IT Security Operations Engineer

An experienced Information Security Engineer specializing in designing, implementing, and managing advanced security solutions to protect IT infrastructure and ensure business continuity. Extensive expertise in Global Security Operations Center (GSOC) processes and managing security devices and systems, including firewalls, intrusion detection/prevention systems, proxies, load balancers, and endpoint security solutions. Skilled in developing security policies, optimizing security configurations, vulnerability assessment, and supporting digital transformation and system upgrade projects.Responsibilities:Manage, implement, and maintain information security systems within Global Security Operations Centers (GSOC).Develop, update, and enforce security policies and procedures in accordance with industry best practices and standards.Install, configure, and monitor firewalls such as Palo Alto, FortiGate, and Checkpoint, along with VPN technologies (site-to-site and remote access).Manage endpoint security solutions (EDR/XDR), proxy servers, IPS/IDS, and F5 Load Balancers (LTM and GTM).Identify and remediate network vulnerabilities by analyzing existing configurations and recommending improvements.Prepare network topology diagrams using Microsoft Visio and document Standard Operating Procedures (SOPs) and maintenance plans.Participate in security improvement projects, system upgrades, and new technology rollouts.Monitor security system performance, generate regular reports, and ensure 99.9% system uptime.Perform on-site tasks including rack mounting, cable patching, hardware diagnostics, and timely replacement of faulty components in the data center.Qualifications:Bachelor’s degree in computer science, a related field.Certifications such as: CCNA, CCNP Security, Palo Alto Networks Certified, and Security+ are preferrable.Technical skills:Firewalls: Palo Alto, FortiGate, CheckpointVPN technologies: Site-to-Site and Remote AccessIPS/IDS SystemsLoad Balancers: F5 LTM and GTMEndpoint Security: AV, EDR, NDR, XDRAccess Management: RADIUS, TACACS+Protocols: TLSv1.2, TLSv1.3, TCP/IP, DNS, DHCPSecurity Event Log Management, SIEM, NetFlow