Network Security Engineer

Network Security Engineer (IDS Operations)

Location: Pune (2–3 Days Work from Office) Experience: 6–8 Years

Primary Focus: * 6+ years of experience in Network Security Operations. * Extensive hands-on experience with FortiGate Firewalls. * Experience in fine-tuning IDS signatures and detection rules. * Experience managing and maintaining IDS/IPS platforms.

Job Summary We are seeking a skilled Network Security Engineer with hands-on experience in Intrusion Detection Systems (IDS), IPS, and Network Security Operations. The candidate will be responsible for monitoring, analyzing, and responding to network security events, maintaining IDS infrastructure, and ensuring the organization's network remains protected against cyber threats.

Key Responsibilities * Fine-tune IDS signatures and detection rules to reduce false positives and improve detection accuracy. * Perform firewall rule provisioning. * Resolve open issues with vendors. * Manage and maintain IDS/IPS platforms such as Snort, Suricata, Cisco Secure IPS, or equivalent technologies. * Monitor and analyze alerts generated by IDS/IPS solutions. * Develop and maintain IDS monitoring procedures, runbooks, and operational documentation. * Support firewall, VPN, proxy, and network security infrastructure troubleshooting. * Prepare security reports, dashboards, and metrics for management review. * Participate in security audits, compliance reviews, and vulnerability management activities. * Investigate security incidents and perform root cause analysis. * Analyze packet captures (PCAPs) and network traffic to identify suspicious activity. * Collaborate with SOC, Incident Response, and Threat Intelligence teams during security investigations. * Conduct threat hunting and identify indicators of compromise (IOCs).

Required Skills * Expertise in FortiGate Firewalls, Palo Alto, and Cisco ASA. * Experience working with IDS/IPS technologies. * Hands-on experience with packet analysis tools such as Wireshark. * Familiarity with SIEM platforms such as Splunk or Microsoft Sentinel. * Strong understanding of TCP/IP, routing, switching, DNS, DHCP, and network protocols. * Knowledge of attack techniques, malware behavior, and network-based threats. * Understanding of cybersecurity frameworks and incident response processes. * Experience with Linux and Windows operating systems. * Basic scripting knowledge in Python, Bash, or PowerShell.

Preferred Qualifications * Bachelor's degree in Computer Science, Information Security, or related field.

Desired Competencies * Strong analytical and troubleshooting skills. * Ability to work in an operations environment. * Excellent communication and incident management skills. * Attention to detail and proactive security mindset. * Ability to work effectively with cross-functional technical teams.