Network Security Engineer

Key Responsibilities

• Lead the design, deployment, and optimization of enterprise security technologies, including Next-Generation Firewalls (NGFW), Intrusion Prevention Systems (IPS), and Secure Web Gateways (SWG).
• Monitor, audit, and maintain network security technologies, such as firewalls, intrusion detection/prevention systems, and secure web gateways to protect the CWGS's IT infrastructure from unauthorized access, cyber-attacks, and other security risks.
• Lead comprehensive security assessments and threat modeling to identify architectural weaknesses; drive the roadmap for necessary infrastructure upgrades.
• Design, implement, and enforce advanced security policies and procedures that align with global organizational goals.
• Act as a technical lead and mentor to junior and mid-level engineers, fostering a culture of technical excellence and continuous security awareness.
• Serve as a primary escalation point for complex security incidents, leading forensic analysis and post-mortem remediation efforts.
• Proactively research and integrate emerging security trends and automation tools to streamline security operations.
• Provide input and recommendations for improving the company's security posture.

  Requirements

  • Deep subject matter expertise in Firewalls (Palo Alto/Fortinet/Cisco), SD-WAN, and SASE/Secure Web Gateways.
  • Proven experience implementing and auditing frameworks such as NIST CSF, CIS Controls, and ISO 27001.
  • Expert-level understanding of complex networking protocols and hybrid-cloud connectivity.
  • Exceptional problem-solving skills with the ability to navigate high-pressure security events and provide strategic technical direction.
  • Excellent verbal and written communication skills, with a proven ability to present technical risks to non-technical stakeholders and executives.
  • Capable of working collaboratively with cross-functional teams to achieve common goals.

  Preferred

  • Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or a related field.
  • A minimum of 7–10 years of progressive experience in network security, with a proven track record of architecting security tools and leading complex incident response efforts in an enterprise environment.
  • Professional-level certifications are highly preferred (e.g., CISSP, CISM, CCIE Security, or PCNSE).