As a Network Engineer specializing in Cyber Security, you will play a key role in designing, implementing, and maintaining secure network infrastructures to protect against cyber threats and ensure the confidentiality, integrity, and availability of sensitive information and systems. You will collaborate with cross-functional teams to identify security requirements, develop comprehensive security architectures, and implement effective security controls to mitigate risks and enhance cyber resilience.
Key Responsibilities:
- Network Security Architecture Design:
- Design secure network architectures, including firewalls, intrusion detection/prevention systems (IDS/IPS), virtual private networks (VPNs), and other security technologies, to protect against external and internal cyber threats.
- Conduct risk assessments and vulnerability analyses to identify security gaps and develop remediation strategies.
- Security Infrastructure Implementation:
- Implement and configure network security devices and technologies according to industry best practices and security standards.
- Deploy and manage security solutions such as next-generation firewalls, secure web gateways, endpoint protection platforms, and security information and event management (SIEM) systems.
- Network Monitoring and Incident Response:
- Monitor network traffic and security events using advanced security monitoring tools and techniques.
- Investigate and respond to security incidents, breaches, and anomalies in a timely manner to minimize impact and mitigate risks.
- Security Policy Development and Compliance:
- Develop and maintain network security policies, procedures, and standards in alignment with regulatory requirements and industry frameworks (e.g., NIST, ISO/IEC 27001).
- Ensure compliance with relevant security regulations, laws, and contractual obligations.
- Security Awareness and Training:
- Provide security awareness training and guidance to IT teams and end-users to promote cybersecurity best practices and mitigate human-related risks.
- Conduct security awareness campaigns and phishing simulations to enhance security awareness and vigilance.
- Incident Handling and Forensics:
- Coordinate incident response activities, including containment, eradication, and recovery efforts, in collaboration with internal teams and external stakeholders.
- Conduct digital forensics investigations and analysis to identify the root causes of security incidents and prevent recurrence.
- Continuous Improvement and Innovation:
- Stay abreast of emerging threats, vulnerabilities, and security technologies through continuous learning and professional development.
- Evaluate and recommend new security solutions, tools, and methodologies to enhance the effectiveness and efficiency of cybersecurity operations.