Job Summary:
A Client of The Intersect Group is seeking a Network Security Engineer to add to their team that is responsible for all aspects of Network Security within the Enterprise. They will be a SME in some domains, but are expected to have full professional knowledge of security concepts and company objectives to resolve a wide range of issues.
Responsibilities:
• Firewalls and network filters, in both Enterprise, Stores, and cloud networks
• Intrusion Prevention policies
• Site-to-site and remote-access VPN connectivity
• Network Access Control
• Authentication, Authorization and Accounting (to include multi-factor authentication)
• Web access proxy servers and URL filtering
• DNS Security
• Threat research, vulnerability remediation, and creation of compensating controls
• Network Security policy creation, exception documentation and approval
• Provide suggestions to team lead/manager in creating your professional development and training plan.
• Prioritize taskings and projects assigned based on importance to accomplishment of business objectives. Occasionally assist junior teammates with maintaining proper prioritization.
• Work with senior engineers to define network security requirements for current and future state end-to-end architectures and platforms to advance security controls and the security posture of the business.
• Assist senior engineers in collaborating with development and engineering teams to prioritize security risks, provide mitigation or remediation recommendations, and implement compensating controls.
• Perform network security architecture and third-party risk management reviews.
• Perform network security platform testing, vulnerability remediation, and operating system hardening to reduce attack surface.
Requirements:
Education/Experience
• Bachelor’s degree in related field, Master’s preferred, or equivalent experience
• 5 years of related experience with Bachelor’s, 3 years with Master’s
Must Have:
- MUST HAVE experience deploying Palo Alto virtual firewalls in cloud settings
Nice to Have:
• At least one entry-level vendor certification in the Network Security arena (Palo Alto PCNSA/PCNSE preferred, Cisco CCNA/CCNP Security, Juniper JNCIA-SEC/JNCIS-SEC, etc.)