Senior Security Engineer - Network Security

<h3>Job Description</h3><p>Join our Cyber Security Engineering unit, where innovation and security drive us. We are transforming technology with modern Network Security, integrations and cloud services. We are looking for a highly skilled and experienced <strong>Senior Cyber Security Engineer</strong> to join our <strong>Network Security</strong> Engineering team. This role involves architecting, designing, implementing, and maintaining robust security measures to protect our global network infrastructure. The ideal candidate will blend theoretical knowledge with hands-on expertise.  This role requires a deep understanding of cybersecurity principles, Network Security technologies, and the ability to collaborate across multiple globally dispersed stakeholders and teams. </p><p><strong>WHAT YOU’LL DO</strong> </p><ul><li>Lead design efforts for new and upgraded Network Security solutions across various physical sites (branches, stores, data centers). Support business initiatives by incorporating new functions and services </li><li>Develop, manage, and modernize the Network Security, transitioning from legacy systems to a modern SSE and ZTNA solutions </li><li>Ensure adherence to architectural policies and guidelines, aligning network design with the established roadmap, and implementing best practices for overall Network Security engineering </li><li>Create and maintain roadmaps, policies and implementation plans, analyzing, designing, and evolving Network Security infrastructure to meet evolving business needs </li><li>Ensure Confidentiality, Integrity and Availability of H&amp;M Global Network </li><li>Oversee performance, availability, and reliability of the Network Security, conducting monitoring activities and implementing necessary improvements </li><li>Advise on Network Security design, collaborate with stakeholders to align solutions with business objectives, and recommend innovative security measures to support company growth </li><li>Set and maintain Network Security standards to uphold security, quality and efficiency across all network deployments </li><li>Design, configure and install Network Security devices and solution (firewalls, gateways, proxies, load balancers, reverse-proxy, VPN, QoS, IDS, NAC etc.) both on-prem as in the cloud (Azure, GCP) </li><li>Provide Level-3 support and troubleshooting using tools like Wireshark and NetFlow  </li><li>Ensuring compliance towards external and internal Security standards (ISO, NIST, etc.) </li><li>Coordinate and manage major and high priority incidents </li><li>Take ownership and end to end responsibility for the solutions/functions within product team  </li><li>Protect H&amp;M Group technical assets, including data, network systems, and solutions, against advanced persistent cyber and information security threats such as hacking, malware and ransomware, and cybercrime (on-prem and in the cloud) </li><li>Understand and mitigate security vulnerabilities in various software and hardware designs </li></ul><h3>Qualifications</h3><p><strong>WHO YOU ARE</strong></p><ul><li>Strong understanding of IP networking and protocols, including IPSEC, HSRP, BGP, OSPF, 802.11, and QoS </li><li>Expert in Network Security solutions and products provided by Cisco, HP Aruba, Zscaler and Citrix NetScaler (proven by certificates) </li><li>Extensive experience with Network Security products and capabilities, including IDS/IPS, proxies, firewalls, reverse-proxies, load balancing, segmentation, VPNs, SIEM, XDR, SSE, SASE, SWG, CASB, ZTNA, and 802.1x </li><li>Experience in network defense mechanisms (incl. identity and access management) </li><li>Perform network scanning, packet collection, and manage certificates </li><li>Security Architecture, Design and Threat Modelling </li><li>Cybersecurity capabilities </li><li>Hardening </li><li>Log management </li><li>Vulnerability analysis and IT-system reviews </li><li>Information flows and key assets </li><li>Rules, policies, routines and guardrails  </li><li>Understand regulatory and compliance requirements (GDPR, PCI-DSS, Schrems, etc.) </li><li>Hands-on experience with network diagnostic tools (e.g., Wireshark, NetFlow)  </li><li>Expertise in cloud networking and security (e.g., Azure and GCP)  </li><li>Proficiency in network troubleshooting and automation (e.g., scripting with Python)  </li><li>Experience with DevOps methodology and tools  </li><li>Experience from large enterprise networks and or ISP/Telco domain  </li><li>Independent problem-solving, addressing complex security challenges with minimal supervision </li><li>English proficiency  </li></ul><p><strong>We prefer that you also possess the following:  </strong></p><ul><li>CCNP (Security) or higher certifications such as CCIE or CISSP are highly valued </li><li>Security certifications (e.g., Security+, GCIA, GCIH, GREM, CISSP, CEH, GCFA, etc.) </li><li>Azure Security Engineer, or GCP Security Engineer certification </li><li>Solid understanding of the OSI/TCP/IP model  <