Network Security Engineer ( L1 / L2 / L3 )

Required Skills (L1 / L2 / L3 - Level)

• 2+ Years experience in Network Security & Infrastructure support.
• Strong knowledge of firewalls, VPNs, NAT, routing, and security zones.
• Good understanding of SIEM, endpoint protection, threat detection.
• Hands-on with EDR, DLP, WAF, PAM, CASB, NAC, and MDM platforms.
• Understanding of Zero Trust and segmentation concepts.
• Ability to perform packet-level debugging (TCPDump, PCAP analysis).
• Knowledge of OAuth, SAML, Zero Trust, PKI, TLS/SSL, certificates.
• Ability to read packet captures (Wireshark/TCPDump).
• Knowledge of cloud platforms (Azure/AWS/GCP) is an added advantage.
• Strong analytical and troubleshooting skills.
• Ability to mentor and guide L1 teams.
• Clear communication with clients and stakeholders.
• Good documentation and reporting skills.

Primary Skills (Must Have)

1. Network & Perimeter Security

• Firewall administration (Palo Alto, Fortinet, Cisco, Check Point)
• NAT, VPN (IPSec/SSL), routing & security policy troubleshooting
• Traffic/threat log analysis
• IDS/IPS configuration & signature tuning
• WAF policy management and false-positive tuning
• DDoS monitoring and mitigation
• Micro-segmentation policy handling

2. Endpoint & Email Security

• EDR/XDR alert investigation & threat hunting
• IOC validation, containment, and remediation
• Malware/behavioral analysis
• Secure Email Gateway policy configuration
• Anti-spam, anti-phishing, sandboxing, SPF/DKIM/DMARC troubleshooting

3. Infrastructure & Device Security

• NAC operations (Forescout / Cisco ISE / Aruba ClearPass)
• Profiling, posture check, VLAN assignment troubleshooting
• Patch management (Windows/Linux) baseline creation, compliance, agent issues
• MDM (Intune/Workspace One) policies, enrollment, sync issues
• Switch & WiFi troubleshooting (VLAN, STP, authentication, coverage issues)

4. Incident Response & Security Operations

• L2 escalation handling for incidents
• Log analysis using SIEM
• RCA preparation & incident documentation
• Coordination with L2 / L3/architecture teams
• Maintaining SOPs and runbooks.

5. Change, Compliance & Reporting

• Change request implementation
• Audit participation
• SLA/KPI reporting
• Policy compliance monitoring