Senior Network Security Engineer – Vectra and Gigamon

Role: Senior Security Network Engineer

Must have Technical Skills: Vectra and Gigamon

Experience: 7 to 12 years

Job Location: Chennai, Bangalore and Hyderabad

Roles & Responsibilities

Vectra NDR Administration

• Serve as the subject matter expert for the Vectra NDR platform
• Administer, configure and maintain Vectra appliance and sensors
• Monitor, triage and investigate security alerts generated by Vectra, leveraging network metadata and AI-driven insights to identify sophisticated threats, malware and attacker behaviors.
• Perform threat hunting activities using Vectra’s capabilities to proactively search for indicators for compromise (IOCs) and advanced persistent threats (APTs)
• Integrate Vectra with other security tools, i.e. SIEM, SOAR, EDR to enable a comprehensive security ecosystem.

Gigamon SSL Interceptor Administration

• Administer and manage the Gigamon traffic visibility fabric, including GigaVUE nodes and modules
• Configure and maintain SSL/TLS decryption policies and forwarding rules using the Gigamon SSL interceptor to provide visibility into encrypted traffic for security tools
• Ensure proper traffic distribution to various security and monitoring tools, i.e. IDS/IPS, and analytics platforms while maintaining network performance and availability.
• Troubleshoot traffic flow and connectivity issues within the Gigamon environment.

BAU Operations

• Proactively monitor network traffic for anomalies, security breaches and policy violations
• Contribution to develop and implement network security policies and procedures
• Participate in incident response activities, providing expert analysis of network traffic and threat actor movements
• Perform regular health checks, maintain and upgrade for all network security appliances
• Collaborate with other security teams, i.e. SOC, Incident response, engineering, etc… to improve overall security posture
• Create and maintain detailed documentation for all the network security configurations, procedures and runbooks.
• Generate regular reports on security incidents, threat trends and performance of security tools

Provide training and mentorship to junior staff on the use of security tools and best practices.

Must Have Skills

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 6+ years of experience in managing and administering Vectra NDR and Gigamon SSL interceptor tools
• Demonstratable expertise in managing and administering Vectra AI’s Cognito platform (NDR), including the management of sensors, correlators and the associated analytics engine
• Extensive experience with Gigamon’s Traffic Visibility Fabric and specifically, the SSL/TLS decryption capabilities of the Gigamon SSL interceptor
• Strong understanding of TCP/IP networking protocols, network architecture, and security principles
• Proficiently with packet analysis tools such as Wireshark and TCPDump
• Experience with a variety of security technologies, including IDS/IPS, firewalls, proxies, and SIEM platforms
• Excellent problem-solving skills and the ability to work independently or as part of team.
• Strong communication and interpersonal skills, with the ability to explain complex technical concepts to non-technical audiences.