Req ID: 374599
We are currently seeking a Network Security Engineer -Hybrid - Plano, Texas to join our team in Plano, Texas (US-TX), United States (US).
Prior to Applying, please review and comply accordingly:
** Must be a US citizen or Green card holder to proceed with applying.
**Please carefully review the job requirements and pay transparency details below prior to applying
Job Responsibilities Include:
- Works as part of a 24/7 team working on rotational shifts.
- Works as part of Platform and Content Engineering handling tunings, stakeholder requests, escalations, reporting, trainings.
- Administers the organization's security tools to gather security logs from their environment.
- Performs lifecycle management of the supported security tools/technologies, Break-fix, Patching, Live update.
- Adheres to SOPs and notify stakeholders on log flow/log format issues.
- Documents best practices.
- Identifies opportunities to make automations which will help the incident response team.
- Performs security incident handling and response from several vectors including End Point Protection and Enterprise Detection and response tools, attack analysis, malware analysis, network forensics, computer forensics, and a broad range of skills in LAN technologies, Windows and Linux O/S's, and general security infrastructure.
- Carries out agreed maintenance tasks.
- Ensures usage of knowledge articles in incident diagnosis and resolution and assists with updating as and when required.
- Performs defined tasks to monitor service delivery against service level agreements and maintains records of relevant information.
- Investigates causes of incidents and seeks resolution.
- Escalates unresolved incidents and follow up until incident is resolved.
- Provides service recovery, following resolution of incidents.
- Documents and closes resolved incidents according to agreed procedures.
- Investigates and identifies root cause of incidents and assists with the implementation of agreed remedies and preventative measures.
- Maintains knowledge of specific specialisms, provides detailed advice regarding their application.
- Ensures efficient and comprehensive resolution of incidents, including ensuring that repairs are carried out by coordinating product requests, working with other team members.
- Logs all such incidents in a timely manner with the required level of detail with all the necessary.
- Cooperates with all stakeholders including client IT environments, vendors and carriers to expedite diagnosis of errors and problems and to identify a resolution.
Basic Qualifications:
- 8+ years experience in Security including:
- Firewall, IPS, IDS, Proxy etc.
- Seasoned experience in technical support to clients.
- Seasoned experience in diagnosis and troubleshooting.
- Seasoned experience in configuring/managing security controls such as Firewall, IDS/IPS, EDR, NDR, UTM, Proxy, SOAR, HoneyPots and other security tools.
- Seasoned experience providing remote support in Security Technologies.
- Seasoned experience in SOC/CSIRT Operations.
- Seasoned experience in handling security incidents end to end.
- Knowledge on networking, Linux and security concepts.
- Knowledge on log collection mechanism such as Syslog, Log file, DB API.
- Knowledge in security architecture.
- Seasoned experience in Security engineering.
Preferred Skills:
- Seasoned working knowledge on implementation and monitoring of security tools/technologies.
- Seasoned knowledge on security architecture, worked across different security technologies.
- Must have Zscaler, Prisma SASE experience
- Good to have Checkpoint experience
- Good to have experience of firewalls like Palo Alto NGFW, Fortinet, Cisco FTD
- Customer service orientated and pro-active thinking.
- Problem solver who is highly driven and self-organized.
- Great attention to detail.
- Good analytical and logical thinking.
- Excellent spoken and written communication skills.
- Team player with the ability to work well with others and in group with colleagues and stakeholders.
Academic Qualifications and Certifications:
- Bachelor's degree or equivalent in Information Technology or related field.
- Relevant level of Networking certifications such as CCNA, JNCIA, ACCA, PCNSA, CCSA etc. preferred.
- Relevant level of Security certifications such as AZ-500, SC-200, Security+, CEH, CISSP, CISM etc. will be added advantage.
Where required by law, NTT DATA provides a reasonable range of compensation for specific roles. The starting pay range for this remote role is $112,000 - $149,000. This range reflects the minimum and maximum target compensation for the position across all US locations. Actual compensation will depend on a number of factors, including the candidate's actual work location, relevant experience, technical skills, and other qualifications.
This position may also be eligible for incentive compensation based on individual and/or company performance.
This position is eligible for company benefits including medical, dental, and vision insurance with an employer contribution, flexible spending or health savings account, life and AD&D insurance, short and long term disability coverage, paid time off, employee assistance, participation in a 401k program with company match, and additional voluntary or legally-required benefits.