*We are unable to sponsor for this permanent Full time role*

*Position is bonus eligible*

Prestigious Global Firm is currently seeking a Network Security Operations Engineer. Candidate will specialize in the design and implementation of network security technologies within the infrastructure as well as the implementation of potential new products and/or features. This engineer will be responsible for reviewing implementations of existing products, determining improvements, building roadmaps, and implementing the updates to improve the overall security posture.

Responsibilities:

• Upgrade network security systems by monitoring security environment; identifying security gaps, and evaluating and implementing enhancements.
• Partner closely with IT or business teams across the Firm to implement secure solutions that reduce business risk by ensuring confidentiality, integrity, and availability.
• Enhance department and organization reputation by delivering quality results and exploring opportunities to increase value and raise awareness of Information Security Program.
• Document and conform to processes related to security monitoring, patching and incident response.
• Acts as subject matter expert for security incident responses.
• Appropriately inform and advise management on incidents and incident prevention.
• Participate in knowledge sharing with other engineers and develop solutions efficiently.

Qualifications:

• Bachelor's degree required, preferably in cybersecurity or other IT-related field
• At least ten (10) years in an IT-related field or at least five (5) years working in cybersecurity required.
• Network topologies, enterprise Servers/storage, virtualization, and data center technology.
• Strong knowledge of network protocols and technologies.
• Experience with Network Detection and Response solutions such Vectra, Cisco Secure Network Analytics (Stealthwatch), Darktrace, ExtraHop, etc. required.
• Experience with network micro-segmentation solutions such as Illumio, Cisco Secure Workload, Guardicore, etc. required.
• Experience with other security-related technologies including Intrusion Prevention/Detection Systems, Firewalls, Content Filtering Technology, Vulnerability Scanning/Management Solutions required.
• Experience using file sandbox technology to detonate and analyze potentially malicious documents and executables preferred.
• Experience investigating security incidents using various security tools including EDR tools such as CrowdStrike, Sentinel One, etc. preferred.
• Experience with Security Information and Event Management (SIEM) such as LogRhythm, Splunk, etc.
• Experience should include event analysis, log collection/management, alert generation, investigations, and reporting preferred.
• Microsoft Outlook, Word, & Excel required.
• Comptia Security+, Network+, Cybersecurity Analyst
• GIAC Information Security Fundamentals or Security Essentials Certification
• Certified Information Systems Security Professional (CISSP)