Network Security Engineer

Note : Face-Face interview is mandatory at ITC Office - Hyderabad Mindspace Hitechcity.

Need Immediate to 15 days joiners.

JD:-

Network with Palo Alto Firewall mandatory.

Network Security Engineer

Location : Hyderabad

• The Network Segmentation Engineer is responsible for designing, implementing, and maintaining secure network segmentation strategies to reduce the attack surface, enhance data protection, and support compliance with cybersecurity standards.
• This role involves close collaboration with network engineering, cybersecurity, compliance, and business units to ensure segmentation supports both security and operational requirements.

1. Networking Knowledge

• Very strong understanding of TCP/IP stack
• Deep understanding of common network ports and protocols: TCP/UDP ports, HTTP/S, FTP, DNS, DHCP, SMTP, SNMP, ICMP, SSH, RDP, SMB, SIP, and more.
• Familiarity with Layer 2 and Layer 3 segmentation (e.g., VLANs, subnets)

2. Security Expertise

• Knowledge of firewall/access technologies (e.g., Palo Alto, Juniper, ACLs on both Cisco and Juniper)
• Experience with Zero Trust architecture and microsegmentation (e.g., Illumio, Guardicore)
• Experience with host based firewalling (e.g., Windows Defender, IPtables)

3. Tools & Platforms

• Network tracing tools (e.g., Wireshark)
• Configuration management tools (e.g., Ansible, Python)
• Network monitoring tools (e.g., NetFlow, FlowMon, SNMP, Grafana, Prometheus)

Soft Skills & Responsibilities

1. Analytical Thinking

• Ability to assess network traffic flows and segment based on application or sensitivity
• Threat modeling and attack surface analysis

2. Documentation & Compliance

• Strong documentation skills for network diagrams, segmentation policies, and change management

3. Project Management

• Support segmentation projects from planning through execution
• Strong communication skills
• Collaborate with different stake holders like security, application owners, application managers and end-users

4. Incident Response & Troubleshooting

• Troubleshoot issues related to misconfigured segments or access
• Participate in incident response related to lateral movement or segmentation failures