Security Engineer (AMK)

An experienced Security Engineer with 6 years of expertise in cybersecurity operations, network security, firewall administration, cloud security, and infrastructure protection. Responsible for safeguarding enterprise environments through proactive threat monitoring, incident response, vulnerability management, and security governance. The role also provides infrastructure and systems support during periods of lower security operational demand to ensure operational continuity and service availability. Key Responsibilities Primary Responsibilities: Cybersecurity (70-80%) Security Operations & Incident Response • Monitor, investigate, and respond to cybersecurity incidents and security alerts. • Conduct threat hunting, forensic analysis, and incident investigations. • Analyze security logs and events to identify malicious activities and security risks. • Support security assessments, remediation plans, and root cause analysis. Network & Firewall Security • Manage and administer Check Point Firewall environments, including policy creation, NAT configuration, IPS, VPN, application control, and threat prevention. • Monitor firewall performance and optimize security policies in line with security standards. • Support network segmentation and secure network architecture initiatives. Cloud Security • Implement and maintain security controls for cloud environments utilizing Check Point CloudGuard. • Monitor cloud security posture and ensure compliance with organizational security requirements. • Perform cloud risk assessments and vulnerability management. Data Center & Virtualization Security • Administer and secure Broadcom VMware NSX environments. • Implement micro-segmentation policies and network security controls within virtualized infrastructure. • Support network virtualization security architecture and troubleshooting activities. Security Governance & Compliance • Conduct vulnerability assessments and coordinate remediation activities. • Support internal and external security audits. • Develop and maintain security policies, standards, and procedures. • Ensure compliance with cybersecurity frameworks and regulatory requirements. Security Improvement & Automation • Recommend and implement security enhancements. • Participate in infrastructure and security projects. • Support security awareness initiatives and technical security consultations. Secondary Responsibilities: Infrastructure & Systems Support (20-30%) Network Infrastructure Support • Configure, maintain, and troubleshoot Cisco Switches and network infrastructure. • Support LAN/WAN connectivity, VLAN configurations, routing, switching, and network performance optimization. • Assist with network upgrades, migrations, and capacity planning. Systems Administration • Support Windows and Linux servers. • Perform patch management, system monitoring, and maintenance activities. • Support virtualization platforms and infrastructure services. Operational Support • Monitor system health and infrastructure availability. • Support backup, recovery, and disaster recovery activities. • Participate in scheduled maintenance and service improvement initiatives. Required Technical Skills Security Technologies • Check Point Firewall Administration • Check Point CloudGuard • Security Incident Response • Vulnerability Management • Security Monitoring and Threat Detection • Security Governance and Compliance • VPN Technologies • IPS/IDS Solutions • Identity and Access Management (IAM) Networking Technologies • Cisco Switching Technologies • TCP/IP, Routing, Switching • VLAN Configuration • Network Segmentation • LAN/WAN Infrastructure Virtualization & Cloud • Broadcom VMware NSX • VMware Infrastructure • Micro-Segmentation • Cloud Security Architecture • Hybrid Cloud Security Operating Systems • Windows Server Administration • Linux Server Administration Requirements • Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, or related discipline will be added advantage. • Minimum 6 years of experience in Cybersecurity, Network Security, or Security Engineering. • Hands-on experience with Check Point Firewall and CloudGuard solutions. • Experience managing enterprise Cisco switching environments. • Experience supporting Broadcom VMware NSX security and virtualization environments. Preferred Certifications • Check Point Certified Security Administrator (CCSA) • Check Point Certified Security Expert (CCSE) • Cisco CCNA / CCNP • VMware NSX Certification • CISSP • CISM • CompTIA Security+