Req198329

Key Responsibilities

Design automation workflows and capabilities in support of data collection, investigation and incident response.
Develop threat hunting and data analysis strategy and capabilities.
Identify and propose new technologies, methodologies and/or approaches to detecting malicious activity.
Utilize indicators to scope and respond proactively to emerging threats.
Design, build, configure, maintain and monitor cybersecurity threat defense capabilities and user access management.

Minimum Qualifications

Must be eighteen years of age or older.
Must be legally permitted to work in the United States.
Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, or a related field and 5 years of progressive, post baccalaureate experience in a related occupation. Requires 5 years of experience in the following skills:
Deploying, configuring, and managing modern stateful and next-gen firewalls, including configuring App-ID, User-ID, Content-ID (IPS/IDS, malware prevention, URL filtering), and building robust Security/NAT policies.
Deploying and managing Palo Alto Next-Gen firewalls - both hardware and virtual series such as PA-5400s and PA-7080s
Managing legacy environments such as “Juniper SRX 5400” and “Cisco ASA and Netscreens”
Translating legacy config/policy rule-sets into modern, application-aware rulesets during hardware refreshes or vendor migrations.
Managing large scale enterprise advanced routing frameworks such as SDWAN hub and spoke setups via Palo Alto firewalls.
Managing external routing, likely peering with ISPs or connecting large WAN infrastructures and cloud environments, involves understanding autonomous systems (AS), route filtering, prefix lists, and path manipulation.
Designing and troubleshooting complex Site-to-Site (IPsec) and Remote Access (SSL/TLS, GlobalProtect, AnyConnect) VPN tunnels across multiple data center platforms for availability.
Modern Palo Alto firewall management using Panorama 11.0 to push configuration templates, manage Device Groups, aggregate logs, and orchestrate firmware/software upgrades across hundreds of firewalls simultaneously.
PAN-OS features, web interface changes, and advanced routing engine capabilities.
Advanced log management such as configuring firewalls and routers to forward Syslog data to Splunk, writing SPL (Search Processing Language) queries to hunt for security threats, tracking allowed/denied traffic patterns, and building automated alerts for anomalous behavior.
Business Intelligence (BI) and reporting such as complex network and security data (potentially ingested from Splunk or direct APIs) and building high-level dashboards to track bandwidth utilization, threat metrics, or compliance reporting for leadership.
Deep packet inspection (DPI) skills and ability to capture .pcap files, filter through TCP/UDP headers, analyze three-way handshakes, spot asymmetric routing, and definitively prove where a connection is dropping or experiencing latency.

Cybersecurity Sr. Engineer

Recommended Jobs