W2 contract || Network Security consultant

Location: Dallas, TX 75202 (Onsite from day one) | Duration: 12+ months | Type: W2 contract | Experience: 5+ years

Responsibilities

• Coordinate with other team members for availability of capable resources
• Ensure quality work—review and validate technical configuration changes
• Coordinate with Centers of Excellence (COE) resources for resolution of technical issues/problems before escalation to OEM
• Configure Cisco and Palo Alto firewalls
• Articulate or highlight risks and dependencies
• Participate in an on-call support rotation
• Perform firewall auditing, review access control lists, and update firewalls as needed
• Interact with various teams in managing the log management solution
• Adhere to high-quality standards and best practices, ensuring high performance, scalable, and repeatable processes and deliverables in accordance with applicable regulations
• Analyze, troubleshoot, and investigate network security-related incidents based on security platform reporting, network traffic, log files, host-based and automated security alerts
• Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations
• Conduct risk analysis, impact analysis, and assess dependencies on customer/internal teams
• Demonstrate strong presentation skills—participate in review meetings and effectively communicate points of concern

Requirements

• Hands-on experience with Cisco ASA, FXOS, Palo Alto firewalls, and Panorama
• Full understanding of Palo Alto Firewall concepts: Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control
• Hands-on experience with Cisco ISE for VPN authentication, AAA, and policy creation
• Understanding and experience with routing protocols
• Hands-on skill in handling security incidents and planning mitigation
• Good understanding of Symantec DLP
• Extensive hands-on experience with various security technologies including Firewalls, VPNs, IDS/IPS, endpoint security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions
• Hands-on experience in more than one security technology is preferred
• Understanding of F5 load balancers
• Knowledge and experience working with ITIL (Information Technology Infrastructure Library) processes