risk management.
- Security architecture and network hardening.
- Incident response and forensics.
Experience
- 3-6 years of experience in network security, demonstrating a solid track record of managing security solutions and responding to incidents.
Tools and Equipment
- Firewalls from vendors such as Cisco, Palo Alto, Check Point, and Fortinet.
- SIEM platforms including Splunk, IBM QRadar, and ArcSight.
- IDS/IPS solutions like Snort, Suricata, and Cisco Firepower.
Other Requirements
- Ability to work under pressure and manage multiple tasks effectively.
- Strong analytical and troubleshooting skills to identify and resolve security issues.
- Leadership and mentoring abilities to guide junior team members and foster a collaborative environment.