Blog

Role name: Engineer
Role Description: · Provision firewalls and WAFs for
customer.· Develop and maintain rule sets for firewalls.· Help
determine tactics, techniques, and procedures (TTPs) for
firewalls.· Recommend computing environment vulnerability
corrections.· Conduct research, analysis, and correlation across
a wide variety of all source data sets (indications and warnings).·
Perform patch management for MSSP Security tools and
customers security tools.· Provides cybersecurity
recommendations to leadership based on significant threats and
vulnerabilities.· Ability to work with provided security policies to
design and implement network and security rules and
configurations across various security platforms.· Perform
Changes to Firewalls as specified by customers.· Ability to work
with provided security policies to design and implement network
and security rules and configurations across various security
platforms.
Competencies: Digital : Digital Security, CNS_Network
Security_Cisco
Experience (Years): 10 & Above
Essential Skills: This is an engineer role, and the candidate
must be able to demonstrate ability to install, manage and
maintain Firewalls in both on-premise and cloud environments.
Demonstrated experience in supporting Palo Alto and Fortinet
Firewalls as an engineer is REQUIRED. Holding one or more
Technical Security Certifications is REQUIRED. Holding one or
more vendor-neutral security certifications (e.g., Security +,
CISM, CISSP) is a plus for this position. This position supports a
customer out of AUSTIN, TX, and will support the customer’s
24×7 Security Operations Center (SOC). This position is in direct
support (on-site at customer facilities) of an AT&T customer in
the government sector. AT&T is providing Managed Security
Service Provider (MSSP) functions related to the Security
Operations Center (SOC) including Tier 1 through Tier 3
resource capabilities and activities related to security monitoring,
threat, and vulnerability management and incident response (IR).

Desirable Skills: · Ability to configure, deploy, and
troubleshoot Palo Alto and Fortigate Firewall Platforms. Ability to
configure, deploy, and troubleshoot Imperva and Fortigate Web
Application Firewall Platforms. Under limited supervision support
and engineering of the WAF and Firewall policies. Engineer and
Architect solutions using WAFs, firewalls or other security
products. Develops and maintains WAF and firewall security
design documentation. Work with internal delivery teams to
integrate applications with WAF policies. Provide accurate and
timely reporting on all project deliverables. Recommends secure
and effective solutions for system/application development in
compliance with Information. Ability to analyze firewall
configurations and rule sets. Working knowledge of Palo Alto
Panorama or FortiNet FortiManager. Working knowledge of SIEM
integration preferred. Working knowledge of Windows Active
Directory Domains. Working Knowledge of various Linux OS.
Strong Knowledge of information technology (IT) security
principles and methods (e.g., firewalls, demilitarized zones,
encryption). Ability to interpret the information collected by
network tools (e.g. Nslookup, Ping, and Traceroute). Knowledge
of computer networking concepts and protocols, and network
security methodologies. Knowledge of cybersecurity and privacy
principles. Knowledge of cyber threats and vulnerabilities.
Knowledge of encryption algorithms, cryptography, and
cryptographic key management concepts. Knowledge of
host/network access control mechanisms (e.g., access control
list, capabilities lists). Knowledge of vulnerability information
dissemination sources (e.g., alerts, advisories, errata, and
bulletins). Knowledge of incident response and handling
methodologies. Knowledge of network traffic analysis methods.
Knowledge of new and emerging information technology (IT) and
cybersecurity technologies.· Knowledge of how traffic flows
across the network (e.g., Transmission Control Protocol [TCP]and Internet Protocol [IP], Open System Interconnection Model
[OSI], Information Technology Infrastructure Library, current
version [ITIL]). Knowledge of key concepts in security
management (e.g., Release Management, Patch Management).
Knowledge of security system design tools, methods, and
techniques. Knowledge of what constitutes a network attack and
its relationship to both threats and vulnerabilities. Knowledge of
defense-in-depth principles and network security architecture.
Knowledge of different types of network communication (e.g.,
LAN, WAN, MAN, WLAN, WWAN). Knowledge of cyber defense
and information security policies, procedures, and regulations.
Knowledge of the common attack vectors on the application
layer. Knowledge of different classes of attacks (e.g., passive,
active, insider,close-in, distribution attacks).Knowledge of cyber
attackers(e.g., script kiddies, insider threat, nation/non-nation
state sponsored).Knowledge of system administration,network,
operating system hardening technique

Country: United States
Branch | City | Location: TCS – Dallas, TX
Plano
Plano, TX