Security Expert
- Gurgaon, Haryana
- Permanent
- Full-time
- Primary responsibility is to provide Tier 2 network security support of Firewall/Proxy/LB environments supporting multiple customers.
- This position interfaces with external clients and is highly visible.
- Responsible for general architecture, initial configurations and subsequent management of one or more Firewall/VPN based/IPS/Proxy/DLP/Sandbox systems.
- Provide 24x7 production support to accept, operate and maintain security elements. There are off shift activities and pager rotation.
- Troubleshoot end to end network security issues and find the root cause.
- Conduct risk assessments on all work performed.
- Conduct daily, weekly, and monthly proactive maintenance activities including configuration changes and version upgrades as per business directive.
- Remediate vulneralities on Microsoft Defender Cloud.
- Good to have certification on security domain like ITIL,Firewall, Proxy, Cloud Security etc.
- Good written and verbal communication skills / fluent English.
- 4-8 years of experience.
- Leading Industry security Certifications (CCSA, CCNP Security, PCNSA/PCNSE, BCCPA, ZCCA-IA, ZCCP-IA, ZCCA-PA)
- Proxy:- •Zscaler (ZIA, ZPA, ZDX)- PAC file, NSS, MCAS, Various Policy Types- URL & Cloud app, DLP, Sandbox, Advance Cloud Firewall etc. APP Segment, APP Connector.
- Blue Coat Proxy (SG-800,900, 9000 )- Policy, PAC File * Firewalls:- Checkpoint advanced Firewall solution design - implementation and administration. Check Point Security Gateway on R81/80 Checkpoint UTM (2073,3073, 3075) Secure Platform and VSX platform, Juniper SSG (140, 520, 550) and SRX (100, 210, 240), .
- Palo Alto- (5220, 5240, 5310) (Firewall, Panaroma, Prisma, Global Protect)
- IDP:- McAfee IPS
- Load Balancers:- F5 (1600,3600,3900,6400)
- Event Management:- HP Arc Sight SIEM Express & Logger (7200)
- UTM:- Fortinet (80,110,300, 1000, 1500)
- In line with our ITIL based processes and organization, you will be in charge to follow Orange internal processes and manage: -
- Handle both re-active (customer call) and pro-active (monitoring) incidents
- Troubleshoot and fix all incidents in close relationship with all people involved in the fault resolution process: level 1 (cts2, dcsc, …), it csm, field operations, supplier helpdesk, infrastructure and engineering teams.
- Provide root cause analysis (rca)
- Ability to work in a virtual team environment.
- Involved in problem management as the owner of the technical resolution
- Handle standard change request, according to our change control and risk review process
- Handle complex change requests, providing technical expertise and reporting to the change advisory board (cab) as appropriate
- Monitor and respond to alarms and alerts from the SIEM and IDP solutions (triage / notification / recommendation / etc …)
- Working closely with Technical Operations Owners / Security Managers and with the customer/customer SOC, to manage incident response coordination and follow-up.