NSO Level 2

Key Responsibilities:

• When it is not technically feasible to install monitoring, member will monitor the data stream coming from the device/technology.
• Initiate additional time-based checks if contact with a managed technology/device is lost.
• Begin research and investigation of the documented issues.
• If the managed technology is identified as the potential source of a network-related problem, examine the configuration and functionality for potential issues.
• Display the device health and outage ticket in the tool.
• Assist with the development of processes and procedures to improve incident response times, analysis of incidents, and overall, SOC functions.
• Conduct assessments to identify and mitigate risky configurations.

• Contribute and reduce auditing time with automated compliance reports.
• Strong analytical and problem-solving skills.

• Ensure the team follows the incident and change management procedures.
• Monitor Service Level Agreements (SLAs) for responsiveness and coverage.
• Provide regular reports and statistics for service management.
• Support for issues and mentoring for line 1 network security engineer.
• Solution architecture assignment for multiple projects, as designated by manager, with adherence to overall enterprise architecture and network, service, and system architecture standards.
• Additionally, develops guides/SOPs for work-related tasks, assists with vulnerability assessments as needed.
• Documenting architecture of Network Services systems and services throughout enterprise.
• Evaluation of emerging technologies, with understanding of fit and value within enterprise.
• Engagement with vendors for emerging solution review, including detailed design, and best practices evaluation.
• Conducting proactive research to analyse security weaknesses and recommend appropriate strategies.
• Ensure network security best practices are implemented through auditing managed devices.
• Other duties as assigned.
• Escalation support for L1 Engineers for Firewalls Cisco ASA/Firepower and Palo Alto Firewalls
• Escalation support for L1 Engineers for Illumio micro segmentation technology.
• Escalation support for L1 Engineers for Cisco Umbrella Solution
• Escalation support for L1 Engineers for ForeScout technology.
• Escalation support for L1 Engineers for Akamai WAF and incident triage for akamai.
• Escalation support for L1 Engineers Provide L3 support for Microsoft Defender AV, ATP, and Firewall modules.
• 7X24 support on-call

Knowledge:

Bachelor's degree in Cybersecurity, Computer Science, or related engineering field
• Language requirement: English (Required).
• Cisco Certified Network Associate Security (CCNA Security) training or equivalent (Required).
• Palo Alto Networks Certified Network Security Engineer (PCNSE) training (Required).
• Palo Alto Networks Certified Network Security Administrator (PCNSA) training (Required).
• Cisco Certified Network Associate R&S (CCNA) training or equivalent (Required).
• Cisco Umbrella Security Solution or equivalent vendor (Required).
• Network Security Micro segmentation with Illumio technology or equivalent vendor (Required).
• ITIL Foundations Training (Required).

• Cisco Certified Network Professional R&S (CCNP R&S) training or equivalent (Desired).
• Cisco Certified Network Professional Security (CCNP Security) training or equivalent (Desired).
• Cisco Identity Services Engine (ISE) training or equivalent (Desired)
• Network Access Control (NAC) with ForeScout or equivalent vendor (Desired).
• End Point Security Protection solutions with Microsoft Defender Suite or equivalent vendor (Desired).
• Akamai Technologies solution knowledge (Desired).

Experience:

• 5+ years, hands-on, broad-based information security experience.
• 5+ working in a Security Operations Center or Managed Services Team in a Level 2 position or similar experience.
• 5+ Managing Firewalls Cisco ASA Firewalls/Firepower devices and Palo Alto NGFW.
• 5+ Managing Firewalls with CDO or Panorama
• 5+ Using monitoring solutions like SolarWinds or any other similar solution to manage the network.
• 3+ Managing Umbrella solutions.
• 3+ Working with vendors/partners to support solutions.
• Advanced experience in using an IDS/IPS and SIEM
• Advanced experience with log and packet analysis tools and techniques.
• Advanced knowledge and background of working with technical security issues facing large organizations.
• Familiar with SOX, PCI DSS, ISO 27000, NIST SP 800, ITIL
• Tolerance for Demands & work under pressure.
• A self-starter with strong interpersonal skills and the ability to work independently.
• Experience of operational security monitoring, metrics, and reporting
• Strong verbal and written communication.
• Recommend and implement best practices for firewall management compliance with internal firewall policies.
• Monitoring of service levels for incidents and requests
• Incident Response