Network Security Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Oversee network vulnerability management across routers, switches, firewalls, SD-WAN, wireless, and cloud networking platforms.

• Evaluate vulnerability scan results utilizing Qualys and other assessment tools.

• Prioritize remediation efforts based on risk, exploitability, business impact, and asset criticality.

• Monitor SLA compliance, exception management, risk acceptance, vulnerability reporting, and KPI metrics.

• Recognize recurring vulnerability patterns and implement long-term corrective measures.

• Design and create automation for network monitoring, configuration validation, and vulnerability remediation.

• Develop and sustain automation frameworks using Ansible, Python, PowerShell, APIs, and orchestration platforms.

• Automate firewall policy reviews, rule lifecycle management, and security configuration validation.

• Execute automated compliance checks in alignment with network security standards and hardening baselines.

• Integrate vulnerability management tools, CMDB platforms, ticketing systems, and monitoring solutions.

• Implement and uphold secure network segmentation across enterprise, cloud, datacenter, edge sites, and OT environments.

• Establish firewall zoning strategies, security policies, and access control standards.

• Engage in IT/OT convergence and zero-trust network architecture initiatives.

• Develop and maintain network security standards, hardening baselines, and operational procedures.

• Provide support for firewall management, intrusion detection, secure remote access, and network access control technologies.

• Collaborate with IT Security during incident investigations and threat response activities.

• Assist with audits, compliance assessments, and security reviews.

⛳️ Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field.

• A minimum of 5 years of experience in enterprise network engineering.

• At least 3 years of experience in cybersecurity or network security.

• Proficiency in network segmentation and firewall policy design.

• Experience in managing vulnerability remediation programs.

• Knowledge of routing and switching (Cisco, Aruba, Juniper, or equivalent).

• Familiarity with SD-WAN technologies.

• Understanding of DNS, DHCP, and TCP/IP.

• Experience in wireless networking.

• Proficient with Palo Alto, Cisco, Fortinet, or similar firewalls.

• Knowledge of Network Access Control (NAC).

• Familiarity with IDS/IPS technologies.

• Understanding of Zero Trust principles.

• Experience in security architecture and risk management.

• Proficient with vulnerability management platforms such as Qualys, Tenable, Rapid7, or similar.

• Knowledge of vulnerability prioritization and remediation workflows.

• Experience with security metrics and compliance reporting.

• Proficiency in Ansible.

• Experience with Python.

• Familiarity with PowerShell.

• Knowledge of REST APIs.

• Experience with Git version control.

• Understanding of Infrastructure-as-Code concepts.

🏝️ Benefits

• Remote work arrangement.

• Permanent, full-time employment.