ROLE PURPOSE
The L2 Network Security Engineer will be responsible for designing implementing and maintaining
network security solutions to protect the organization's data and systems. You will work closely with
other IT teams to ensure the security and integrity of the network infrastructure.
ROLES & RESPONSIBILITIES
o Design and implement Cisco-based network security architectures including firewalls intrusion
prevention systems VPNs and access control lists (ACLs).
o Configure and manage Cisco security products such as PaloAlto FortiGate Cisco Firepower
Cisco ASA Cisco Umbrella and Cisco ISE.
o Coordinate with vendors for product support updates and upgrades.
o Develop and implement network security policies standards and procedures.
o Configure monitor and maintain firewalls to control network access and protect against
unauthorized intrusion.
o Implement and manage intrusion detection and prevention systems (IDS/IPS) to identify and
mitigate security threats.
o Configure and manage virtual private networks (VPNs) to enable secure remote access.
o Investigate and respond to security incidents including data breaches and unauthorized access.
o Handle escalated security incidents from L1 support and manage incident response processes.
o Perform in-depth analysis of security breaches and vulnerabilities.
o Coordinate with relevant teams for incident containment eradication and recovery.
o Manage configure and troubleshoot security appliances like firewalls VPNs intrusion
prevention systems (IPS) and web proxies.
o Apply firewall policies and rules to ensure compliance with organizational security policies.
o Work with other departments such as network and systems engineers to implement and
manage security solutions.
o Coordinate patch management activities ensuring all security patches and updates are applied
across systems and network devices in a timely manner.
REQUIRED COMPETENCIES
o Industry certifications such as Cisco Certified Network Professional (CCNP Security).
o Experience: 10 years of experience in network engineering or administration with exposure to
complex troubleshooting and network security management.