Network Security Engineer

The role of Network Security Engineer is to design, implement, maintain and improve security compliance protecting our organization's network infrastructure from Cyber Threats, vulnerabilities, and unauthorized access. This role is primarily responsible for rolling our network security monitoring and visibility tools along with implementing Cloud Access Security Broker (CASB), implementing secure browser and OpenShift security administration. This focuses on ensuring that security technologies are optimized for detecting, preventing, and responding to security threats in real-time. This also involves collaboration with Network engineers, IT, and security operations to deploy and support enterprise-level Cyber security platforms and solutions.

Skills & Qualifications:

• Technical Skills :
• Proficient with browser architecture, web standards (HTML5, JavaScript, WebAssembly), and rendering engines.
• Familiarity with Chromium, Blink, WebKit, or Gecko internals.
• Strong knowledge of secure coding practices, encryption protocols (TLS/SSL), and sandboxing techniques.
• Strong experience in Cloud security tools and platforms (GCP, AWS, Azure) and their security models.x
• Hands-on experience with leading CASB solutions like MCAS, Netskope, Prisma Clouds, etc.
• Understanding API-based and proxy-based CASB deployment modes (Forward Proxy, Reverse Proxy, API Integration).
• Experience with IDS/IPS, and security frameworks (e.g., NIST, ISO
• Hands-on experience with OpenShift Cluster Hardening, container & Pod safety, image & supply chain security and network security between pods.
• Exposure with network monitoring tools such as Gigamon, Viavi, Arista or equivalent, NDR tools like Arista, Cisco or equivalent, NetOps like Plixer and SIEM tools like (e.g., Splunk, QRadar, SecOps or equivalent).
• Understanding of network architectures, protocols (TCP/IP, UDP), routing, switching, and load balancing.
• Experience in firewall technologies (e.g., Check Point, Cisco, Fortinet), VPNs (SSL, IPSec), authentication protocols (LDAP, RADIUS), load balancers and cloud security.
• Strong scripting skills in Python, PowerShell, or Bash for automation and tool integration.
• Experience in Observability tools (Dynatrace, Splunk, Prometheus Grafana).

• Understanding of the SIEM tools (e.g., Splunk, QRadar, SecOps or equivalent)
  Familiarity with ITSM processes, Agile practices, ServiceNow, JIRA.

• Experience :

• Bachelor's or Master's degree in Computer Science, Information Security, or related field, or equivalent practical experience.
• Minimum 5-10 years of experience in network engineering and security management.
• Proven experience in managing security platforms and tools in a large, complex environment.
• Experience with Network security, analysis, and response, including knowledge of common attack vectors.
• Certifications :
• Relevant certifications such as CISSP, CEH, CCNA/CCNP Security, NSE (Fortinet), or equivalent.
• Certification in OpenShift Administration.

• Cybersecurity certificates (preferred)

• Define and enforce network security policies, standards, and best practices.

• Setup network port, IP, rack and stack the hardware for the network visibility tools like Arista, Gigamon & Viavi.
• Design, deploy, and manage security solutions such as firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS) and endpoint protections.
• Design, implement, and manage CASB solutions to secure cloud applications and services and enforce cloud security policies, including data loss prevention (DLP), access controls, and threat detection.
• Implement security best practices within Openshift containerized environments, including role-based access control (RBAC) and network policies.
• Design, develop, and maintain a secure web browser (standalone or Chromium/Firefox-based).
• Implement security features such as sandboxing, isolation, certificate pinning, anti-phishing, and exploit mitigation.
• Integrate enterprise controls such as URL filtering, secure DNS, policy enforcement, and logging.
• Conduct regular security assessments, vulnerability scans, and penetration tests to identify and mitigate risks.
• Monitor network activity, analyse traffic logs, and investigate security incidents or breaches.
• Perform root cause analysis on incidents and coordinate incident response and remediation efforts to improve security posture and prevent security breaches.
• Maintain and update security documentation, including policies, incident reports, and network diagrams.
• Build observability dashboard on the health of the network monitoring tools and the traffic visibility on various network infrastructure and tools.
• Collaborate with stakeholders, network and cross-functional teams to align security with organizational goals and compliance requirements.
• Lead or participate in security projects, disaster recovery planning, and business continuity initiatives.
• Stay updated on emerging threats, vulnerabilities, and security technologies, and recommend improvements.
• Optimize network security tools and platforms for performance and effectiveness, ensuring they meet compliance and organizational requirements.
• Maintain comprehensive documentation for network configurations, troubleshooting guides, and operational procedures.