Network Security Engineer

Network Security & Infrastructure Protection:

• Design, implement, and maintain secure network architectures across the organization's technology environment.
• Configure and manage firewalls, VPNs, intrusion detection/prevention systems, network access controls, and other security technologies.
• Monitor network traffic and security events to identify unauthorized access, suspicious activities, and potential cyber threats.
• Implement network segmentation and access controls to protect critical systems and sensitive business information.
• Conduct regular reviews of network security configurations and recommend improvements.

Threat Detection & Incident Response:

• Investigate network security alerts, vulnerabilities, and suspected security breaches.
• Lead or support the response to network-related security incidents and coordinate appropriate containment and remediation activities.
• Perform root-cause analysis following security incidents and implement preventive measures.
• Monitor emerging cyber threats and assess their potential impact on the organization's infrastructure.
• Maintain incident records and provide timely escalation of significant security events.

Vulnerability & Security Risk Management:

• Conduct vulnerability assessments and support penetration testing activities across network infrastructure.
• Identify security weaknesses and coordinate remediation with relevant technology teams.
• Ensure network devices, systems, and security appliances are appropriately patched and securely configured.
• Support risk assessments relating to network infrastructure, third-party connectivity, and technology projects.
• Ensure security controls remain aligned with organizational policies and applicable regulatory requirements.

Security Monitoring & Reporting:

• Develop and maintain network security monitoring processes and dashboards.
• Analyze logs, alerts, and security events to identify trends and potential risks.
• Prepare periodic reports on network security posture, incidents, vulnerabilities, and remediation activities.
• Maintain accurate documentation of network security architecture, configurations, procedures, and controls.

Business Continuity & Secure Connectivity:

• Support the security and resilience of network infrastructure used for critical business operations.
• Implement and test secure remote access and connectivity solutions.
• Support disaster recovery and business continuity exercises involving network infrastructure.
• Ensure redundancy and failover mechanisms are appropriately secured and tested.

Stakeholder & Vendor Management:

• Collaborate with IT Infrastructure, Applications, Risk, Internal Audit, Compliance, and other business teams on security initiatives.
• Provide security input into new technology implementations, system upgrades, and infrastructure projects.
• Work with external technology and security vendors to resolve technical issues and improve security capabilities.
• Provide technical guidance and security awareness to relevant internal stakeholders.

Requirements
Educational Qualification:

• Candidates should possess a Bachelor's Degree in: Computer Science, Information Technology, Cybersecurity, Computer Engineering, Network Engineering or a related discipline.
• Relevant professional certifications such as CISSP, CEH, CCNP Security, CompTIA Security+, Fortinet, Palo Alto, or equivalent certifications will be an added advantage.

Experience:

• Must have 4–6 years of relevant experience in network security, cybersecurity, network engineering, or infrastructure security.
• Proven experience managing enterprise network security environments.
• Strong hands-on experience with firewalls, VPNs, IDS/IPS, network monitoring, and access control technologies.
• Experience with vulnerability management, incident response, and security assessments.
• Experience within the insurance, banking, financial services, or other regulated environments is an advantage.

Technical Competencies:

• Network Security
• Firewall Administration
• VPN & Remote Access Security
• IDS/IPS
• Network Monitoring
• Vulnerability Management
• Incident Response
• Security Information & Event Management (SIEM)
• Network Access Control
• Security Architecture
• TCP/IP & Network Protocols
• Windows/Linux Security
• Cybersecurity Risk Management
• Cloud & Hybrid Network Security