Senior Network Security Engineer (5-7 yrs)

Role Objective :

The Senior Network Security Engineer will play a crucial role in safeguarding Neo Group's network infrastructure and data assets. This role involves designing, implementing, and maintaining robust security measures, ensuring compliance with industry standards, and proactively mitigating potential security threats. The ideal candidate will possess a strong understanding of network security principles, hands-on experience with security technologies, and the ability to work collaboratively with cross-functional teams.

Responsibilities :

1. Network Security Design and Implementation :

- Design and implement secure network architectures, including firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, and other security appliances.

- Develop and maintain network security policies, standards, and procedures.

- Conduct security assessments and vulnerability scans to identify and address potential weaknesses.

- Implement and manage access control lists (ACLs) and other security configurations on network devices.

- Plan, design, and implement secure network topologies, including LAN, WAN, and wireless networks.

- Manage and optimize network virtualization technologies for enhanced security.

2. Security Monitoring and Incident Response :

- Monitor network traffic and security logs for suspicious activity and potential security incidents.

- Analyze security alerts and events to identify and respond to security breaches.

- Conduct incident response activities, including containment, eradication, and recovery.

- Perform log analysis and correlation to identify patterns and trends related to security threats.

- Coordinate with the Security Operations Center (SOC) and incident management teams (PIM) for incident handling and resolution.

3. Security Infrastructure Management :

- Manage and maintain security infrastructure, including firewalls, IDS/IPS, VPNs, and security information and event management (SIEM) systems.

- Perform regular security audits and vulnerability assessments.

- Manage and maintain security upgrades and patches for network devices and security appliances.

- Configure and manage VPN and Zero Trust Network Access (ZTNA) solutions.

- Manage and maintain security policies and configurations for Nexus Cisco 3K Algo Boost Switches, 9500, 9300, 9200 Switches.

- Manage and maintain security of the Exchange co-location environment.

4. Compliance and Security Audits :

- Ensure compliance with relevant security regulations and industry standards, such as ISO 27001.

- Assist with security audits and assessments.

- Develop and maintain documentation related to network security policies and procedures.

- Coordinate with external auditors and regulatory bodies.

5. Training and Knowledge Sharing :

- Stay up-to-date with the latest security threats and technologies.

- Provide training and knowledge sharing to other team members on network security best practices.

- Evaluate and recommend new security technologies and solutions.

- Quickly learn and adapt to new products and technologies.

6. Network Support :

- Provide technical support for network security issues.

- Perform shell scripting and Linux administration (RedHat, CentOS, Ubuntu) for security-related tasks.

- Manage and maintain network monitoring tools.

- Provide support for switch and router management.

- Assist in planning global network management from the head office covering branches and franchises.

Qualifications :

- Bachelors degree in Information Technology, Computer Science, or a related field (minimum 50%).

- Minimum 5-7 years of experience in network security engineering, preferably in the financial services industry.

- Strong understanding of network security principles, protocols, and technologies.

- Hands-on experience with firewalls, IDS/IPS, VPNs, SIEM, and other security appliances.

- Experience with network virtualization and cloud security.

- Proficiency in Linux operating systems and shell scripting.

- Experience managing trading infrastructure, including dealing desks and colocation at NSE/BSE and in-house data centers.

- Knowledge of IPv4/IPv6, BGP, LAN/WAN management.

- Experience with Nexus Cisco 3K Algo Boost Switches, 9500, 9300, and 9200 Switches.

- Strong analytical and problem-solving skills.

- Excellent communication and interpersonal skills.

- Ability to work independently and as part of a team.

Desired Skills :

- CCNA Security or other relevant security certifications (e.g., CISSP, CompTIA Security+).

- Experience with data center and vendor management.

- Experience with Exchange liaison.

- Knowledge of wealth and asset management industry security requirements.

- Experience with implementing and managing ZTNA solutions.

- Experience with coordinating and assisting ISO and other compliance certifications.

- Experience with planning and executing global network security strategies.