Security Expert

About the role

Primary responsibility is to provide Tier 2 network security support of Firewall/Proxy/LB environments supporting multiple customers.

This position interfaces with external clients and is highly visible.

Responsible for general architecture, initial configurations and subsequent management of one or more Firewall/VPN based/IPS/Proxy/DLP/Sandbox systems.

Provide 24x7 production support to accept, operate and maintain security elements. There are off shift activities and pager rotation.

Troubleshoot end to end network security issues and find the root cause.

Conduct risk assessments on all work performed.

Conduct daily, weekly, and monthly proactive maintenance activities including configuration changes and version upgrades as per business directive.

Remediate vulneralities on Microsoft Defender Cloud.

Good to have certification on security domain like ITIL, Firewalls, Proxy, Cloud Security etc.

Good written and verbal communication skills / fluent English.

4-8 years of experience.

About you

Leading Industry security Certifications (CCSA, CCNP Security, PCNSA/PCNSE, BCCPA, ZCCA-IA, ZCCP-IA, ZCCA-PA)

Proxy:- •Zscaler (ZIA, ZPA, ZDX)- PAC file, NSS, MCAS, Various Policy Types- URL & Cloud app, DLP, Sandbox, Advance Cloud Firewall etc. APP Segment, APP Connector.

Firewalls:- Checkpoint advanced Firewall solution design - implementation and administration. Check Point Security Gateway on R81/80 Checkpoint UTM (2073,3073, 3075) Secure Platform and VSX platform, Juniper SSG (140, 520, 550) and SRX (100, 210, 240), .

Palo Alto- (5220, 5240, 5310) (Firewall, Panaroma, Prisma, Global Protect)

IDP:- McAfee IPS

Load Balancers:- F5 (1600,3600,3900,6400)

Event Management:- HP Arc Sight SIEM Express & Logger (7200)

UTM:- Fortinet (80,110,300, 1000, 1500)

What we offer

Responsibilities

In line with our ITIL based processes and organization, you will be in charge to follow Orange internal processes and manage: -

Incident management

Handle both re-active (customer call) and pro-active (monitoring) incidents

Troubleshoot and fix all incidents in close relationship with all people involved in the fault resolution process: level 1 (cts2, dcsc, …), it csm, field operations, supplier helpdesk, infrastructure and engineering teams.

Provide root cause analysis (rca)

Ability to work in a virtual team environment.

Problem management

Involved in problem management as the owner of the technical resolution

Change management

Handle standard change request, according to our change control and risk review process

Handle complex change requests, providing technical expertise and reporting to the change advisory board (cab) as appropriate

Security Incident and Event Management

Monitor and respond to alarms and alerts from the SIEM and IDP solutions (triage / notification / recommendation / etc …)

Working closely with Technical Operations Owners / Security Managers and with the customer/customer SOC, to manage incident response coordination and follow-up.