Network Se

Role & responsibilities

Responsibilities

• Assess firewall, intrusion prevention and gateway change requests for security risk and design quality and prepare change designs for implementation by UK-based personnel.
• Carry out quarterly firewall rule-base reviews (and after significant change) using configuration exports, and report findings and recommendations.
• Analyse network security log and alert reporting monthly, and on request during incidents, and provide recommendations.
• Track intrusion prevention signature (digital vaccine) releases against the 48-hour application target and advise on critical updates, working with the Vulnerability and Patch Manager.
• Contribute to secure web gateway, remote access and CASB policy design and review.
• Review network segmentation and IT/OT boundary controls and recommend improvements.
• Define audit logging requirements for network security devices, in line with the logging design.
• Produce internet access usage and network security reports in the agreed format and to the agreed schedule.
• Maintain network security infrastructure diagrams and configuration documentation.
• Support the growth of Expleo's Cybersecurity Practice through knowledge sharing and technical contribution.

• Degree in computer science, networking, cybersecurity or a related discipline, or equivalent professional experience.
• Vendor firewall certification, e.g. PCNSE or Fortinet NSE 4 or above (at least one required).

CompTIA Security+, CySA+, CCNP Security, or an SSE/SASE vendor certification would be advantageous

• Next-generation firewall design and rule-base review (e.g. Palo Alto, Fortinet, Check Point).
• Intrusion prevention and network detection technologies (e.g. Trend Micro TippingPoint, Cisco Firepower, Darktrace).
• Secure web gateway, SSE/SASE and remote access (e.g. Prisma Access, Zscaler, Netskope).
• TCP/IP, routing, VPN, network segmentation and IT/OT boundary concepts.
• Security log analysis and ITIL change and incident processes.
• Clear written reporting and documentation.

• Rule-base analysis tools (e.g. AlgoSec, Tufin, FireMon).
• Web application firewall and load balancer experience (e.g. F5 BIG-IP).
• OT network security experience (e.g. Nozomi, Claroty) and energy or CNI sector exposure.

• 3-6 years in network security engineering or operations.
• Experience of firewall rule-base review and change risk assessment in enterprise environments.