Security Engineer

RESPONSIBILITIES:

• Responsible for ongoing configuration changes, monitoring and maintenance for Checkpoint and Palo Alto, including installing and maintaining firewalls, creating, and optimizing rule base, global objects, IDS/IPS policies, and Panorama management systems
• Analyze data, make recommendations for remedial action and/or security network enhancements based on detailed analysis and ensure proper communication of issues and/or recommendations to both technical and non-technical audiences. This includes remediation efforts for day to day reported trouble tickets from internal customers
• Understanding adversarial Tactics, Techniques and Procedures (TTPs) and developing novel detection and prevention techniques across multiple environments including network, endpoint and applications, particularly through use of the bank SIEM solution
• Monitoring events and alerts generated by firewalls, SIEMs, IDS and networking equipment
• Systematically identify system security issues and determine root cause via a consistent, logical approach
• In conjunction with senior engineers and technology management, define and drive security-based process improvements
• Creating and/or maintaining security documentation including security architecture diagrams, procedures, and Bank security standards

PROBLEM SOLVING & DECISION MAKING:

• Must be able to synthesize multiple data points across several business and technical domains.
• Must be analytical, well-organized, and self-directed. 
• Makes recommendations to manager on decisions of complex, multifaceted nature.
• Independently drives and coordinates solutions to complex matters

REQUIREMENTS:

• Palo Alto PCNSE and/or ACE certified with 1+ years’ experience (cert preferred)
• Checkpoint CCSA or CCSE certified with 1+ years’ experience (cert preferred)
• CISSP a plus in addition to other network security certifications
• Advaced level knowledge in designing and managing complex next gen firewall infrastructures to include firewall, IPSEC VPN and IPS/IDS, Advanced Networking, Acceleration & Clustering technologies
• Excellent written and oral communications skills
• Excellent interpersonal skills
• Strong ability to produce technical documentation

EDUCATION:  

• College degree or equivalent plus at least 1 year working as a security engineer/architect
• Large scale enterprise and service provider networks
• Experience with project management methodologies

SKILLS/KNOWLEDGE:  

Solid Understanding of the following:

• Network topologies / design: routing, switching, and MPLS/ELan technologies
• <