We are seeking an experienced Network Security Engineer to design, implement, operate, and maintain network security solutions across enterprise environments. The role focuses on managing network firewalls, Web Application Firewalls (WAF), and Network Traffic Analysis (NTA) platforms to protect enterprise infrastructure, applications, and network communications. The successful candidate will be responsible for security policy management, traffic analysis, threat detection, incident investigation, and continuous improvement of network security controls.
Key Responsibilities
Network Firewall Management
Implement, configure, administer, and maintain enterprise network firewalls.
Manage security policies, access control rules, NAT, VPNs, routing, and network segmentation.
Review and optimize firewall rules to enforce least-privilege access and reduce unnecessary exposure.
Monitor firewall logs and investigate suspicious network activities and unauthorized access attempts.
Troubleshoot firewall, connectivity, and network security issues.
Manage firewall upgrades, backups, configuration changes, and security patches.
Implement high-availability and redundancy configurations where required.
Web Application Firewall (WAF) Management
Deploy, configure, and maintain WAF solutions to protect web applications and APIs.
Develop and optimize WAF security policies, rules, and custom signatures.
Monitor and investigate malicious web traffic, application-layer attacks, and suspicious requests.
Tune WAF policies to reduce false positives while maintaining effective protection.
Analyze WAF logs and support application security incident investigations.
Collaborate with development and application teams to improve application-layer security.
Network Traffic Analysis and Threat Detection
Operate and maintain Network Traffic Analysis (NTA/NDR) platforms for network visibility and threat detection.
Analyze network flows, traffic patterns, protocols, and communication behaviors to identify anomalies.
Detect suspicious activities, including command-and-control communications, lateral movement, data exfiltration, port scanning, and unauthorized connections.
Investigate malicious network activities using packet captures, flow records, and network telemetry.
Analyze network indicators of compromise (IOCs) and correlate findings with threat intelligence.
Required Technical Skills
Hands-on experience with enterprise firewalls such as Fortinet FortiGate, Palo Alto Networks, Check Point, or Cisco Firepower.
Practical experience administering WAF solutions such as F5 Advanced WAF, FortiWeb, Cloudflare WAF, Imperva, or similar platforms.
Experience with NTA/NDR solutions such as Darktrace, Vectra AI, ExtraHop, Corelight, or Zeek.
Strong understanding of TCP/IP, routing, switching, VLANs, DNS, HTTP/HTTPS, SSL/TLS, VPN, and network protocols.
Knowledge of network security concepts, segmentation, access control, NAT, IDS/IPS, and threat prevention.
Understanding of common network and application-layer attacks and attacker techniques.
Experience analyzing firewall, WAF, and network traffic logs.
Familiarity with Wireshark, tcpdump, NetFlow, sFlow, or IPFIX.
Knowledge of SIEM integration and security event correlation.
Basic scripting knowledge in Python or Bash is an advantage.
Qualifications and Experience
Bachelor's degree in Computer Science, IT, Network Engineering, or Cybersecurity, or equivalent practical experience.
Relevant experience in network security, firewall administration, or network engineering with security responsibilities.
Hands-on experience managing enterprise firewall environments.
Practical experience with WAF administration and network traffic monitoring is strongly preferred.
Experience investigating network-based security incidents.
Experience in enterprise or MSSP environments is an advantage.
Professional Competencies
Strong analytical and troubleshooting skills.
Ability to investigate complex network traffic and security events.
Attention to detail and risk-based decision-making.
Ability to work independently and collaborate with SOC, infrastructure, and application teams.
Good technical documentation and communication skills.
Strong sense of ownership, confidentiality, and continuous learning.
Key Performance Indicators (KPIs)
Availability, stability, and security effectiveness of firewall infrastructure.
Accuracy and effectiveness of firewall policy management and rule optimization.
WAF protection effectiveness and false-positive reduction.
Effectiveness of NTA-based threat detection and identification of malicious network activities.
Time to investigate and respond to network security incidents.
Detection coverage and quality of network security monitoring.
Compliance with security policies, change management, and operational procedures.
Quality of technical documentation and security improvement recommendations.