L3 Network Security Engineer – Network Security Device Management

As an L3 Network Security Engineer, you will act as the final escalation point for complex incidents affecting all network security technologies. You will conduct comprehensive troubleshooting and root cause analysis, implementing corrective actions and enhancements. Additionally, you will oversee the configuration, tuning, and maintenance of a variety of security solutions including SSL Inspection, VPN, Firewall, and Intrusion Prevention systems.

Key Responsibilities

• Act as the final escalation point for complex incidents affecting all network security technologies.
• Conduct comprehensive troubleshooting and root cause analysis, implementing corrective actions and enhancements.
• Oversee the configuration, tuning, and maintenance of SSL Inspection, VPN, Web Proxy, Firewall, DDoS, Advanced Threat Protection, Intrusion Prevention, and Email Security solutions.
• Lead incident response during critical security events and coordinate with relevant teams for rapid resolution.
• Prepare detailed post-incident reports and contribute to continuous improvement initiatives.
• Mentor L2 engineers and junior staff, providing guidance and developing best practice documentation.
• Work closely with network, IT, and security teams to design and implement robust security architectures.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 7 years of experience in network security engineering with a focus on managing diverse security technologies.
• Demonstrated expertise in managing SSL Inspection (Gigamon), VPN (Palo Alto, F5), Web Proxy (ForcePoint), Firewalls (Palo Alto, Cisco, Fortinet), DDoS Protection (Arbor), Advanced Threat Protection (FireEye NX), Intrusion Prevention Systems (Cisco, Trilex), and Email Security (Cisco Iron Port, FireEye EX, ForcePoint ESG, Trend Micro Scan-Mail).
• Excellent analytical, problem-solving, and communication skills.

Desired Skills & Certifications

• Advanced certifications such as CISSP, CISM, or equivalent.
• Vendor-specific certifications (e.g., Palo Alto, F5, Cisco, Fortinet, Arbor, FireEye, ForcePoint) are highly desirable.
• Experience with ITIL processes, incident management, and change management.

Working Conditions

• Full-time role with standard 9x5 hours and potential on-call responsibilities.
• Fast-paced, high-pressure environment with global collaboration.
• Occasional extended hours during critical incidents or planned maintenance windows.