Network Security Engineer

Key Roles and Responsibilities Network Security Design and Implementation Design secure network architectures. Configure firewalls, VPNs, routers, and switches. Implement network segmentation and access controls. Firewall and Security Device Management Install, configure, and maintain firewalls. Manage Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS). Configure Web Application Firewalls (WAFs). Network Monitoring Monitor network traffic for suspicious activities. Analyze security logs using SIEM tools. Detect and respond to security incidents. Vulnerability Assessment and Risk Management Perform vulnerability scans. Identify and remediate security weaknesses. Conduct risk assessments and recommend security improvements. Incident Response Investigate network security incidents. Contain, eradicate, and recover from cyberattacks. Conduct root cause analysis and prepare incident reports. Access Control Management Implement Identity and Access Management (IAM). Configure authentication protocols such as MFA, RADIUS, and TACACS+. Enforce least-privilege access policies. Security Policy Implementation Develop and enforce network security policies. Ensure compliance with organizational security standards. Document security procedures and configurations. Patch and Configuration Management Apply firmware and software updates. Harden network devices following security best practices. Maintain secure configurations. Disaster Recovery and Business Continuity Develop backup and recovery plans. Ensure network redundancy and high availability. Participate in disaster recovery testing. Compliance and Auditing Support compliance with standards such as ISO 27001, PCI DSS, HIPAA, or NIST. Prepare documentation for security audits. Address audit findings. Collaboration Work with system administrators, cloud engineers, SOC analysts, and IT teams. Support security awareness initiatives. Assist in implementing secure network changes. Common Tools Used Firewalls: Palo Alto, Fortinet, Cisco ASA/Firepower, Check Point SIEM: Splunk, Microsoft Sentinel, QRadar IDS/IPS: Snort, Suricata VPN: Cisco AnyConnect, OpenVPN Network Monitoring: Wireshark, SolarWinds, PRTG, Nagios Vulnerability Scanners: Nessus, Qualys, OpenVAS Cloud Security: AWS Security Groups, Azure NSGs, Google Cloud Firewall Essential Skills TCP/IP, DNS, DHCP, VLANs, Routing, Switching Network protocols and packet analysis Firewall administration VPN technologies (IPSec, SSL VPN) Network Access Control (NAC) SIEM and log analysis Linux and Windows administration Scripting (Python, Bash, PowerShell) Cloud networking and security Incident response and troubleshooting Typical Daily Activities Monitor network security alerts. Review firewall and VPN logs. Respond to security incidents. Implement firewall rule changes. Conduct vulnerability scans. Patch network devices. Analyze suspicious network traffic. Document network changes and security incidents. Collaborate with IT and security teams to strengthen network defenses.

Desired Candidate Profile

Cisco CCNA Security / CCNP Security Employment Type Full Time