Senior IT Security Engineer - Pharma Industry

Role & responsibilities

• Design, implement, and manage enterprise-grade firewalls (Fortinet, Palo Alto, Checkpoint, Barracuda) including rule base optimization, upgrades, and high availability setups.
• Administer and troubleshoot complex

  network infrastructures

  , including VLANs, routing, switching, and VPNs, ensuring secure and reliable connectivity across the organization.
• Lead security architecture reviews, risk assessments, and provide recommendations to enhance enterprise security posture.
• Deploy, configure, and maintain

  EDR/XDR solutions

  , ensuring endpoint protection and advanced threat detection.
• Knowledge of

  SIEM and SOAR platforms

  for log correlation, incident monitoring, and automation.
• Familiarity with vulnerability assessments and penetration testing methodologies.
• Respond to security incidents, perform root-cause analysis, and lead containment, eradication, and recovery efforts.
• Define and enforce

  network segmentation policies

  , access controls, and zero-trust security models.
• Work with SOC teams to monitor, analyze, and respond to threats, leveraging threat intelligence feeds and automation.
• Collaborate with cross-functional IT and business teams to ensure security is embedded in all IT operations and projects.
• Provide mentorship and guidance to junior engineers and ensure adherence to security best practices.
• Stay updated with emerging cybersecurity threats, tools, and technologies, and recommend proactive measures.

Preferred candidate profile

Senior IT Security Engineer

• 9-14 years of experience in

  network & security engineering

  roles.
• Hands-on expertise with

  Fortinet, Palo Alto, Checkpoint, Barracuda

  firewalls.
• Strong networking knowledge: VLANs, routing, switching, TCP/IP, DNS, DHCP, VPN.
• Deep understanding of

  cybersecurity technologies

  : EDR, XDR, DLP, CASB, MFA, WAF.
• Exposure to

  SIEM, SOAR, VA/PT

  tools (preferred, not mandatory).
• Experience in incident response, threat hunting, and security operations.
• Relevant certifications preferred:

  CISSP, CISM, CCNP Security, Palo Alto PCNSE, Fortinet NSE, CEH