Join a leading cybersecurity team dedicated to protecting organizations from cyberattacks and safeguarding valuable assets. We focus on creating secure, vigilant, and resilient environments by proactively managing cyber risks and enabling new opportunities. Embed security deeply into strategy development for effective information and technology risk management.

This role is crucial for maintaining advanced network security operations and infrastructure, acting as a key escalation point and driving secure, stable operations across a wide array of security technologies.

Oversee advanced troubleshooting, configuration, and policy management for firewalls, IDS/IPS, WAF, EDR/XDR, DLP, CASB, NAC, and MDM. Serve as an escalation point for L1 support, conduct root cause analysis, and manage change requests. Implement and maintain security measures for perimeter and network security, endpoint and email security, identity and access management, data protection, and cloud security.

Key duties include: reviewing firewall change requests, implementing rule changes, troubleshooting VPNs and routing, and analyzing logs. Fine-tune IDS/IPS signatures and respond to intrusion alerts. Configure and tune WAF rules for various threats and support application onboarding. Analyze DDoS alerts and support micro-segmentation. Conduct deep investigations for EDR/XDR alerts and manage secure email gateway policies. Maintain PAM policies and troubleshoot account access. Fine-tune DLP policies for multiple channels and investigate violations. Configure SaaS policies via CASB and integrate with other security tools.

Additionally, manage NAC configurations, troubleshoot authentication, and onboard new device types. Configure patch management for Windows/Linux systems and troubleshoot deployment issues. Manage MDM policies and troubleshoot enrollment. Handle switch and WiFi management, including VLAN configurations and wireless authentication. Act as the primary escalation point for security incidents, perform log analysis with SIEM, and coordinate containment. Conduct root cause analysis for incidents and maintain operational documentation. Drive change requests and participate in audits to ensure policy compliance.

A minimum of 4 years of experience in network security and infrastructure support is essential. Possess a strong understanding of firewalls, VPNs, NAT, routing, and security zones. Solid knowledge of SIEM, endpoint protection, and threat detection methodologies is required. Hands-on experience with EDR, DLP, WAF, PAM, CASB, NAC, and MDM platforms is crucial.

Familiarity with Zero Trust principles and network segmentation concepts is expected. The ability to read and interpret packet captures using tools like Wireshark or TCPDump is necessary. A good understanding of cloud platforms such as Azure, AWS, or GCP is a significant advantage. Excellent analytical and troubleshooting skills are vital, along with the ability to mentor and guide junior team members. Clear and effective communication with clients and stakeholders, coupled with strong documentation and reporting skills, are fundamental for success in this role.

Educational background should include a Bachelor's degree in Cybersecurity, Information Technology, or a closely related field.