JD :
Responsibilities:
- Design, Implement and Support security solutions that meet corporate security requirements
- Identifying security issues and risks, review & approve mitigation plans
- Detection, monitoring, analysis, and resolution of security incidents
- Influencing product teams to implement practices that maintain a high security bar
- Provide subject matter expertise on network & endpoint security, firewalls and industry best practices
- Analyze and proactively come up with creative solutions for operational needs that present security challenges
- Manage and maintain security systems by applying system patches and other periodic maintenance tasks.
- Create and maintain standard operating procedures and guides for new and/or existing security solution implementations
- Regularly communicate progress to company leadership and program stakeholders
- Attend weekly teleconferences, meetings, and participates in working groups, as related to constant changing security environment
Qualifications:
- 7-10 years of experience working in a security team
- Deep experience in deploying application-based firewalls (Palo Alto or similar) on premises or in cloud services (Prisma, Zscaler or similar), and SSL inspection techniques
- Proficiency in multiple security technologies, including; network security, NGFW, NAC, network segmentation, network security architecture
- Experience working with industry standard endpoint security products (Antivirus, DLP, Application control, EDR)
- Experience with common scanning tools, such as Tenable, Qualys or similar
- Solid knowledge and working experience with Layer 2-7 protocols and technologies
- Good knowledge and troubleshooting experience with routing, security protocols, ACLs, Firewalls, WAF, and Intrusion Prevention Systems
- Experience with open source network scanning tools
- Excellent communication and interpersonal skills including the ability to build consensus and to present complex presentations
- Basic knowledge with one or more scripting
- Certifications - PCNSA or similar, CISSP or similar, SANS GCIH or similar.
