Cyber Security Infrastructure Specialist

About the Role
We are seeking a dedicated and skilled Cyber Security Infrastructure Specialist to oversee, maintain, and optimize our core security infrastructure. In this role, you will be responsible for the day-to-day administration, policy configuration, health monitoring, and compliance reviews of critical security technologies, including email gateways, advanced threat sandboxing, web application firewalls (WAF), and multi-vendor firewall policy management tools.

Key Responsibilities & Duties:

1. Email Security & Mail Gateway Administration (Fortinet Mail GW)

   • Monitor service health, mail flow, system performance, and overall availability.
   • Configure and maintain comprehensive email security policies, including anti-spam, anti-malware, and phishing protection.
   • Investigate and resolve mail delivery issues, false positives/negatives, mail queue problems, and connectivity challenges.
   • Plan and execute software upgrades, firmware updates, and hotfixes.
   • Ensure all email security configurations comply with organizational security frameworks and regulatory mandates.

2. Web Application Security & WAF Administration (Fortinet WAF)

   • Configure and maintain Fortinet WAF policies, virtual servers, protected applications, and security profiles.
   • Configure SSL/TLS inspection and manage digital certificates.
   • Perform onboarding of new web applications and APIs into the Fortinet WAF platform.
   • Validate application functionality following WAF policy implementations.
   • Monitor WAF logs, alerts, and security events to proactively identify malicious activities and web-based attacks.

3. Advanced Threat Analysis & Sandboxing (Fortinet Sandbox)

   • Configure and maintain Forti Sandbox security policies, malware analysis profiles, Indicator of Compromise (IOC) generation, quarantine actions, and notification settings.
   • Configure file submission policies and manage supported file types.
   • Deploy, configure, and maintain robust integrations between Forti Sandbox and the Mail Gateway.
   • Plan and execute firmware upgrades, hotfix installations, and signature updates.
   • Ensure security configurations comply with organizational security policies and regulatory requirements.

4. Firewall Policy Review & Compliance Optimization (FireMon)

   • Perform periodic reviews of firewall policies across complex, multi-vendor firewall environments using FireMon.
   • Identify and assess critical security risks, including overly permissive rules, Any-to-Any access, shadowed rules, duplicate rules, redundant objects, and unused rules.
   • Configure FireMon policy analysis, compliance frameworks, risk scoring, rule recertification, and reporting modules.
   • Maintain integrations between FireMon and supported firewall vendors.
   • Generate and analyze operational, compliance, and executive reports detailing firewall policy posture, violations, rule optimization, and risk exposure.

You will work closely with internal teams to ensure our security posture remains robust, resilient, and aligned with organizational policies and regulatory requirements.

Qualifications & Requirements

• Experience: Proven hands-on experience in administering Fortinet security solutions (Mail GW, Sandbox, WAF) and firewall policy management tools (FireMon).
• Technical Skills: Deep understanding of email security protocols, web application firewall configurations, SSL/TLS inspection, malware analysis, and firewall rule optimization.
• Compliance & Monitoring: Ability to translate regulatory standards and organizational security policies into technical configurations and security controls.
• Problem-Solving: Strong troubleshooting capability for diagnosing mail flow disruptions, application connectivity barriers, and policy-related vulnerabilities.