Senior Network Security Engineer(m/f/d)

<p>We understand that the world we want tomorrow starts with how we do business today, and that’s why we’re inspired to make A Better World for Pets. Antech is comprised of a diverse team of individuals who are committed to each other’s growth and development. Our culture is centered on our guiding philosophy, The Five Principles: Quality, Responsibility, Mutuality, Efficiency and Freedom. Today Antech is driving the future of pet health as part of <span>Mars<span> </span></span><span>Science &amp; Diagnostics</span>, a family-owned company focused on veterinary care.</p><p></p><p>Current Associates will need to apply through the internal career site. Please log into Workday and click on Menu or View All Apps, select the Jobs Hub app, then click the magnifying glass to Browse Jobs.</p><p></p><p></p><p></p><p></p><p></p><p><b>Title:</b> Senior Network Security Engineer(m/f/d)</p><p><b>Location:</b> Global Role - Mars Petcare Science &amp; Diagnostics Division (Hub Hybrid Viernheim Germany)</p><p><b>Job Type:</b> Full-Time</p><p><b>Reports To:</b> Science &amp; Diagnostics Division Director of Cybersecurity</p><p></p><p><b><span>This is a Hybrid role based out of our office in Viernheim Germany. </span></b></p><p></p><p><b>Job Summary: </b></p><p>The Senior Network Security Engineer is responsible for designing, implementing and maintaining security controls that protect SDx enterprise network from cyber threats. This role requires extensive (7 years or more) expertise in Palo Alto firewalls, intrusion prevention and detection systems (IDS/IPS), content network delivery, and routing tools, Network Access Control (NAC) equipment, Virtual Private Networks and Secure Remote technologies, as well as developing perimeter-less and/or zero-trust security architectures. As part of the cybersecurity team, you will collaborate with information technology departments such as networking and infrastructure, Research &amp; Development-Product Management, DevOps-Software Development, and other members of the cybersecurity team to ensure a secure and resilient network infrastructure.   </p><p><b>Key Responsibilities: </b></p><ul><li>Design and enforce network security policies and best practices to protect against threats.</li><li>Design and implement secure network architectures, including segmentation, micro segmentation, DDoS protection, and zero trust-based policies within the relationships, workflow, and access to resources.</li><li>Deploy, configure and manage firewalls, IDS/IPS, Network Access Control-NAC, VPNS, proxy solutions including Palo Alto, Cisco, Zscaler, among other.</li><li>Monitor network traffic for anomalies, analyze security logs and respond to network-based threats and intrusions, in coordination with the Mars Incident Response and security teams.</li><li>Conducts and coordinate risk assessments, vulnerability scanning, and penetration testing for network security.</li><li>Implement and enforce network security policies, access controls and encryption.</li><li>Work with the Mars SOC team to assist in investigating security incidents to support forensic investigation and analysis. Further assist with integration of managing Security Incident Event Monitoring-SIEM, Security Orchestration Automation &amp; Response-SOAR, and threat intelligence solutions, among other.</li><li>Automate network security tasks using automation tools such as Python, PowerShell, Ansible, among other.</li><li>Ensure compliance with security frameworks as well as regulatory requirements for network security including NIST, ISO, PCI, among others.</li><li>Optimize security for hybrid and multi-cloud environments including AWS, GCP and Azure, Salesforce, among others.</li></ul><p><b>Qualifications &amp; Experience: </b></p><ul><li>Bachelors in Cybersecurity, Information Technology, Computer Science, Engineering or related field. Master’s degree is a plus, but not essential.</li><li>7+ years of experience in network security, threat detection, or cybersecurity operations.</li><li>Hand-on experience with firewalls (Palo Alto, Cisco, Checkpoint), IDS/IPS, VPNs, as well as network access control solutions (NAC).</li><li>Strong knowledge of network protocols and technologies (TCP/IP, BGP, OSPF, VLANs, MPLS, DNS, DHCP, etc.).</li><li>Familiarity with Cloud-Native network protection tools.</li><li>Experience with SIEM platforms (Splunk, QRadar, etc.) and log analysis.</li><li>Understanding of Zero Trust architecture.</li><li>At least 7 years of experience with Palo Alto firewalls, managing segmentation &amp; micro-segmentation, VPN, Advanced DNS security, URL filtering, Threat Prevention and network access control solutions.</li><li>At least one year managing Cloud NGFW for Azure &amp; AWS, IoT security integrated with Network Access Control solutions, Prisma Access, Global Protect VPN, among other.</li><li>Palo Alto Network Security Engineer (PCNSE) certification.</li></ul><p>Preferred Qualifications:</p><ul><li>Experience in regulated i