Network Security Engineer

Role Overview

We are looking for an experienced Network Security Engineer to design, implement, maintain, and secure enterprise network infrastructure. The role requires a strong understanding of network security principles, hands-on experience with security technologies, and the ability to troubleshoot complex network and security issues.

The ideal candidate will work closely with network, infrastructure, cloud, application, and security teams to ensure secure, resilient, and highly available network environments. The candidate should be comfortable handling security incidents, performing root-cause analysis, implementing security controls, and contributing to continuous improvement of the organization's network security posture.

Key Responsibilities

• Design, implement, configure, and maintain enterprise network security infrastructure.
• Manage and support network security technologies including firewalls, VPNs, IDS/IPS, secure gateways, and network access controls.
• Configure and maintain security policies, access rules, NAT, VPN tunnels, and related network security controls.
• Monitor network traffic and security events to identify potential threats, anomalies, and unauthorized access.
• Troubleshoot complex network connectivity and security-related issues and perform root-cause analysis.
• Investigate and respond to network security incidents in coordination with security and infrastructure teams.
• Review firewall and network security rules regularly and ensure they follow established security standards and business requirements.
• Support secure connectivity across data centers, corporate networks, remote locations, cloud environments, and third-party networks.
• Participate in network security assessments, vulnerability remediation, and security hardening activities.
• Implement and maintain network segmentation and access-control mechanisms.
• Work with internal teams to assess security requirements for new applications, infrastructure, and network changes.
• Participate in change management, implementation, and post-change validation activities.
• Maintain network security documentation, architecture diagrams, configurations, and operational procedures.
• Contribute to security improvement initiatives, automation, standardization, and operational efficiency.
• Work with vendors and technology partners for issue resolution, upgrades, and technical escalations.
• Ensure network security operations align with organizational policies, industry standards, and compliance requirements.

Required Skills

• Strong experience in network security engineering and enterprise networking.
• Good understanding of TCP/IP, DNS, DHCP, HTTP/HTTPS, routing, switching, VLANs, and network protocols.
• Hands-on experience with enterprise firewalls and security gateways.
• Strong understanding of VPN technologies, IPsec, SSL/TLS, NAT, and access-control policies.
• Experience with IDS/IPS, network monitoring, traffic analysis, and security event investigation.
• Experience troubleshooting network and security issues across complex environments.
• Good understanding of network security architecture, segmentation, and secure connectivity.
• Experience with incident management, change management, and root-cause analysis.
• Familiarity with security best practices, vulnerability management, and network hardening.
• Strong analytical, troubleshooting, and problem-solving skills.
• Good written and verbal communication skills with the ability to work effectively with technical and non-technical stakeholders.

Preferred Skills

• Experience with security technologies from vendors such as Palo Alto, Fortinet, Cisco, Check Point, or similar.
• Exposure to cloud networking and cloud security across AWS, Azure, or GCP.
• Knowledge of Zero Trust, SASE, SD-WAN, or network access control concepts.
• Experience with security monitoring/SIEM platforms.
• Exposure to scripting or automation using Python, PowerShell, or similar technologies.
• Relevant certifications such as CCNA/CCNP Security, PCNSE, Fortinet certifications, or equivalent are an advantage.

Key Competencies

• Network Security Engineering
• Enterprise Network Troubleshooting
• Firewall & VPN Management
• Security Incident Handling
• Network Monitoring & Analysis
• Security Hardening
• Root-Cause Analysis
• Risk & Vulnerability Awareness
• Change & Configuration Management
• Stakeholder Communication
• Problem Solving
• Documentation & Process Discipline

The Security Analyst assists the Data Security team to help ensure the security of the company and its clients. Looking for immediate joiners.

 KEY RESPONSIBILITIES

 All employees are expected to use good business judgment and appropriate discretion and decision making while performing responsibilities of the position, and to incorporate EVA’s Core Beliefs in their daily work.

• Performs daily health checks as documented by the IT Security team.
• Supports the Security team by documenting and performing support tasks.
• Participates in change management, incident management, audit and business continuity processes.
• Plans and implements security policies and procedures to protect computer systems, networks and data from unauthorized access.
• Participates in internal and external compliance (SOC 2) audits.
• Recommends security enhancements.

Job specifics:

• Familiarity with standard security concepts, practices and procedures.
• Knowledge of Windows operating systems.
• Strong Documentation, communication skills and attention to detail.
• Able to work independently and as a part of a team to deliver completed projects on-time.
• Identifies ways to continuously improve own and/or company performance.
• Knowledge of security toolsets
• Knowledge of compliance activities (GDPR, SOC 2, ISO:27001).
• Knowledge of database security.
• Knowledge of SIEM technology and security event correlation and monitoring.
• Experience with AWS.             
• Proficient with computer software including Salesforce 

 EDUCATION & EXPERIENCE  

• Bachelor’s Degree in computer science, mathematics, Information Systems or equivalent experience preferred.
• Minimum of 3 years of hands-on IT Security & Audit experience.
• Professional IT Security Certifications are strongly preferred, such as Security+, CISSP, CISM, CISA, GSEC, etc.

About the role

You will create and validate the detection content that protects our customers: IDPS signatures, application control rules, and DLP rules. This is a hands-on role in our security lab, where you will generate real attack traffic, research vulnerabilities and applications, and make sure every rule is accurate, effective, and ready for production.

What you'll do

Write security rules

• Write IDPS signatures for exploits, malware, command-and-control traffic, and network attacks, with the right severity, action (alert / block / reject), and protocol scope
• Build application control rules to identify and control social media, streaming, file sharing, remote access, unsanctioned SaaS, and AI tools
• Create DLP rules to detect sensitive data (personal and financial data, confidential documents, source code) across web, email, and file transfer channels

Test and validate

• Set up test scenarios in our lab and generate traffic using browsers, command-line tools, packet captures, and safe proof-of-concept exploits
• Confirm that each rule triggers and that logs show the correct rule, severity, action, and source
• Test against normal everyday traffic to find and fix false positives before rules ship
• Build and maintain a repeatable test set so rules keep working after product updates

Research and document

• Track new CVEs, exploit techniques, and emerging applications, and turn them into working detections
• Study public r
• Study public rulesets to learn coverage patterns and find gaps in our own
• Write a short validation note for each batch: what it detects, how it was tested, and what it doesn't cover

What we're looking for

• 2-5 years of hands-on experience writing detection rules or signatures with Snort, Suricata, Zeek, YARA, Sigma, or similar
• Strong networking fundamentals: TCP/IP, HTTP/HTTPS, DNS, TLS, and packet analysis with Wireshark or pcap tools
• Experience testing rules with PoC exploits and tuning them to reduce false positives
• Exposure to CVE and vulnerability research, with the ability to read advisories and turn them into detections
• Working knowledge of Python or Bash for test automation, and comfort with Linux
• Clear written communication, since you'll document what each rule covers and what it doesn't

Good to have

• Experience with deep packet inspection, application identification (nDPI or similar), or DLP regex and pattern work
• Background at a network security vendor (firewall, IPS, NGFW, secure web gateway)
• Public work such as GitHub rules, blog posts, CVE credits, or CTF participation

This role is not

A SOC monitoring, alert triage, or pure penetration testing role. We are looking for people who write and test detection rules.

Roles & Responsibilities:-

1. Provide technical support to customers via phone, email, and ticketing system regarding Palo Alto Networks security products
2. Troubleshoot and resolve customer issues related to firewall policies, network connectivity, VPN configurations, threat prevention, and security features
3. Collaborate with customers, cross-functional teams, and vendors to diagnose and resolve complex technical issues
4. Perform system configurations and assist customers with initial product installations, upgrades, and migrations
5. Monitor and analyze system logs and events to identify and respond to security threats and performance issues
6. Document customer interactions, troubleshooting steps, and solutions in a knowledge base
7. Stay up-to-date with latest trends and advancements in network security technologies and industry best practices

Ideal Candidate:-

1. Strong Firewall / Network Security Support Profile with Palo Alto exposure
2. Mandatory (Experience 1): Must have around 2 years of experience in network security, with hands-on firewall support (Palo Alto preferred), and knowledge of network security concepts and protocols (TCP/IP, VPN, SSL/TLS, IDS/IPS, next-generation firewalls).
3. Mandatory (Experience 2): Must be able to perform system configurations and assist with installations, upgrades, and migrations, and monitor/analyse system logs and events to respond to security threats and performance issues.
4. Mandatory (Tech skill): Must be able to troubleshoot firewall policies, network connectivity, VPN configurations, and threat-prevention issues, with a basic understanding of network infrastructure (routers, switches, load balancers).
5. Mandatory (Skill): Must have strong analytical and problem-solving skills, provide support via phone/email/ticketing, document interactions and solutions in a knowledge base, and collaborate with customers, cross-functional teams, and vendors.
6. Mandatory (Domain): Banking-industry experience preferred; strong candidates with the same technical experience from another industry are acceptable.
7. Mandatory (Note): Must be comfortable with a 24/7 rotational shift environment and on-call support at the client site (IDFC Bank, Airoli, Navi Mumbai)
8. Mandatory (Communication): Must have excellent verbal and written communication, able to explain technical concepts clearly.
9. Preferred (Product / Education): Familiarity with Palo Alto Networks products (PAN-OS, GlobalProtect, WildFire); Bachelor's degree in Computer Science, IT, or a related field.

🚨 We're Hiring: Network Engineer 🚨

ZigZag AI is looking for a Network Engineer with 1+ year of hands-on experience to join our team!

What we're looking for:

🔹 Solid working knowledge of Firewalls & Firewall Rules

🔹 Experience with NVR/DVR systems

🔹 Strong understanding of Port Forwarding & NAT

🔹 Good communication skills — both Hindi and English are a must

Compensation: ₹4 LPA

About ZigZag AI:

Zigzag AI is building the future of operational intelligence. Our AI connects to existing cameras and helps businesses understand what is happening on the ground, spot issues early, and take action faster. From shops and bungalows to hotels, factories, and hospitals, Zigzag helps teams run smoother, safer, and smarter operations every day.

This is not just monitoring. This is AI that drives execution.

Trusted by leading clients such as Tata, Birla, Treebo, JP Minda, Philips, and many more.

If you're someone who enjoys solving real-world networking problems and wants to grow with a fast-paced, mission-driven team, we'd love to hear from you!

#Hiring #NetworkEngineer #ITJobs #FirewallEngineer #CCTV #NVR #DVR #JobOpening #ZigZagAI #OperationalIntelligence

Job Summary

We are looking for an experienced Network Engineer with strong hands-on expertise in enterprise networking, cloud networking, network security, routing, switching, and troubleshooting. The candidate will be responsible for designing, implementing, maintaining, and optimizing secure and highly available network infrastructure across on-premises and cloud environments.

Key Responsibilities

• Design, configure, and manage enterprise network infrastructure, including routers, switches, firewalls and load balancers.
• Configure and troubleshoot routing protocols such as BGP, OSPF and static routing.
• Manage LAN, WAN, VLANs, VPNs, subnets, NAT, DNS and DHCP.
• Implement and support cloud networking across AWS and Azure, including VPC, VNet, route tables, Network Security Groups (NSGs), security groups and private endpoints.
• Configure site-to-site VPNs, remote-access VPNs, AWS Direct Connect and Azure ExpressRoute.
• Troubleshoot network connectivity, latency, packet loss, MTU issues and routing problems.
• Monitor network performance, availability and capacity using network monitoring tools.
• Implement network security policies, firewall rules, access controls and segmentation.
• Support hybrid cloud connectivity and on-premises-to-cloud network migration.
• Collaborate with infrastructure, cloud, security and application teams to resolve network incidents.
• Perform root cause analysis (RCA), document network configurations and maintain operational runbooks.
• Support change management, disaster recovery and high-availability requirements

Job Summary:

We are looking for an experienced Network Engineer with , Check Point firewalls, network security, and routing protocols. The ideal candidate should have experience in network troubleshooting, firewall configuration, security policy management, and maintaining reliable network infrastructure.

Key Responsibilities:

• Work on Check Point firewall administration, security policies, and rule management.
• Configure and maintain firewall policies, NAT, VPNs, and access control rules.
• Troubleshoot network connectivity issues and firewall-related incidents.
• Implement and support routing protocols such as BGP, OSPF, and static routing.
• Monitor network performance, investigate network issues, and ensure network availability.
• Perform firewall upgrades, configuration backups, and security policy reviews.
• Work on network security, incident resolution, and root cause analysis.
• Coordinate with network, security, and infrastructure teams to resolve technical issues.

Mandatory Skills:

• Network Engineering and troubleshooting
• Check Point Firewall
• Routing Protocols (BGP, OSPF, Static Routing)
• Firewall configuration and security policy management

Secondary Skills:

• Python scripting and network automation
• VPN, NAT, and network security
• Firewall monitoring and troubleshooting
• Incident management and root cause analysis

Cybersecurity Engineer – AI Training Project

About the Opportunity

We’re looking for experienced Cybersecurity Engineers to contribute technical expertise to a customer project focused on improving the capabilities of next-generation AI systems.

In this role, you’ll use your real-world experience in cybersecurity, software engineering, vulnerability assessment, and secure development to create high-quality technical inputs that help AI systems better understand, debug, secure, and reason about complex software.

What You’ll Do

• Analyze, debug, and resolve software bugs, vulnerabilities, and security issues across complex codebases.
• Review source code and identify potential security weaknesses, vulnerabilities, and attack vectors.
• Perform security assessments, vulnerability assessments, penetration testing, and codebase audits.
• Develop and modify software using languages such as Python, Java, Rust, Go, C++, or TypeScript.
• Implement new features and fix existing functionality while maintaining strong security and engineering standards.
• Refactor legacy code to improve security, maintainability, reliability, and performance.
• Work on backend systems and help optimize applications for scalability, performance, and security.
• Analyze real-world security scenarios and translate your expertise into high-quality technical examples and problem-solving tasks.
• Document technical findings, vulnerabilities, debugging approaches, and recommended solutions.
• Provide domain expertise that helps improve how AI systems reason about software engineering and cybersecurity problems.

What We’re Looking For

• Strong professional experience in Cybersecurity / Application Security / Product Security / DevSecOps / Penetration Testing / Vulnerability Management.
• Strong programming experience in one or more of:
• Python
• Java
• Rust
• Go
• C++
• TypeScript
• Proven experience with debugging, troubleshooting, and fixing complex software issues.
• Hands-on experience with penetration testing, vulnerability assessment, security auditing, or application security.
• Understanding of secure software development practices and modern security threats.
• Strong knowledge of data structures, algorithms, software architecture, and code quality.
• Ability to review unfamiliar codebases and quickly understand how systems work.
• Strong written communication and the ability to explain complex technical findings clearly.

Nice to Have

• Experience with OWASP, API security, cloud security, DevSecOps, or threat modeling.
• Experience performing security assessments on production applications or enterprise systems.
• Experience with tools such as Burp Suite, Metasploit, Nmap, Wireshark, SAST/DAST tools, or vulnerability scanners.
• Contributions to open-source security or software projects.
• Experience working with AI/ML systems, LLMs, data annotation, or AI training projects.
• Relevant security certifications such as OSCP, OSWE, CEH, CISSP, Security+, or equivalent practical experience.

Engagement

• Role: Cybersecurity Engineer
• Work: Remote(Contract)
• Experience: Mid-level to Senior
• Programming: Required
• Cybersecurity expertise: Required

Why Join?

This is an opportunity to apply your existing cybersecurity expertise to an emerging area of technology. Your practical experience debugging software, identifying vulnerabilities, securing applications, and solving complex engineering problems will directly contribute to improving the capabilities of next-generation AI systems.

If you enjoy breaking down complex technical problems, finding vulnerabilities, fixing software, and thinking deeply about how systems work, this project could be a strong fit.

Job Summary

We are looking for an experienced Network Engineer with strong expertise in network security, firewall administration, Check Point, Juniper SRX, routing protocols, and Python scripting. The candidate will be responsible for managing, configuring, troubleshooting, and optimizing enterprise network infrastructure while ensuring secure and reliable connectivity.

Key Responsibilities

• Configure, manage, and troubleshoot enterprise network devices, firewalls, and security appliances.
• Administer and maintain Check Point firewalls, including security policies, NAT rules, VPNs, and access control.
• Manage Juniper SRX firewalls, including security zones, policies, NAT, IPsec VPNs, and threat prevention.
• Implement and troubleshoot routing protocols such as BGP, OSPF, EIGRP, and static routing.
• Perform network troubleshooting related to connectivity, packet loss, latency, routing, and firewall traffic.
• Configure and maintain site-to-site VPNs and remote-access VPN solutions.
• Monitor network performance, analyze traffic logs, and investigate security incidents.
• Perform firewall rule reviews, configuration backups, software upgrades, and security patching.
• Develop Python scripts to automate network configuration, monitoring, reporting, and routine operational tasks.
• Work with network monitoring tools, packet analyzers, and logging platforms to identify and resolve network issues.
• Participate in incident management, root cause analysis (RCA), change management, and network maintenance activities.
• Maintain network documentation, configuration standards, and operational runbooks.

Responsibilities

• Execute and support application vulnerability assessments (SAST, DAST, SCA, and manual code review), ensuring findings are accurate, actionable, and relevant to application risk.
• Validate scanner results, perform false-positive analysis, and track findings through remediation, including retesting to confirm effective fixes.
• Manage multiple application security initiatives concurrently while meeting strict timelines in a fast‑paced environment.
• Prioritize vulnerabilities based on business impact, exploitability, exposure, and likelihood, using industry best practices (e.g., CVSS scoring).
• Develop and maintain dashboards and reports tracking vulnerability metrics such as severity distribution, remediation SLAs, and mean time to remediation (MTTR).
• Support the integration of security scanning and vulnerability workflows into CI/CD pipelines, leveraging existing tooling and automation.
• Facilitate remediation planning by providing actionable recommendations and coordinating root cause analysis.
• Support threat modeling and application risk assessments, with a focus on discovering insecure design patterns.
• Participate in high‑severity or zero‑day vulnerability response activities, including impact analysis and coordinated remediation efforts, as needed.
• Provide input into policies and standards related to application and cloud security controls.

Qualifications and Education Requirements

• Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related discipline—or equivalent professional experience.
• 5-7 years of relevant experience in application security and/or vulnerability management.
• Solid understanding of common vulnerability classes (e.g., OWASP Top 10) and secure architecture principles.
• Proficiency in using Burp Suite for manual security testing of web applications and APIs, including validation of automated findings and identification of complex authentication, authorization, and business‑logic vulnerabilities.
• Hands-on experience with tools such as Burp Suite, Fortify, Checkmarx, SonarQube, Black Duck, Tenable, and common network discovery tools (e.g., Nmap).
• Familiarity with NIST, MITRE ATT&CK, and CIS benchmarks.
• Programming/scripting proficiency in languages such as Python, Java, .NET, or similar.
• Excellent documentation, communication, and stakeholder engagement skills.

Desired Skills

• Professional certifications (e.g., Security+, SSCP, GWAPT, or pursuing CISSP, OSCP).
• Experience using the ServiceNow platform for vulnerability or incident tracking.
• Proficiency in Azure cloud and Azure DevOps environments.
• Experience using Power BI or similar tools to visualize vulnerability metrics and remediation trends for technical and non-technical stakeholders.