Security Expert

• Primary responsibility is to provide Tier 2 network security support of Firewall/Proxy/LB environments supporting multiple customers.
• This position interfaces with external clients and is highly visible.
• Responsible for general architecture, initial configurations and subsequent management of one or more Firewall/VPN based/IPS/Proxy/DLP/Sandbox systems.
• Provide 24x7 production support to accept, operate and maintain security elements. There are off shift activities and pager rotation.
• Troubleshoot end to end network security issues and find the root cause.
• Conduct risk assessments on all work performed.
• Conduct daily, weekly, and monthly proactive maintenance activities including configuration changes and version upgrades as per business directive.
• Remediate vulneralities on Microsoft Defender Cloud.
• Good to have certification on security domain like ITIL,Firewall, Proxy, Cloud Security etc.
• Good written and verbal communication skills / fluent English.
• 5-8 years of experience.

• Leading Industry security Certifications (CCSA, CCNP Security, PCNSA/PCNSE, BCCPA, ZCCA-IA, ZCCP-IA, ZCCA-PA)
• Proxy:- Zscaler (ZIA, ZPA, ZDX)- PAC file, NSS, MCAS, Various Policy Types- URL & Cloud app, DLP, Sandbox, Advance Cloud Firewall etc. APP Segment, APP Connector. Blue Coat Proxy (SG-800,900, 9000 )- Policy, PAC File
• Firewalls:- Checkpoint advanced Firewall solution design - implementation and administration. Check Point Security Gateway on R81/80 Checkpoint UTM (2073,3073, 3075) Secure Platform and VSX platform, Juniper SSG (140, 520, 550) and SRX (100, 210, 240), .
• Palo Alto- (5220, 5240, 5310) (Firewall, Panaroma, Prisma, Global Protect)
• IDP:- McAfee IPS
• Load Balancers:- F5 (1600,3600,3900,6400)
• Event Management:- HP Arc Sight SIEM Express & Logger (7200)
• UTM:- Fortinet (80,110,300, 1000, 1500)

Responsibilities

• In line with our ITIL based processes and organization, you will be in charge to follow Orange internal processes and manage: -

Incident management

• Handle both re-active (customer call) and pro-active (monitoring) incidents
• Troubleshoot and fix all incidents in close relationship with all people involved in the fault resolution process: level 1 (cts2, dcsc, ), it csm, field operations, supplier helpdesk, infrastructure and engineering teams.
• Provide root cause analysis (rca)
• Ability to work in a virtual team environment.

Problem management

• Involved in problem management as the owner of the technical resolution

Change management

• Handle standard change request, according to our change control and risk review process
• Handle complex change requests, providing technical expertise and reporting to the change advisory board (cab) as appropriate

Security Incident and Event Management

• Monitor and respond to alarms and alerts from the SIEM and IDP solutions (triage / notification / recommendation / etc )
• Working closely with Technical Operations Owners / Security Managers and with the customer/customer SOC, to manage incident response coordination and follow-up.