Network Security Engineer

L2- Next Gen Firewall with IPS, Proxy, Malware Sandboxing & Anti Dods Level: L2 (24*7) Location : Nagpur Education*: BE/B-Tech/BCA or master’s degree in CS/IT Certification*: CEH/CCNA/CCNP sec + OEM Firewall (PCNSA/ PCNSE)/Anti-DDOS solution (2 certifications) Experience*: 4-6 years’ relevant experience. Technology (OEM)*: Network/Cyber Security, IPS-Checkpoint, Malware Sandboxing-Palo Alto, Perimeter DDOS-NetScout Skills: Candidate should have expertise in NGFW platforms such as Palo Alto, IPS/IDS platforms, web security technologies, DDOS and other security devices. Job summary The L2 Network Security Engineer is responsible for the operational management, maintenance, and troubleshooting of the bank's core network security systems. This role is focused on handling security incidents, implementing change requests, and ensuring the robust protection of the bank's sensitive data and network infrastructure using NGFW, IPS, Web Proxy, Malware Sandboxing, and Anti-DDoS technologies. Key Responsibilities Monitor and analyze firewall and IPS logs to detect and respond to security threats and anomalies. Analyze reports from malware sandboxing systems to identify zero-day threats and advanced persistent threats (APTs). Monitor Anti-DDoS mitigation systems to protect the bank's services from volumetric & application-layer attacks. Integrate sandboxing alerts with incident response workflows and threat intelligence platforms. Provide expert-level troubleshooting for complex firewall- and IPS-related issues. Manage and implement firmware upgrades and security patches for NGFW devices. Administer and manage web proxy infrastructure and content filtering policies. Troubleshoot web connectivity and protocol issues (e.g., HTTP, HTTPS, SSL) and analyze related logs. Participate in testing and validating the effectiveness of Anti-DDoS protections. Knowledge of malware analysis and sandboxing concepts. Act as a key player in incident response, participating in P1/P2 bridge calls and driving network-related incidents to resolution. In-depth technical troubleshooting and issue resolution. Implementation, Management and Monitoring all cyber security Solutions/ Devices/ Components. Deployment and Installation of all in scope solutions and their monitoring Implementation of service improvements. Collaboration with L3 for complex issues. Regular configuration tasks and change management Shall analyze incidents & identify root causes and act for containment and remediation. Shall co-ordinate with the different departments/stakeholders for incident analysis and remedial action. Provides engineering analysis and architectural design of technical solutions. Closely monitoring of overall health of all solutions and submitting reports to the Bank with related parameters on a daily basis. L2- WAF & SSLO Level: L2 (24*7) Location : Nagpur Education*: BE/B-Tech/BCA or master’s degree in CS/IT Certification*: CEH/CCNA/CCNP sec + OEM F5 Certification F5-CA/F5-CTS (2 certifications) Experience*: 4-6 years’ relevant experience. Technology (OEM)*: F5 BIG-IP WAF/ASM, F5 BIG-IP SSL Orchestrator (SSLO). Skills: Candidate should have In-depth knowledge of F5 BIG-IP platforms, including LTM, ASM/WAF, and SSLO. Job summary The WAF & SSLO L2 Engineer will be a key member of our network security team, responsible for the operational support, administration, and maintenance of the bank's Web Application Firewall and SSL Orchestration platforms. This role focuses on protecting critical banking applications and sensitive data from modern web threats while ensuring compliance with stringent financial regulations. The ideal candidate will have strong L2 troubleshooting experience and a solid understanding of network security principles within a dynamic banking and financial services environment. Key Responsibilities Provide Level 2 operational support for F5 BIG-IP systems, specifically for WAF (ASM) and SSL Orchestrator (SSLO) modules. Monitor F5 platforms for performance, availability, and security events, responding to alerts and service-desk tickets in line with established SLAs. Analyze and resolve security incidents related to web applications and SSL/TLS traffic, performing first-pass diagnostics and fixing routine issues. Escalate complex or high-severity issues to the L3 engineering team and F5 Technical Assistance Center (TAC) as required. Manage and deploy Web Application Firewall (WAF) policies and security policies, including managing exceptions and performing policy tuning. Perform configuration changes and updates on F5 SSL Orchestrator for decrypting, inspecting, and re-encrypting SSL/TLS traffic. Implement standard configurations for new applications and services as per design guidelines and bank policies. Develop and maintain Standard Operating Procedures (SOPs), runbooks, and a knowledge base for incident resolution. Lead the troubleshooting efforts for security incidents, providing accurate root cause analysis (RCA). Ensure that F5 WAF and SSLO configurations are compliant with the bank's security policies and regulatory requirements. Shall analyze incidents & identify root causes and act for containment and remediation. Shall co-ordinate with the different departments/stakeholders for incident analysis and remedial action. Provides engineering analysis and architectural design of technical solutions.