Sophos & Endpoint Security Engineer

Key Responsibilities:

• Firewall Management:
• Configure, manage, and monitor Sophos Firewalls, including setting up security policies, VPNs, SSL inspection, web filtering, IPS/IDS, and traffic shaping.
• Perform regular updates, patches, and firmware upgrades to maintain security posture.
• Analyze firewall logs and provide insights and recommendations for improving network security.
• Troubleshoot and resolve firewall-related issues, ensuring minimal downtime and impact on business operations.
• Endpoint Security:
• Deploy, configure, and manage Sophos Endpoint Protection solutions across all organizational endpoints (servers, desktops, laptops, mobile devices).
• Monitor and respond to security alerts generated by Sophos Central or other security monitoring tools.
• Conduct regular vulnerability assessments and manage endpoint patches and updates.
• Develop and implement endpoint security policies, ensuring protection against malware, ransomware, and other cyber threats.
• Incident Response and Monitoring:
• Monitor network and endpoint security systems for signs of security breaches or abnormal behavior.
• Participate in incident response activities, including detection, containment, eradication, and recovery.
• Document and report security incidents and provide post-incident analysis and recommendations.
• Security Compliance and Auditing:
• Ensure all security systems and configurations comply with internal security policies and external regulatory requirements.
• Assist in security audits, including vulnerability scans, penetration testing, and risk assessments.
• Create and maintain documentation related to firewall and endpoint configurations, procedures, and policies.
• Training and Support:
• Provide training and support to internal teams and end-users on security best practices, endpoint security software, and firewall use.
• Act as the primary point of contact for security-related issues and inquiries regarding Sophos technologies.

Qualifications:

• Education:
• Bachelors degree in Computer Science, Information Security, or a related field (or equivalent experience).
• Experience:
• Minimum of 3-5 years of experience in network security, including hands-on experience with Sophos Firewalls and Sophos Endpoint Protection.
• Experience in configuring, managing, and troubleshooting firewalls, VPNs, IDS/IPS, and endpoint protection systems.
• Familiarity with security frameworks and standards (e.g., ISO 27001, NIST).
• Technical Skills:
• Strong knowledge of networking protocols (TCP/IP, DNS, DHCP, SSL/TLS, etc.).
• Proficiency in managing Sophos XG and UTM firewalls, including configuration, deployment, and maintenance.
• Expertise in Sophos Central for endpoint management, device control, web control, and threat analysis.
• Experience with security information and event management ( ) tools.
• Knowledge of common attack vectors and security vulnerabilities.
• Certifications (Preferred):
• Sophos Certified Engineer or Architect.
• CompTIA Security+, CEH, CISSP, or other relevant security certifications.
• Soft Skills:
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Ability to work both independently and as part of a team.