Network Security Engineer
Core
Assess network and server security, monitor security events, and investigate alerts across Cisco technologies, Palo Alto firewalls, Windows and Linux servers, and endpoint security tools.
Role type
Network Security Engineer (SOC focus)
Builds
Security monitoring and incident response capabilities
Domain
Cybersecurity / Network Security
Required skills
Cisco technologies, Palo Alto firewalls, Windows server security, Linux server security, SIEM, EDR, alert triage, Python, PowerShell
Preferred skills
Splunk
Technologies
Cisco, Palo Alto, SIEM, EDR, Splunk, Python, PowerShell
Responsibilities
Review firewall policies, access controls, segmentation, VPNs, and security logs; Assess server hardening, patching, authentication, permissions, and audit logging; Verify SIEM log collection and investigate logging gaps; Monitor SIEM and EDR alerts for suspicious activity; Triage alerts, validate detections, distinguish false positives, assess severity, and escalate incidents; Correlate network, server, identity, and endpoint events to identify affected systems; Configure EDR policies, detection settings, exclusions, and alerts; Coordinate incident containment and remediation with infrastructure teams; Document investigations and response procedures; Develop, test, and maintain security tools for log analysis, alert triage, and automation; Recommend security improvements to network and server configuration teams.
Seniority
Mid-level, hands-on IC
