Network Security Engineer (Next-generation Firewall)

Key responsibilities:

• Design, implement, manage, and optimise key network security controls including next-generation firewalls (NGFW), web application firewalls (WAF), anti-DDoS, intrusion detection and prevention systems (IDPS), network detection and response (NDR), API protection, and network security policy orchestration platforms

• Proactively identify, assess, and track network security vulnerabilities and configuration weaknesses. Lead and verify mitigation efforts to closure

• Act as a subject-matter expert, reviewing and advising on the network security design for new IT projects and on-premises/cloud architectures to ensure alignment with the Corporation's security policies/standards and industry best practices

• Participate in the security incident response process, including on-call support outside regular business hours

• Coordinate and execute disaster recovery (DR) drills and security-focused non-functional testing

• Develop and maintain relevant security operational procedures, standards, and guidelines

• Ensure security operations comply with internal policies and relevant business and legal/regulatory requirements

• Collaborate effectively with internal IT teams, business units, and external vendors to resolve complex technical issues and manage change implementations
  

Requirements:

• Bachelor's degree in Computer Science, Information Technology, or a related field

• Minimum of 3 years of hands-on experience in network security engineering within a sizable organization

• Proven technical expertise in NGFW (e.g., Palo Alto, Fortinet, Check Point, HillStone), WAF (e.g., Akamai, Alibaba Cloud Firewall), anti-DDoS, intrusion detection and prevention systems (IDPS), NDR (e.g., Vectra), API protection, and network security policy orchestration platforms (e.g., Tufin), network infrastructure, and related technologies and processes

• Experience with firewall management and analysis tools

• Professional certifications such as CISSP, CCNA Security, PCNSE, or NSE

• Familiarity with ITIL frameworks

• Experience with scripting (Python, PowerShell, Ansible) for automation of security tasks

• Strong analytical and problem-solving skills, with the ability to work independently under pressure and tight deadlines

• Excellent interpersonal and communication skills, with fluency in spoken and written English

If interested for the above position, please send detailed resume with current and expected salary as well as date of availability through Apply now.

For more job opportunity, please visit our website: www.clts.com 

The personal information collected is strictly for recruitment purpose only