Security Engineer L3

Make an impact with NTT DATA!
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong, and thrive.

As part of the NTT family, you will deliver a wide range of IT services and solutions to clients around the world. Join us as we continue to provide innovative solutions that help our clients achieve their business objectives.

Responsibilities

Configuration and Deployment of NGFWs:

• Set up, configure, and deploy Next-Gen Firewalls (NGFWs) like FTD, Palo Alto, and Fortigate based on network requirements.
• Implement security policies, access control lists (ACLs), and VPN configurations.

Troubleshooting and Issue Resolution:

• Monitor firewall performance, investigate alerts, and address any anomalies or security incidents.
• Troubleshoot connectivity issues, rule misconfigurations, and security breaches.

Security Policy Management:

• Regularly review and update security policies to align with evolving threats and compliance requirements.
• Collaborate with stakeholders to ensure policies meet business needs without compromising security.

Performance Optimization:

• Optimize firewall performance by fine-tuning configurations and rules to enhance network security and efficiency.

Vendor Interaction and Evaluation:

• Engage with vendors for product updates, patches, and new feature evaluations.
• Research and recommend improvements or new technologies to enhance network security posture.

Deployment and Management of Endpoint Solutions:

• Deploy and manage Endpoint Protection solutions such as Symantec and TrendMicro across the organization's devices.
• Ensure antivirus, anti-malware, and endpoint security software are up to date and functioning correctly.

Threat Detection and Response:

• Monitor endpoint security tools for threat detection, analyzing and responding to security alerts promptly.
• Investigate and contain security incidents on endpoints, performing root cause analysis.

Patch Management:

• Coordinate and implement patches, updates, and security fixes for endpoint protection software.
• Maintain endpoint compliance with security standards and best practices.

Documentation and Reporting:

• Maintain detailed documentation of endpoint security configurations, incidents, and resolutions.
• Generate regular reports on endpoint security status, threats detected, and resolved incidents for stakeholders.

User Education and Support:

• Provide guidance and support to end-users on best security practices for endpoints.
• Conduct training sessions or create educational materials to increase awareness of endpoint security risks.

Collaboration and Integration:

• Collaborate with network and system teams for seamless integration of endpoint security solutions with overall network architecture.

Occasional Responsibilities for F5 LTM/ASM and Proxy Solutions

F5 LTM/ASM:

• Provide guidance and support to teams managing F5 LTM/ASM configurations or troubleshooting issues.
• Assist in diagnosing and resolving complex issues related to load balancing, SSL termination, or ASM policies.

Proxy Solutions:

• Offer advice and recommendations on proxy solution selection or integration based on specific project requirements.
• Provide support in defining and implementing proxy policies aligned with security and compliance standards.

Key Skills

• Network Security Fundamentals: Understanding of networking protocols, TCP/IP, OSI model, and network security principles.
• NGFW and Endpoint Solutions Expertise: In-depth knowledge of NGFW platforms like Cisco FTD, Palo Alto, or Fortigate.
• F5 LTM/ASM Competency: Proficiency in configuring and managing F5 Load Balancers (LTM) and Application Security Manager (ASM).
• Proxy Solutions Proficiency: Familiarity with proxy server solutions for content filtering, caching, and security controls.

Qualifications

• Cisco Certifications: CCNA Security or CCNP Security for NGFW expertise.
• Palo Alto Networks Certifications: PCNSE for Palo Alto NGFW proficiency.
• F5 Certifications: F5 Certified BIG-IP Administrator and F5 Certified Technology Specialist for ASM skills.
• General Security Certifications: CompTIA Security+, Certified Ethical Hacker (CEH).
• Must be fluent in Arabic and currently residing in Saudi Arabia.