Network Security Segmentation Engineer - Cyber Defense Professionals

Job Expired

Description

The Network Security Micro-Segmentation Security Engineer is expected to provide technical and engineering expertise for the Cyber Security Department and the broader organization. The successful candidate will need to demonstrate their expertise on provisioning, supporting, and ongoing maintenance of cloud & network security operating platforms, applications and services. The Network Security Micro-Segmentation Engineer is responsible for providing and implementing technology solutions and configurations that are in alignment with overall enterprise cyber security strategies and objectives.

The Network Security Micro-Segmentation Security Engineer specializes in ensuring network segmentation and compliance for on-premises and public cloud-based systems. The position works with application support teams, systems engineers, architects, customers and senior management to ensure appropriate security practices and mitigation of any risks identified.

Detailed Description:

Enhances distributed micro-segmentation models to maintain the confidentiality, availability, and integrity of enterprise data and information systems.
Provide excellent customer service for internal and external customers to support security initiatives, to increase solution adoption rates, and to perform incident response.
Maintains the effectiveness of security tools and technologies throughout an enterprise environment.
Evaluate, design, and implement security related solutions, adhering to established change control processes.
Evaluate, respond, and mitigate alerts that originate from the SIEM and cyber security product suites, e.g. NGFWs, IDS/IPS, network segmentation, endpoint protection, web application firewalls, etc.
Recommend and implement mitigations including the creation and development of new alerts and rules for cyber security product suites.
Analyze and identify malicious activity during a ttack stages and vectors.
Maintain a high level of technical expertise on Cyber Security defense-in-depth technologies and best practices by performing ongoing research and engagement to maintain awareness of industry trends.
Provides support to the team through a servant leadership style when assisting others and leading by example.

Basic Qualifications:

Bachelor’s Degree
5 years of implementing or utilizing technology lifecycles and best practices
5 years of production support and design of network security technologies (e.g. IPS, layer 7 firewalls, distributed firewalls, etc.)
5 years of operational experience with security technologies
3 years of experience programming in Python, Go, Powershell, JavaScript, or other comparable languages

Preferred Qualifications:

Demonstrate knowledge of micro-segmentation practices and experience with related technologies (Illumio, Palo Alto, VMwWare, Kubernetes)
Intermediate knowledge of operating systems (e.g. Windows, Linux, AIX, etc.)
Intermediate knowledge of core networking protocols and applications including BGP, OSFP, HTTP/S, DNS, DHCP, etc.
Intermediate knowledge of Splunk or other SIEM products
Excellent customer facing communication skills (both written and verbal)
Experience writing professional level documentation covering topics related to networking or application cyber security technologies. These include design and implementation documentation, process documentation, SLAs, etc.
Must be part of a rotational 24×7 on-call support team
Comfortable working in a highly collaborative team-based environment
Occasional travel may be required (
Industry or vendor recognized certifications such as certifications such as SANS, CISSP, and/or CISM
1 year of experience with the Illumio Adaptive Security Platform