network security engineer

Innovative Solutions

<div><h3 class="jobSectionHeader"><b>Company Description</b></h3><p>
Innovative Solutions (IS) is a leading pure-player Cybersecurity company in the GCC, established in 2003 and headquartered in Riyadh, with a presence in Al Khobar, Jeddah, Dubai, and Abu Dhabi. Our Cybersecurity Solutions and Services encompass Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.</p><p>
Innovative Solutions is committed to its mission to 'Bring Trust to Cyberspace' to ensure '<b>Your Business, Secured</b>'.</p><h3 class="jobSectionHeader"><b>
Role Description</b></h3><p>
The Senior Network Security Engineer will be responsible for developing, implementing, and maintaining network security protocols to protect the organization's information systems. The ideal candidate will work with a team of experts to enhance existing security measures and address potential vulnerabilities.</p><h3 class="jobSectionHeader"><b>
Responsibilities</b></h3><ul>
<li>Implementation, configuration and managing of Voltage DAM</li>
<li>Implementation, configuration and managing of Thales HSM</li>
<li>Configure &amp; monitor DAM policies</li>
<li>Analyze &amp; respond to suspicious DB activity</li>
<li>Manage keys, certificates, crypto lifecycle</li>
<li>Ensure compliance (NCA, SAMA, ISO)</li>
<li>Advise on DB security best practices</li>
<li>Document setups &amp; produce reports</li>
</ul><p><b>Requirements</b></p><ul>
<li>Bachelor's degree in Computer Science, Information Technology, or related field.</li>
<li>5+ years of experience in network security engineering.</li>
<li>Hands-on experience with DAM and Encryption technologies
</li><li>Preferred experience with Voltage DAM and Thales HSM</li>
<li>Certs: CISSP, CISM, Luna HSM Professional</li></ul></div>

Senior Network Security Engineer

Şanstech

<div>
 <p>
  &Scedil;anstech Company is a growing tech company with young and dynamic talents. We create an environment and offer growing opportunities to young talents to expand their abilities while experiencing agile solutions.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Technological innovation is the key to our success. To get there, we need exceptionally talented, bright, and driven people.
 </p>
 <p>
  <br/>
 </p>
 <p>
  We are looking for a Senior Network Security Engineer. If you'd like to help us contributing to this success, this is your chance to make history. We are looking for a dynamic, proactive, organized self-starter, enjoys solving complex problems to join our Network Security Management team.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Qualifications
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Experienced at least 5 years in the installation, configuration, and management of network and security devices such as Switch, Router, Firewall , Load Balancers, corporate security products such as VPN, NAC.
  </li>
  <li>
   Functional understanding of network Layer 2 /3 switching and routing protocols
  </li>
  <li>
   Knowledge of F5 iRules (F5's TCL scripting language) enabling customization of application load balancing solutions through the control and direct manipulation of the application traffic
  </li>
  <li>
   In depth knowledge of F5 LTM, Citrix NetScalerand FortiADC Hardware Platforms
  </li>
  <li>
   Knowledge of F5 LTM, Citrix NetScaler and FortiADC hardware platforms including engineering design and deployment implementation guidelines
  </li>
  <li>
   Create load balancer with requested configuration in F5 LTM, Citrix NetScaler and FortiADC
  </li>
  <li>
   Functional understanding of diverse set of networked applications requiring application traffic management solutions, including HTTP, HTTPS, SSH, FTP, DNS, NTP and others
  </li>
  <li>
   Knowledge of irules, content switching, or other equivalent rule-based URL rewriting
  </li>
  <li>
   Experienced in VIP creation, certificate updates, SSL profile creation, pool creation and pool member modification
  </li>
  <li>
   DMZ Network infrastructure knowledge including topology, security policies, firewalls and the L2/L3 switch and router infrastructure is required
  </li>
  <li>
   In depth knowledge of SSL cryptographic protocol in securing communications over the Internet and the ability to leverage F5 LTM, Citrix NetScaler and FortiADC in performing SSL offload (client decryption) and server encryption solutions
  </li>
  <li>
   Understanding of SSL Certificate Private Key Infrastructure (PKI) in the SSL Certificate and KEY management and rollover process is beneficial
  </li>
  <li>
   Understanding of LTM Inbound SNAT configurations and outbound NAT server to IP mapping required
  </li>
  <li>
   Understanding of application load balancing strategies and advanced techniques for application delivery
  </li>
  <li>
   Functional knowledge of F5, Citrix NetScalerand FortiADC advanced feature modules including Web Accelerator, Application Security Module, and Application Policy Module
  </li>
  <li>
   Knowledgeable of F5, Citrix NetScaler and FortiADC systems logging event types and logging levels
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job Description
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Designing of network devices and making appropriate configurations
  </li>
  <li>
   Providing expert support to network operation.
  </li>
  <li>
   Embracing customer first approach, able to develop trust-based relationship with internal customers and understand their needs
  </li>
  <li>
   Embracing one-team approach, able to be a strong team player
  </li>
  <li>
   Demonstrated ability to meet tight deadlines, ability to manage different tasks/projects simultaneously
  </li>
  <li>
   Defines Policies and Procedures to ensure availability, stability, integrity and security
  </li>
  <li>
   New techniques, products, services, technologies and standards are introduced when necessary
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Linkedin &uuml;zerinden elektronik olarak iletece&gbreve;iniz ki&scedil;isel bilgileriniz, &Scedil;anstech b&uuml;nyesinde olu&scedil;acak mevcut ve gelecek i&scedil;e al&inodot;m ihtiya&ccedil;lar&inodot; do&gbreve;rultusunda istihdam olanaklar&inodot;n&inodot;n de&gbreve;erlendirilmesi amac&inodot;yla 7 Nisan 2016 tarihli Resmi Gazete&rsquo;de yay&inodot;mlanan 6698 say&inodot;l&inodot; Ki&scedil;isel Verilerin Korunmas&inodot; Kanunu kapsam&inodot;nda veri sorumlusu olarak taraf&inodot;m&inodot;zca i&scedil;lenecek ve veri taban&inodot;m&inodot;zda gizlilik i&ccedil;erisinde saklanacakt&inodot;r. Detayl&inodot; bilgiye internet sitemizde (https://www.sans-technology.com/kvkk) Ayd&inodot;nlatma Metni i&ccedil;erisindeki &ldquo;&Ccedil;al&inodot;&scedil;an Aday&rdquo; alt ba&scedil;l&inodot;&gbreve;&inodot;ndan ula&scedil;abilirsiniz.
 </p>
</div>


Intelcia IT Solutions

<div>
 <p>
  Passionate about IT and innovation ? Your next adventure starts here !
 </p>
 <p>
  <br/>
 </p>
 <p>
  Intelcia IT Solutions is a leading player in IT outsourcing and digital transformation. With over 20 years of expertise, we are now active in five strategic areas: Infrastructure, Cloud, Application Solutions, Cybersecurity, Data, and AI.
 </p>
 <p>
  <br/>
 </p>
 <p>
  With a dynamic team of over 800 professionals, we assist businesses and public institutions in tackling their technological challenges through our service centers in France, Morocco, and Cameroon. Our mission is to combine the best talents with the latest cutting-edge technologies to offer high-value services that make a difference.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   What will your role be within the ITS Team ?
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  The network &amp; security engineer organizes workflows and implements operating processes for computer resources, ensuring their smooth running.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Activity management :
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Schedules workflows and implements operating/production processes for IT resources, ∙ Check the operation of a tool or piece of equipment,
  </li>
  <li>
   Monitor work progress,
  </li>
  <li>
   Diagnose the nature and origin of incidents and implement corrective measures , ∙ Plan maintenance operations ,
  </li>
  <li>
   Check a maintenance operation ,
  </li>
  <li>
   Install and integrate hardware (network equipment, etc.) in the production environment, and configure logical and physical resources,
  </li>
  <li>
   Provide assistance and support to internal and external customers ,
  </li>
  <li>
   Process information (collect, classify and update),
  </li>
  <li>
   Follow up tickets/requests with operators and editors,
  </li>
  <li>
   Contribute to project implementation,
  </li>
  <li>
   Supervise equipment and analyze supervision logs,
  </li>
  <li>
   Update network equipment OS and firmware (IOS, FortiOS, ...).
  </li>
  <li>
   SLA-compliant handling of incident and request tickets.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Knowledge :
  </strong>
 </p>
 <ul>
  <li>
   Business knowledge
  </li>
  <li>
   Knowledge of application architecture
  </li>
  <li>
   Fundamental knowledge of IT infrastructure
  </li>
  <li>
   Expertise in telephony-over IP platforms
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Interpersonal Skills :
  </strong>
 </p>
 <ul>
  <li>
   Collaborate
  </li>
  <li>
   Have a sense of rigor
  </li>
  <li>
   Organizational skills
  </li>
  <li>
   Demonstrate autonomy
  </li>
  <li>
   Leading and embracing change
  </li>
  <li>
   Be constantly in action.
  </li>
  <li>
   Draw up summaries
  </li>
  <li>
   Ability to manage risk
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Technical Skills
  </strong>
 </p>
 <ul>
  <li>
   Master techniques for diagnosing and monitoring network performance
  </li>
  <li>
   Product certifications Cisco (CCNP minimum), Fortinet (NSE4, NSE5, NSE7)
  </li>
  <li>
   Mastering : routing, switching and firewalling...
  </li>
  <li>
   Level 2 protocols: VTP, STP, Etherchanel, etc.
  </li>
  <li>
   Dynamic routing protocols: BGP, OSPF, EIGRP, etc.
  </li>
  <li>
   Security techniques for switches, routers, etc.
  </li>
  <li>
   Equipements : Cisco, Fortinet (Fortigate, FMG, FAZ, FAC, etc.), Palo Alto, F5, Gigamon, etc
  </li>
  <li>
   Network interconnection technologies: SD-WAN, VPN, VPLS, MPLS
  </li>
  <li>
   HA network and infrastructure concepts
  </li>
  <li>
   Knowledge of monitoring tools (Solarwinds, etc)
  </li>
  <li>
   Knowledge of ToIP ecosystems and telephony platforms: Asterisk, AVAYA, SBC, etc.
  </li>
  <li>
   Fluent in the language of your activity
  </li>
  <li>
   Fluency in English
  </li>
 </ul>
 <p>
 </p>
</div>


Network & security Engineer - Egypte/Cairo

Orange Business

<div><div><h2 class="jobSectionHeader"><b>Votre r&ocirc;le
</b></h2><p></p><p>Responsible for the development of network planning, design, implementation services<br>
 maximize the quality of the delivered services and customer satisfaction by validating the provided detailed technical design of complex VPNs in terms of feasibility, ensuring on-time and error-free implementation and proactive network auditing.<br>
 Pre/Post sales consultant to Orange Enterprise clients.<br>
 Validat Low Level and High-Level design of MLAN and Wide Area networks utilizing industry best practices<br>
 Translate business outcomes to technical solutions<br>
 Provide technical guidance and support to delivery teams throughout all phases of a project including Project Launch Workshops, Kickoff calls, lessons learned, etc. as needed<br>
 Review client deliverables to identify opportunities to improve quality through training, mentoring, product offering improvement, and talent acquisition<br>
 Monitor network performance and troubleshoot problem areas as needed<br>
 Conduct research on network products, services, protocols, and standards to remain abreast of developments in the networking industry<br>
 Access the technical effort required to deliver solutions<br>
 Serve as an escalation point for troubleshooting of customer networks</p><br>
</div><div></div><div><h2 class="jobSectionHeader"><b>Votre profil
</b></h2><p></p><p>Must have at least 6 years of experience designing, deploying, and implementing WAN networks in accordance with industry best practices<br>
 Extensive large scale WAN experience required.<br>
 Experienced with logical design models (L2/L3, VPC, VDC, Datacenter Zones, Spanning tree, VFR, VTP, VLANs, physical cabling).<br>
 Working technical knowledge of network control protocols (QOS, PfR, PoE, NTP, DHCP), network management protocols (CDP, FTP, TFTP, SNMP) and security protocols (SSH, HTTPS, AAA, IPSec, TustSec).<br>
 Strong knowledge IP communication and routing is required (OSPF, EIGRP, BGP). Experience with inter-company routing is preferred.<br>
 Understand WAN/LAN and transport technologies (Ethernet, Frame Relay, DMVPN, IPSec and MPLS).<br>
 SD-WAN (Viptela, Fortinet, Palo Alto) design, implementation and migration experience preferred<br>
 Configuration management of networking devices using automation tools (Cisco DNA-Center, APIC-EM, Cisco Prime, ISE) and API scripting with Python<br>
 Colocation facility integration, specifically around Equinix services (Cloud Exchange, Performance hub, etc.)<br>
 Cloud networking, including AWS and Azure (Direct Connect, express route, etc.)<br>
 Very good understanding of security concepts &amp; solutions<br>
 Very good understanding of wireless solutions (Cisco , Fortinet)<br>
 Certifications in CCNP, CCIE R&amp;S. NSE (Fortinet)<br>
 Cisco partner post sales consulting experience strongly preferred.<br>
 Strong interpersonal, written, and oral communication skills with the ability to work well in a collaborative environment.<br>
 Able to conduct research into networking issues and products as required.<br>
 Highly self-motivated and directed, with keen attention to detail.<br>
 Able to effectively prioritize tasks in a high-pressure environment.<br>
 Strong customer service orientation with proven analytical and problem-solving abilities.<br>
 Related degree in computer science or electrical engineering and/or seven to ten years equivalent network engineering experience.</p><br>
</div><div></div><div><h2 class="jobSectionHeader"><b>Le plus de l'offre
</b></h2><p></p><ul><li>Global opportunities: Work in multi-national teams with the opportunity to collaborate with colleagues and customers from all over the world</li><li>
Flexible work environment: Flexible working hours and possibility to combine work from office and home (hybrid ways of working)</li><li>
Professional development: training programs and upskilling/re-skilling opportunities</li><li>
Career growth: Internal growth and mobility opportunities within Orange</li><li>
Caring and daring culture: health and well-being programs and benefits, diversity &amp; inclusion initiatives, CSR and employee connect events</li><li>
Reward programs: Employee Referral Program, Change Maker Awards</li></ul><br>
<p></p>
</div><div></div><div><h2 class="jobSectionHeader"><b>Entit&eacute;
</b></h2><p>Global Delivery &amp; Operations<br>
</p><div><div>Orange Business manages and integrates the complexity of international communications, freeing our customers to focus on the strategic initiatives that drive their business. Our extensive experience and knowledge in global communication solutions, together with our understanding of multinational business and local support in 166 countries and territories, ensure that our customers receive a consistent, global solution wherever they do business</div></div>
</div><div><h2 class="jobSectionHeader"><b>Contrat
</b></h2><div>CDI</div></div></div>

TM Network & Security engineer

<div><h3 class="jobSectionHeader"><b>Company Description</b></h3><p>
Innovative Solutions (IS) is a leading pure-player Cybersecurity company in the GCC, established in 2003 and headquartered in Riyadh, with a presence in Al Khobar, Jeddah, Dubai, and Abu Dhabi. Our Cybersecurity Solutions and Services encompass Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.</p><p>
Innovative Solutions is committed to its mission to 'Bring Trust to Cyberspace' to ensure '<b>Your Business, Secured</b>'.</p><h3 class="jobSectionHeader"><b>
Role Description</b></h3><p>
The Senior Network Security Engineer/Data Engineer will play a critical role in securing our network infrastructure and ensuring the integrity of data through the implementation of robust security protocols. This dual role combines the responsibilities of managing network security and developing data strategies to protect sensitive information across our systems.</p><h3 class="jobSectionHeader"><b>
Responsibilities</b></h3><ul>
<li>Implementation, configuration and managing of PaloAlto DLP</li>
<li>Implementation, configuration and managing of CrowdStrike EDR</li>
<li>Deploy and configure DLP policies (email, web, cloud)</li>
<li>Monitor and respond to incidents</li>
<li>Manage EDR agents, alerts, and policies</li>
<li>Conduct forensic investigations &amp; threat hunting</li>
<li>Recommend insider threat management</li>
<li>Train staff on secure data handling</li>
</ul><p><b>Requirements</b></p><ul>
<li>Bachelor's degree in Computer Science, Information Technology, or a related field.</li>
<li>5+ years of experience in network security engineering, endpoint and data engineering roles.</li>
<li>Hands-on experience with DLP and EDR technologies.</li>
<li>Preferred experience with CrowdStrike EDR and Palo Alto DLP.</li>
<li>Relevant certifications (e.g., Security+, CCFA, CCNP, CISSP) are preferred.</li>
<li>Strong analytical and problem-solving skills paired with excellent communication abilities.</li>
<li>Ability to work effectively both independently and as part of a collaborative team.</li>
<li>Proficiency in both Arabic and English is a plus.</li></ul></div>

Senior Network Security Engineer/ Data Engineer

INFRA ASSURE

<p>The Network and Security Engineer is responsible for designing, implementing, and maintaining secure network infrastructure to protect organizational systems and data from cyber threats. This role involves configuring and managing network security devices, monitoring for vulnerabilities, and ensuring compliance with security policies. The engineer collaborates with IT teams to optimize network performance while safeguarding sensitive information.</p><p><b>**Key Responsibilities**: </b></p><p><b>- **Network Security Management**:</b> Design, implement, and maintain security protocols, including firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, and antivirus solutions.</p><p><b>- **Vulnerability Assessments**:</b> Conduct regular network scans and penetration testing to identify and mitigate security gaps.</p><p><b>- **Incident Response**:</b> Monitor systems for breaches, respond to security incidents, and develop disaster recovery plans.</p><p><b>- **Network Maintenance**:</b> Configure and maintain LAN, WLAN, VLANs, and cloud-based network architectures to ensure performance and security.</p><p><b>- **Policy Development**:</b> Create and enforce network security policies, ensuring compliance with standards like NIST, ISO 27001, or GDPR.</p><p><b>- **Collaboration**:</b> Work with IT, security, and cloud teams to integrate new technologies and enhance network security.</p><p><b>- **Documentation and Training**:</b> Document security protocols and educate staff on best practices for cybersecurity.</p><p>- <b>**Software and Hardware Updates**:</b> Apply security patches and upgrade network equipment to address vulnerabilities.</p><p><b>**Required Qualifications**: </b></p><p>- <b>**Education**:</b> Bachelor&rsquo;s degree in computer science, Information Technology,</p><p>- <b>**Experience**:</b> 3-5 years of experience in network security, system administration. UAE Driving License is must.</p><p><b>- **Technical Skills**: </b></p><p>- Proficiency in network protocols (TCP/IP, BGP, VLANs), routing, switching, and firewall configurations (e.g., Fortinet, Palo Alto, CheckPoint).</p><p>- Expertise with security tools like SIEM, IDS/IPS, and vulnerability scanners.</p><p>- Knowledge of cloud security (e.g., AWS GuardDuty, Elastic Load Balancing) and automation tools.</p><p>- Familiarity with programming/scripting languages (e.g., Python, Java, Bash) for automation and secure coding.</p><p><b>- **Soft Skills**:</b> Strong problem-solving, analytical, and communication skills to convey complex security concepts to non-technical stakeholders.</p><p><b>**Salary Range**: </b></p><p>AED 7K to 9K</p><p><b>**Work Environment**: </b></p><p>This role may involve remote, hybrid, or on-site work, Engineers often work in high-pressure settings to address urgent security issues.</p><p>Location: UAE Dubai</p><p>Job Type: Full-time</p>

Network and Security Engineer

University of Massachusetts Boston

<p></p><div><div><b>Job no:</b> 528181<br>
<b>Position Type:</b> Staff Full Time<br>
<b>Campus:</b> UMass Boston<br>
<b>Department:</b> IT Comm &amp; Infrastructure Serv<br>
<b>Pay Grade:</b> 35<br>
<b>Date opened:</b> 27 Aug 2025 Eastern Daylight Time<br>
<b>Applications close:</b> 11 Sep 2025 Eastern Daylight Time
</div>
<div><div><b>General Summary:</b></div>
<div>
Reporting to the Director of Network Services, the Network Security Operations Engineer (NSOE) is a vital hybrid role that combines advanced technical skills with operational management to safeguard the university&rsquo;s on-premises and cloud (Azure) network infrastructure, fulfilling comprehensive network security visibility requirements at the campus Network and Security Operations Center (NSOC). As a key liaison between Network Services, Cloud Operations, and the Information Security Office (ISO), the NSOE oversees hybrid (on-prem/Azure) network security operations, improves workflows, and manages the entire lifecycle of security incidents, service requests, and NSOC tasks&mdash;ensuring alignment with zero-trust principles and cybersecurity best practices. The NSOE proactively monitors, investigates, and responds to threats using Azure-native and integrated security tools, including SIEM (Sentinel), CASB, SolarWinds Observability Platform, Azure Firewall, Network Security Groups for micro-segmentation, VPN gateways, GlobalProtect, Infoblox, and Aruba NetEdit. The role also involves optimizing configurations for firewalls, edge switches, DMZs, and secure network segmentation. Responsibilities include conducting root cause analyses, vulnerability assessments, and risk mitigation, as well as coordinating with the ISO team to contain breaches and improve detection through AI/ML/DL network behavioral analytics. Additionally, the NSOE will assist in network design, performance testing, capacity planning, and policy development to ensure compliance with industry standards. Beyond technical tasks, the NSOE plays a managerial role by aligning network security with the NSOC, refining incident response protocols, and fostering collaboration between network and security teams. This position bridges the cloud and on-premises security gaps, maintaining a unified defense posture across the university&rsquo;s expanding hybrid ecosystem. It ensures that the organization maintains a single source of truth for network infrastructure, enabling efficient troubleshooting, risk assessment, and strategic planning. The role may require after-hours support for emergencies, network upgrades, and critical security events. The ideal candidate will have strong expertise in SOC/NOC environments, network security administration, and multi-vendor device management, as well as the ability to drive continuous improvement in both security posture and operational efficiency.</div><br>
<div></div>
<div><b>
Examples of Duties:</b></div><div><br>
<ul><li>Serve as the primary network security incident coordinator at the Network and Security Operations Center (NSOC), overseeing security, event monitoring, investigation, and response in alignment with enterprise incident response protocols.</li><li>Design and refine detection rules, alerts, and signatures based on threat intelligence, behavioral analytics (AI/ML), and attack trends.</li><li>Conduct proactive threat hunting using SIEM analytics, endpoint telemetry (EDR/XDR), and network forensics (e.g., PCAP analysis) to identify advanced threats and stealthy attack patterns.</li><li>Monitor and secure cloud/hybrid environments (e.g., Azure NSGs, SaaS applications) to ensure consistent visibility and policy enforcement across on-premises and cloud assets.</li><li>Implement and enforce Zero Trust Network Access (ZTNA) policies, including micro-segmentation, identity-aware proxies, and device posture checks (e.g., via Aruba ClearPass).</li><li>Perform malware traffic analysis using sandboxing tools (e.g., Cuckoo, VirusTotal) and correlate findings with network IDS/IPS alerts.</li><li>Act as a liaison between Network Services, ISO, and Desktop Support to ensure security compliance across IT environments.</li><li>Develop and report KPIs to measure security control effectiveness.</li><li>Proactively monitor, analyze, and respond to threats using various tools, including SIEM (Microsoft Sentinel), SolarWinds, Infoblox, Aruba NetEdit, and other security tools, to ensure the rapid containment of breaches and vulnerabilities.</li><li>Create, update, and maintain detailed internal network topology diagrams to ensure precise documentation and accurate planning.</li><li>Proactively secure and maintain all network infrastructure devices (routers, switches, firewalls, wireless controllers) through systematic hardening of configurations, timely patching of vulnerabilities, and continuous monitoring of access controls.</li><li>Conduct regular vulnerability assessments of network infrastructure using automated scanning tools and manual verification techniques to identify and remediate security gaps in compliance with the CIS framework control 12.</li><li>Develop, maintain, and version-control comprehensive network architecture diagrams (including logical/physical topologies, data flows, and security zones) using industry-standard tools (e.g., Visio).</li><li>Collaborate with network engineering and security teams to validate diagrams against real-time configurations, ensuring alignment with actual deployments and minimizing discrepancies.</li><li>Document and audit network configurations, capturing IP/MAC addresses, VLAN assignments, and ARP tables.</li><li>Align documentation with NIST SP 800-53 (CM-2, CM-6) and CIS Controls for audit readiness and risk management.</li><li>Support disaster recovery and business continuity planning by ensuring network documentation reflects failover paths, redundant systems, and critical dependencies.</li><li>Integrate diagrams with Sentinel to support real-time impact analysis during incidents and facilitate cross- team validation sessions with Security, Networks, and Operations teams to ensure accuracy and compliance.</li><li>Operate and optimize SIEM (e.g., Microsoft Sentinel) to centralize security event alerting (CIS Safeguard 13.1), correlating logs from network devices, endpoints, and cloud services. Tune alert thresholds (CIS Safeguard 13.11) to reduce false positives and prioritize critical threats.</li><li>Deploy and manage network/host-based IDS/IPS solutions (CIS Safeguards 13.2, 13.3, 13.7, 13.8), including NIDS, EDR, and CSP-native tools (e.g., Azure Network Watcher), to detect and block malicious activity across enterprise assets.</li><li>Enforce traffic filtering between network segments (CIS Safeguard 13.4) and port-level access controls (802.1X/Certificates) (CIS Safeguard 13.9). Implement application-layer filtering (CIS Safeguard 13.10) via proxies/firewalls to mitigate lateral threats.</li><li>Govern remote access security (CIS Safeguard 13.5) through Zero Trust policies (e.g., conditional access, endpoint compliance). Collect and analyze network flow logs (CIS Safeguard 13.6) to identify anomalies and support forensic investigations.</li><li>Develop and execute an audit framework to inventory all network assets, including switches, routers, wireless controllers, and security appliances, while capturing:</li></ul>
o IP/MAC address bindings with device ownership details<br>
o VLAN assignments and segmentation schemas<br>
o ARP tables and Layer 2/Layer 3 topology mappings<br>
o Firewall rulesets and access control lists (ACLs)<br>
o Device configurations (running/startup configs)<br>
<ul><li>Implement automated discovery tools (such as Aruba NetEdit, SolarWinds, or custom scripts) to:</li></ul>
o Continuously monitor network state<br>
o Detect configuration drift<br>
o Identify shadow IT devices<br>
o Validate compliance with security baselines<br>
<ul><li>Produce yearly gap analysis reports to highlight risks in current network architecture, identify opportunities for optimization during the Aruba transition and document technical debt requiring remediation within the yearly Plan of Action and Milestones (POAM) in a Network Security Improvement Project.</li><li>Produce comprehensive yearly gap analysis reports to assess risks within the current network architecture, identify optimization opportunities, and document technical debt requiring remediation as part of the annual POAM within the Network Security Improvement Project. These reports will serve as a critical tool for guiding strategic decisions, ensuring network security enhancements, and driving continuous improvement across the infrastructure.</li><li>Collaborate cross-functionally with various teams to ensure alignment and successful execution of key initiatives, including working with the Information Security Office to support Zero Trust initiatives, partnering with Network Engineering teams to validate migration plans, and coordinating with the Service Desk to update knowledge base articles.</li><li>Drive efforts to minimize mean time to repair (MTTR), strengthen the organization&rsquo;s security posture, and maintain seamless business continuity during the network modernization initiative led by the Director of Network Services; success will be measured by the timely delivery of thorough configuration documentation, the discovery and remediation of unidentified network assets, and a smooth migration to the new Aruba environment&mdash;ensuring enhanced operational efficiency and network reliability.</li><li>Manage and troubleshoot network devices using SecureCRT for secure CLI access, real-time monitoring, and diagnostics&mdash;resolving misconfigurations, performance issues, and connectivity problems to minimize downtime.</li><li>Automate and standardize network operations by developing SecureCRT scripts (VBScript/Python/Expect) and configuration templates, ensuring consistency, security compliance, and efficiency in upgrades, migrations, and capacity planning.</li><li>Lead and coordinate incident response efforts, collaborating with cross-functional teams (Network Services, ISO, IT, IT Partners, and other stakeholders) to mitigate security incidents efficiently.</li><li>Conduct post-incident reviews to identify gaps, refine security controls, and minimize future risks.</li><li>Assist in network design, capacity planning, and performance testing, ensuring alignment with security best practices and industry standards.</li><li>Partner with Network Services and ISO to develop and deliver clear, timely communications regarding network security initiatives, outages, and critical updates to stakeholders.</li><li>Translate complex network security concepts into accessible messaging for non-technical audiences, ensuring campus-wide awareness of cybersecurity risks and best practices.</li><li>Assist in the creation of network status dashboards, outage notifications, and service bulletins to keep the community informed of operational changes.</li><li>Assist with risk assessments, security audits, and penetration testing to identify and mitigate weaknesses.</li><li>Stay informed about emerging cyber threats, attacker tactics, and industry trends to refine defensive strategies.</li><li>Perform after-hours support for critical security incidents, network upgrades, and emergency response.</li><li>Participate in the training and supervision of student employees, supporting their professional development.</li><li>Deliver high-quality customer service, including awareness training and coaching.</li><li>Perform other duties as assigned.</li></ul></div>
<div><b>
Qualifications: Required Qualifications (non-negotiable)</b><br>
<ul><li>Master&rsquo;s degree in Cybersecurity, Information Technology, or a related field and coursework.</li><li>Minimum five (5) years of hands-on cumulative experience in a Network and Security Operations Center (NSOC) environment, with higher education experience preferred.</li><li>CISSP (Certified Information Systems Security Professional) certification or eligibility to be earned within 6 months of hire.</li><li>Experience with security frameworks (NIST, CIS, ISO 27001) and compliance standards.</li><li>Proven ability to diagnose and resolve complex network security issues in enterprise environments.</li><li>Strong technical skills across Microsoft Windows and Macintosh Operating System platforms, common applications (Excel), and utilities required.</li><li>Demonstrated proficiency with enterprise security and network tools, including but not limited to:</li></ul>
o SIEM, IDS/IPS, EDR/XDR, firewall platforms, behavioral analytics, and<br>
o SolarWinds for network monitoring.<br>
o Network access control (NAC) implementations (Aruba ClearPass).<br>
o Network forensic tools (i.e., Wireshark).<br>
o Vulnerability management platforms (Nessus, TenableOne, Rapid7).<br>
o Cloud security tools (Azure Security Center)<br>
o NetEdit for Aruba switch and config management.<br>
o SecureCRT and Putty for SSH and console to equipment.<br>
o CoPilot AI for packet trace analysis for threat hunting.<br>
o Wireshark for packet analysis.<br>
o Airwave wireless monitoring.<br>
o Aruba Wireless controllers and conductors.<br>
o Integrated ClearPass for 802.1x and RADIUS.<br>
o Access Points dedicated to RF and IDS analysis.<br>
o XMC (eXtreme Management Center) for eXtreme switch and config management.<br>
o UXI (User Experience Sensor) monitoring.<br>
o Visio and Draw.io.<br>
o Excel Spreadsheets.<br>
<ul><li>Hands-on experience configuring, monitoring, and troubleshooting security and network technologies in production environments</li><li>Working knowledge of industry-standard network and security platforms and their implementation best practices.</li></ul></div><br>
<div></div>
<div><b>
Application Instructions:</b></div>
<div>
Please apply online with your resume, cover letter and list of three professional references.</div>
<div>
Review of candidates will begin following the application closing date.</div>
<div><b><i>
Only Internal candidates in the Professional Staff Bargaining Unit will be considered during the first 10 business days of the posting. All other candidates will be considered after that period.</i></b></div></div></div><p></p>

Network Security Ops Engineer

Search 10000+ Network security engineer jobs near you this September. New roles added regularly across leading industries. Apply today.

10000 network security engineer jobs NEAR_ME

Senior Network Security Engineer

Senior Network Security Engineer

Network & security Engineer - Egypte/Cairo

TM Network & Security engineer

Senior Network Security Engineer/ Data Engineer

Network and Security Engineer

Network Security Ops Engineer