Security consultant

Location: Dallas, TX (Onsite). Duration: 1 Year. In‑person interview required.

Skills

• Hands‑on experience with Cisco ASA, FXOS, Palo Alto firewalls and Panorama.
• Full understanding of Palo Alto Firewall concepts such as Security Zones, security policy ordering, searching and sorting audit logs, address sets, negated addresses, user roles and tables, route‑based policies, address‑books, application traffic control, etc.
• Hands‑on Cisco ISE for VPN authentication, AAA, and policy creation.
• Understanding and experience with routing protocols.
• Hands‑on skill in handling security incidents and planning mitigation.
• Good understanding of Symantec DLP.
• Extensive hands‑on experience with security technologies including firewalls, VPNs, IDS/IPS, endpoint security solutions (AV, HIPS, hard‑disk encryption), strong authentication products (RSA SecurID), content security gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, and TACACS/AAA solutions.
• Experience in more than one technology is preferred.
• Understanding of F5 load balancers.
• Strong presentation skills – able to participate in review meetings and convey points of concern.
• Capability to conduct risk analysis, impact analysis, and assess dependencies on customer/internal teams.
• Knowledge and experience working with ITIL (Information Technology Infrastructure Library) processes.

Non‑Technical Responsibilities

• Coordinate with other team members for availability of capable resources.
• Ensure quality work by reviewing and validating technical configuration changes.
• Coordinate with COE (Centers of Excellence) resources for resolution of technical issues/problems before escalation to OEM.

Technical Responsibilities

• Configuration of Cisco and Palo Alto firewalls.
• Articulate or highlight risks and dependencies.
• Participate in an on‑call support rotation.
• Firewall auditing, reviewing access control lists, and updating firewalls as needed.
• Interact with various teams to manage the log‑management solution.
• Adhere to high‑quality standards, best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations.
• Analyze, troubleshoot, and investigate network security‑related incidents based on security platform reporting, network traffic, log files, host‑based and automated security alerts.
• Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations.