Senior Network Security Specialist

Job Description

The Senior Network Security Specialist is responsible for leading the design, implementation, optimization, and management of enterprise network security infrastructure. The role focuses on securing critical systems, improving security posture, handling advanced incidents, and ensuring high availability of secure network services across the organization. The specialist will also mentor junior engineers and collaborate closely with SOC, NOC, Infrastructure, and IT teams. 

Key Responsibilities 

• Lead the design and implementation of enterprise network security architecture. 

• Manage and optimize Firewalls, VPNs, IDS/IPS, WAF, Proxy, and NAC solutions. 

• Configure and troubleshoot advanced security platforms (Fortigate, Forcepoint, Cisco ASA/FTD, F5 BIG-IP). 

• Monitor and analyze security events, logs, and network traffic to identify threats and anomalies. 

• Lead incident response activities, root cause analysis, and containment procedures. 

• Implement network segmentation, Zero Trust concepts, VLANs, ACLs, and micro-segmentation strategies. 

• Manage secure remote access technologies (IPSec VPN, SSL VPN, MFA integrations). 

• Conduct vulnerability assessments, security audits, and penetration testing coordination. 

• Work closely with SOC teams for threat hunting and SIEM analysis (Splunk, QRadar, Sentinel). 

• Develop and enforce network security policies, standards, and best practices. 

• Ensure compliance with security frameworks and standards such as ISO 27001, NIST, PCI-DSS, and CIS Controls. 

• Support business continuity and disaster recovery planning for network security systems. 

• Maintain and improve network security documentation, diagrams, and operational procedures. 

• Provide technical leadership, mentoring, and guidance to junior engineers and support teams. 

• Participate in security projects, upgrades, migrations, and architecture reviews. 

• Perform capacity planning and performance optimization for security infrastructure. 

Required Skills 

• Strong expertise in Networking (CCNP/CCIE level knowledge preferred). 

• Advanced Routing & Switching (OSPF, BGP, STP, HSRP/VRRP, MPLS basics). 

• Deep understanding of Firewalls, IDS/IPS, WAF, Proxy, NAC, and Network Access Security. 

• Hands-on experience with SIEM solutions (Splunk, QRadar, Microsoft Sentinel, ArcSight). 

• Strong knowledge of TCP/IP, DNS, DHCP, NAT, and network protocols. 

• Experience with VPN technologies (IPSec, SSL VPN, Remote Access VPN). 

• Knowledge of network attack vectors, threat mitigation, and cyber defense techniques. 

• Experience with packet analysis and troubleshooting using Wireshark and similar tools. 

• Linux administration and security troubleshooting skills. 

• Familiarity with cloud security concepts (AWS/Azure networking & security) is a plus. 

• Knowledge of automation/scripting (Python, Bash, PowerShell) is a plus. 

Preferred Certifications 

• CCNP Security / CCIE Security 

• Fortinet NSE  

• CompTIA Security+ 

• CEH (Certified Ethical Hacker) 

• CISSP (Preferred) 

• F5 Certified Administrator (BIG-IP) 

• ISO 27001 Foundation or Lead Implementer 

Experience 

• 5+ years of experience in Network Security or Cyber Security roles. 

• Experience in enterprise or large-scale network environments. 

• Previous experience working with SOC/NOC and incident response teams. 

Education 

Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, Cyber Security, or related field. 

Soft Skills 

• Strong analytical and troubleshooting skills 

• Leadership and mentoring abilities 

• Excellent communication and reporting skills 

• Ability to work under pressure and handle critical incidents 

• Strong decision-making and problem-solving skills 

• Team collaboration across SOC, NOC, Infrastructure, and IT departments 

• Attention to detail and security-focused mindset