Description

You own L3 escalation for complex network security incidents, providing deep-dive analysis and resolution.

This role is on-site.

Responsibilities

• Lead proactive monitoring and event triage across firewalls, IDS/IPS, SIEM, and endpoint tools.
• Perform root cause analysis and develop permanent remediation strategies for recurring security incidents.
• Manage and respond to security events including malware, APTs, DDoS, and unauthorized access.
• Oversee the vulnerability management lifecycle from scanning to remediation tracking.
• Develop and maintain SOPs, runbooks, and knowledge base articles to enhance team capability.

Required Skills

• 8+ years of experience in network security operations, SOC, or managed security services.
• Deep expertise in firewall administration (Palo Alto, Cisco ASA/Firepower, Fortinet).
• Proficiency with SIEM platforms, specifically Splunk.
• Strong understanding of network protocols including TCP/IP, BGP, VLANs, and VPNs.
• Experience with vulnerability management tools such as Tenable Nessus or Qualys.
• Familiarity with IAM and PAM solutions (CyberArk, Azure AD).
• Solid understanding of cloud security principles across AWS or Azure.
• Demonstrated experience in an ITIL-based service delivery model with SLA accountability.

Preferred Skills

• Scripting/automation skills in Python, PowerShell, or Bash.
• Experience supporting enterprise-scale managed security environments.

Key Skills

Education

Bachelor's degree