Security Engineer

Role Overview

• Candidates should possess 7-10 years of cybersecurity/security engineering experience.
• The focus is on security engineering experience, not cyber assurance, audit, governance, risk, compliance, or policy-oriented backgrounds.
• Candidates should have foundational security knowledge with strong expertise in network security.

Core Technical Requirements

Network Security (Primary Skill)

Candidates should have hands-on expertise in:

• Firewalls
• Switches
• Routers
• Security configurations and security profiles
• VPN management and configurations
• Network traffic security controls
• Firewall policy management and auditing
• These areas constitute the primary focus of the role.

Cloud Security (Mandatory)

• Candidates should have working knowledge of:
• AWS
• Azure
• GCP
• Cloud networking and cloud security concepts
• Security Groups
• Cloud-native network controls
• Network security enforcement policies
• WAF (Web Application Firewall)
• DDoS Protection Services
• Awareness of securing cloud services and cloud network architecture is required.
• Engineering and Automation Skills

Candidates should have:

• Security engineering mindset
• Automation experience
• Infrastructure-as-Code exposure
• Understanding of CI/CD pipelines
• Ability to develop automation solutions

Technologies mentioned:

• Terraform
• CloudFormation
• AWS User Data Scripts
• Python or other scripting languages
• Strong automation capabilities are highly valued.

AI Experience

• Experience leveraging AI tools for coding and automation is considered a positive differentiator.
• Examples mentioned include AI-assisted code generation tools.
• Candidates with hands-on experience using AI for automation development will be viewed favorably.

Skill Priority Discussion

Must-Have Skills

• Network Security is mandatory.
• Cloud Security is mandatory.
• Candidates should possess both competencies.

Nice-to-Have Skills

• DevSecOps
• AI Engineering
• Advanced Automation Skills

Desired Skill Weightage

• Hiring Manager provided approximate emphasis:
• 60-70% Network Security
• 20-30% Cloud Security
• Engineering/Automation skills are an important differentiator
• Candidates with strong networking expertise and moderate cloud exposure may still be considered, provided they understand cloud networking fundamentals.

________________________________________

Experience Expectations

Security Experience

• Overall cybersecurity/security experience: 7-10 years.

Experience can span:

• Security Operations (SOC)
• Incident Response
• Other relevant cybersecurity domains

Such foundational security experience is considered valuable.

Network Security Experience

Candidates with 5-7 years of focused network administration/network security experience are viewed very positively.

________________________________________

Project Scope

Hiring Manager explained the nature of work expected from contractors.

Automation Projects

Candidates may be required to:

• Integrate firewalls with device management platforms such as Intune.
• Develop scripts consuming APIs from multiple systems.
• Read and write data through APIs.
• Build operational automation solutions.
• Scripting language choice is flexible and may include:
• Python
• Bash
• Any language the candidate is proficient in.

Infrastructure as Code Projects

• Candidates may be required to:
• Provision security groups.
• Automate cloud deployments.
• Build infrastructure using Terraform or user data scripts.
• Support cloud network security automation initiatives.

Terraform Expectations

• Terraform is considered a nice-to-have skill.
• Intermediate-level knowledge is sufficient.
• Candidates are not expected to be highly proficient.
• Ability to contribute and create a functional first draft is considered adequate because peer review support will be available from existing engineers.