Network Security Engineer

**Job Title:** Network Security Engineer

**Overview:**

We are seeking an experienced **Network Security Engineer** with expertise in **Cisco Firepower Threat Defense (FTD)**, **Palo Alto Firewalls (Panorama)**, **Symantec Proxy**, and **Cisco Email Security**. The successful candidate will be responsible for managing and securing network infrastructure, focusing on firewall management, proxy security, and email protection to safeguard the organization against emerging threats.

**Key Responsibilities:**

- **Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC):**

- Configure, manage, and optimize Cisco FTD devices for advanced threat detection, intrusion prevention, and firewall management.

- Utilize **Firepower Management Center (FMC)** to monitor and manage multiple FTD devices, implementing centralized policies, rules, and security updates.

- Analyze traffic patterns, detect anomalies, and respond to security incidents using FMC.

- Perform software updates, patches, and upgrades for both FTD and FMC to ensure optimal security posture.

- Troubleshoot and resolve any issues related to Cisco FTD and FMC configurations.

- **Palo Alto Firewalls and Panorama Management:**

- Configure and maintain Palo Alto Networks firewalls, managing security policies, NAT rules, VPN configurations, and threat prevention mechanisms.

- Use **Panorama** to manage and oversee multiple Palo Alto firewalls, providing centralized management, configuration, and monitoring.

- Implement advanced Palo Alto features such as App-ID, User-ID, and Content-ID for comprehensive traffic filtering and threat protection.

- Perform system upgrades, health monitoring, and incident response across the Palo Alto infrastructure via Panorama.

- **Symantec Proxy:**

- Manage and maintain **Symantec Proxy** (formerly Blue Coat ProxySG) for web filtering, content control, and secure web gateway functionality.

- Develop and enforce proxy policies for controlling access to web resources and preventing security breaches.

- Monitor web traffic, identify suspicious activities, and respond to proxy-related security incidents.

- Perform troubleshooting and resolve issues related to proxy server performance and policy enforcement.

- Ensure integration with other security platforms and compliance with organizational security policies.

- **Cisco Email Security:**

- Manage and configure **Cisco Email Security Appliance (ESA)** to protect against email-borne threats, including phishing, spam, and malware.

- Implement email filtering policies, data loss prevention (DLP), and encryption to ensure secure communication and compliance.

- Monitor and analyze email traffic for anomalies and malicious content, responding to any email security incidents.

- Perform system updates, manage user requests, and troubleshoot email security issues as they arise.

**Qualifications:**

-4-5 years of experience in network security engineering with expertise in **Cisco FTD**, **Palo Alto Firewalls (Panorama)**, **Symantec Proxy**, and **Cisco Email Security**.

- Strong understanding of security technologies, including firewall management, intrusion detection/prevention systems (IDS/IPS), VPN, web proxy, and secure email gateways.

- Experience with **Firepower Management Center (FMC)** for centralized FTD management and **Panorama** for managing Palo Alto firewalls.

- Familiarity with network protocols (e.g., TCP/IP, DNS, HTTPS) and security best practices.

- Hands-on experience in monitoring, analyzing, and responding to security threats and incidents.

- Relevant certifications, such as **Cisco CCNP Security**, **Palo Alto PCNSA/PCNSE**, or equivalent, are a plus.

**Skills and Attributes:**

- Strong analytical and troubleshooting skills with a focus on security and performance optimization.

- Ability to work independently and collaboratively with cross-functional teams.

- Excellent verbal and written communication skills.

- Ability to prioritize tasks and manage multiple projects effectively.

**Education:**

- Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience).