We seek a Network Security Engineer with deep experience in financial services environments to join our network security team. You will be responsible for securing core banking networks, managing perimeter defenses, and ensuring compliance with banking regulations (BRSA, PCI DSS, ISO 27001). This is a critical role safeguarding mission critical connectivity and customer data, working closely with security, infrastructure, and compliance teams.

Responsibilities:

· Monitor, configure, and maintain firewalls, VPNs, IPS/IDS, WAFs, NAC, and DDoS protection systems

· Analyze and mitigate threats across LAN/WAN, Internet facing services, data centers, and cloud endpoints

· Enforce segmentation and access controls across core banking zones, DR sites, and third party integrations

· Ensure network security posture complies with BRSA, PCI DSS, ISO 27001, and PCI DSS standards

· Support internal and external audits, vulnerability scans, and regulatory inspections

· Maintain documentation and logs aligned with audit, incident response, and change management standards

· Contribute to zero trust architecture, microsegmentation, and secure onboarding of new applications

· Participate in firewall rule reviews, penetration test remediation, and security architecture design

· Support secure integration with FinTechs, SWIFT gateways, and cloud partners

· Respond to security incidents, anomalies, and alerts from SIEM, NDR, and IDS platforms

· Conduct forensic packet analysis and threat investigation on suspicious activities

· Collaborate with SOC teams for escalations and root cause analysis.

Qualifications:

· Bachelor’s degree in computer engineering, Cybersecurity, or related field

· 5+ years’ experience in network/security engineering, with at least 2 years in a banking or financial institution

· Proficiency with enterprise grade security tools (e.g., Palo Alto, Fortinet, Cisco ASA, Check Point, F5, FireEye, Juniper)

· Hands on experience with routing/switching, VPN technologies, and IPSec/GRE/MPLS tunnels

· Knowledge of network security standards, threat modeling, and segmentation strategies for financial workloads

Preferred Skills & Certifications:

· CISSP, CCNP Security, Fortinet NSE, PCNSE, or CISA

· ISO 27001 Implementer or Auditor, CEH, or SANS GIAC credentials are a plus