Sr. Network Security Analyst - Firewall

Location: Mumbai/ Hyderabad (work from office). Candidates looking for remote working or not comfortable with the job location need not apply.

Summary:

1. The candidate shall be responsible for ensuring the day-to-day operations and maintenance of the organization's Network security infrastructure and controls to protect systems, networks, and data.

2. Troubleshoot and resolve any hardware, software or configuration related incidents. Manage configuration changes and deployments according to established change management processes, ensuring minimal disruption and adherence to best practices. will be responsible for leading any planned scheduled maintenance activities. Able to lead any incident calls with OEM technical support and provide any inputs required for restoration.

3. Key SPOC for Incident ,Change Management & provide resolution of issues escalated from L1, able to support across 24x7 Shift Operations.

Responsibilities:

1. Configuration, Monitoring & Troubleshooting of NGFW, DFW, Micro segmentation, IPS, VPN, DDOS Protection Solutions, GSLB, DNS Security, Firewall Analyser, Review and implement Security Configuration etc.

2. Involve in change management process for HW replacement/ Config change/ SW upgrade/ FW Rules management etc.

3. Troubleshoot and resolve any hardware, software or configuration related incidents.

4. Manage configuration changes and deployments according to established change management processes, ensuring minimal disruption and adherence to best practices.

5. Responsible for leading any planned scheduled maintenance activities.

6. Able to lead any incident calls with OEM technical support and provide any inputs required for restoration.

7. Key SPOC for Incident & Change Management.

8. Ensure hardening, latest stable version and security patches of security devices and solutions

9. Effective Ticket handling, Monitor the queue and maintain regular updates on the Tickets as per agreed timeline, providing the detailed closure summary on the tickets.

10. Co-ordination with teams and providing timely updates whenever required.

11. Ensure the day-to-day operations and maintenance of the organization's Network security infrastructure and controls to protect systems, networks, and data.

12. Manage escalations and run the smooth operations of security solutions.

13. Ensure relevant processes are followed for change, incident & daily operations, coordinating with internal teams and external vendors to restore service within agreed-upon SLAs.

14. Identify & analyse pain areas in existing security operations & implement improvements

15. Responsible for BAU Changes, Firmware upgrade, closing of Audit points/Vulnerabilities,

16. Creation of Security Policies, Fine tuning of existing Policies, Configuration Backups, Signature fine-tuning etc.

17. Ensure & maintain up-to-date documentation - SOPs, Architecture diagrams.

18. Ensure High uptime and provide resolution of issues escalated from L1, able to support across 24x7 Shift Operations.

Education:

BSC / Diploma in computer science with relevant experience in Information Security or Network Security.

or

BE/B tech/Computer Science.

Experience:

1. Candidate should have strong 4 + years of overall experience as a Network Security Engineer in BFSI Industry.

2. Experience in IPSEC VPN, SSL, Clientless VPN, Clustering, NGFW, DFW, Micro segmentation, IPS, VPN, DDOS Protection Solutions, GSLB, Micro segmentation WAF etc.

3. Implementation and Troubleshooting experience on Next generation firewalls specifically Check point, Palo alto, FortiGate.

4. Troubleshooting experience on industry standard protocols/Technology including TCP/IP, NAT, ACL, Packet capture etc.

5. High Availability: Clustering, Active /Active, Active/Standby.

Certification:

1. Any Firewall OEM certification preferable

Knowledge:

1. Sound experience in managing Network security technologies and operations in a large and complex environment.

2. Should have sound understanding & hands on experience of Network and Security solution such as NGFW, DFW, Micro segmentation, IPS, VPN, DDOS Protection Solutions, GSLB, Micro segmentation, DNS Security, Firewall Analyser, Proxy servers, WAF.

3. Should have knowledge on Cyber Security incident response techniques and technologies.

4. Should have knowledge & understanding of Cloud Technologies, IT infrastructure & networking technologies, operations and security principles.

5. Should have sound understanding about Cyber Security, Mitigation and Response.

Technical Skills:

1. Exceptional analytical, conceptual thinking, Troubleshooting and problem-solving skills.

2. Strong leadership, negotiation, and conflict resolution skills.

3. Detail-oriented with a focus on quality and accuracy in project/service deliverables.

4. Should have strong written, verbal and presentation skills.

5. Ability to perform under pressure, influence stakeholders and work closely with them to determine acceptable solutions.