NSO Level 2

Chubb is the world's largest publicly traded property and casualty insurer. With operations in 54 countries, Chubb provides commercial and private property and casualty insurance, personal accident and supplemental health insurance, reinsurance, and life insurance to a diverse group of clients. Chubb Infrastructure is a team of innovators who love technology as much as you do. Together, you will use a disciplined, innovative and a business focused approach to develop a wide variety of high-quality products and solutions. You will work in a stable, resilient, and secure operating environment where you—and the products you deliver—will thrive.

Role Purpose:

The Network Security Engineer (NSE) Focuses on continuous operations for health and performance, incident, change and problem management of the supported configuration items. Perform research and investigation if a managed technology does not perform as expected or a potential device health issue is identified. Alignment with the ITIL standards by observing the Incident Management lifecycle processes. The position requires hands-on technical work, a comprehensive understanding of today's information security challenges, domains, concepts, and principles, as well as solid firewall management discipline and communication skills.

Key Responsibilities:

• When it is not technically feasible to install monitoring, member will monitor the data stream coming from the device/technology.
• Initiate additional time-based checks if contact with a managed technology/device is lost.
• Begin research and investigation of the documented issues.
• If the managed technology is identified as the potential source of a network-related problem, examine the configuration and functionality for potential issues.
• Display the device health and outage ticket in the tool.
• Assist with the development of processes and procedures to improve incident response times, analysis of incidents, and overall, SOC functions.
• Conduct assessments to identify and mitigate risky configurations.
• Contribute and reduce auditing time with automated compliance reports.
• Strong analytical and problem-solving skills.
• Ensure the team follows the incident and change management procedures.
• Monitor Service Level Agreements (SLAs) for responsiveness and coverage.
• Provide regular reports and statistics for service management.
• Support for issues and mentoring for line 1 network security engineer.
• Solution architecture assignment for multiple projects, as designated by manager, with adherence to overall enterprise architecture and network, service, and system architecture standards.
• Additionally, develops guides/SOPs for work-related tasks, assists with vulnerability assessments as needed.
• Documenting architecture of Network Services systems and services throughout enterprise.
• Evaluation of emerging technologies, with understanding of fit and value within enterprise.
• Engagement with vendors for emerging solution review, including detailed design, and best practices evaluation.
• Conducting proactive research to analyse security weaknesses and recommend appropriate strategies.
• Ensure network security best practices are implemented through auditing managed devices.
• Other duties as assigned.
• Escalation support for L1 Engineers for Firewalls Cisco ASA/Firepower and Palo Alto Firewalls
• Escalation support for L1 Engineers for Illumio micro segmentation technology.
• Escalation support for L1 Engineers for Cisco Umbrella Solution
• Escalation support for L1 Engineers for ForeScout technology.
• Escalation support for L1 Engineers for Akamai WAF and incident triage for akamai.
• Escalation support for L1 Engineers Provide L3 support for Microsoft Defender AV, ATP, and Firewall modules.
• 7X24 support on-call

Experience:

• 5+ years, hands-on, broad-based information security experience.
• Working in a Security Operations Center or Managed Services Team
• Managing Firewalls Cisco ASA Firewalls/Firepower devices and Palo Alto NGFW.
• Managing Firewalls with CDO or Panorama
• Using monitoring solutions like SolarWinds or any other similar solution to manage the network.
• Managing Umbrella solutions.
• Working with vendors/partners to support solutions.
• Nice to have: Experience in Automation - Python, Go, Jenkins, Linux, Git, Ansible, Terraform, API's
• Advanced experience in using an IDS/IPS and SIEM
• Advanced experience with log and packet analysis tools and techniques.
• Advanced knowledge and background of working with technical security issues facing large organizations.
• Familiar with SOX, PCI DSS, ISO 27000, NIST SP 800, ITIL
• Tolerance for Demands & work under pressure.
• A self-starter with strong interpersonal skills and the ability to work independently.
• Experience of operational security monitoring, metrics, and reporting
• Strong verbal and written communication.
• Recommend and implement best practices for firewall management compliance with internal firewall policies.
• Monitoring of service levels for incidents and requests
• Incident Response.