We are looking for a security engineer who can support VPN tools like Netskope for 10k users in an enterprise environment. CISSP, Splunk Enterprise and Active Directory rules and polices experience is a MAJOR plus!
The most important duties for this role are
- Troubleshoot and resolve ongoing end user issues with connectivity or performance.
- Creating policies for threat protection, web gateway and Data Loss Protection to meet security requirements.
- Coordinating roll outs with the client engineering, network and information security teams to maintain supported and secure client versions and configurations.
- Assist the security response team in investigations.
- Follow established change control process to test and deploy changes to production.
- Documentation procedures and participate in follow-the-sun support process with the rest of the team.
- Research new product features and apply them to the client's environment.
Requirements:
- Drive, desire to excel and to continuously improve the infrastructure without being in "consultant" mode. Be proactive in identifying and solving problems rather than waiting around for work assignments.
- At least 5 years of administration experience in an enterprise setting of 10,000+ users.
- Security mindset, combined with focus on operational and supportability.
- Understanding of SSL / TLS and PKI concepts and of networking protocols.
- Prior hand-on experience in security and firewall / secure web gateway administration (Netskope preferred, any CASB solution acceptable).
- Prior experience and expertise with any DLP product such as Symantec.
- Expertise in troubleshooting network connectivity using logs and wireshark and HAR captures.
- Ability to perform data analysis using Splunk to drive policy improvements and decisions.
- Good understanding of security standards, regulations and compliance requirements such as ISO, NIST, Common Criteria, PCI, HIPAA, GDPR etc.