Consultant - Tufin SecureTrack/SecureChange

Role & responsibilities

• Operate and maintain Tufin SecureTrack/SecureChange, including executing workflows, reviewing firewall policies, and supporting rule lifecycle management.
• Assist in firewall rule reviews, identifying unused or risky rules and documenting remediation recommendations.
• Participate in change request validation for firewall/NACL/NSG changes, ensuring proper documentation and compliance alignment.
• Support compliance reporting, including generating reports, tracking policy violations, and maintaining audit documentation.
• Contribute to incident response by performing initial triage, documenting findings, and escalating as needed.
• Provide operational support for multi-vendor firewalls (e.g., Fortinet, Cisco, Checkpoint), including basic configuration and troubleshooting.
• Engage in shift coverage, ncluding 24x7 monitoring, ticket handling, and on-call support as required.
• Maintain accurate documentation for rule reviews, change validations, and incident handling.
• Collaborate with cross-functional teams to support security operations and ensure alignment with organizational standards.
• Actively participate in training and knowledge sharing to build expertise in security tools, compliance frameworks, and cloud security.

Preferred candidate profile

• Tufin SecureTrack/SecureChange: Operational experience with workflows, rule reviews, reporting and policy management.
• Hands-on experience on at least two of the follow firewalls: Fortinet, Cisco, or Checkpoint firewalls.
• Cloud Security: NACLs, NSGs, and AWS/Azure fundamentals.
• Network Security: Firewall, VPN, Proxy, Threat Prevention, and Zero Trust architecture.
• Compliance Awareness: Familiarity with PCI-DSS, ISO 27001, and NIST standards.
• ITSM Tools: Experience with ticketing systems (e.g., ServiceNow) and ITSM processes (Change, Incident, Problem Management).
• Good to Have: Exposure to Zscaler ZIA/ZPA or Skybox.