Information Security Specialist

Engineering & Configuration Design, implement, and harden policies for Cisco/Check Point firewalls; manage access control, NAT, VPN and advanced threat features. Configure and optimize IPS signatures and profiles (Cisco/Check Point/Palo Alto) to maximize detection while minimizing false positives. Deploy, fine‑tune, and maintain F5 ASM and Imperva WAF/CDN policies, bot management, rate limiting, and positive security models for web applications and APIs. Maintain DDoS protection configurations including runbooks, thresholds, and upstream coordination with providers. Use Tufin Firewall Analyzer (SecureTrack/SecureChange) for rule lifecycle, policy optimization, risk analysis, recertification, and change governance. Integrate CrowdStrike intelligence and detection telemetry with network enforcement points and ArcSight SIEM for correlated detections and automated response where applicable. Perform log analysis and correlation via SIEM (ArcSight) to identify threats, campaign patterns, and attacker TTPs. Ensure high availability, redundancy, and health of security appliances and services; manage upgrades, patches, and hotfixes with change control discipline. Develop and maintain playbooks/runbooks for common attack scenarios (WAF blocks, IPS hits, DDoS events, suspicious egress, VPN abuse). Align network security controls and evidence to PCI DSS, SOC 2, and ISO/IEC 27001 requirements (e.g., segmentation, logging, change control, vulnerability management, access reviews). Prepare and provide audit artifacts (policy snapshots, rule reviews, change tickets, testing results) and remediate findings in partnership with control owners. Enforce least privilege and segregation of duties in access and change workflows. Automate routine tasks (e.g., rule recertification, object inventory, config backups, compliance evidence pulls) using Python, Ansible, vendor APIs, or Tufin workflows. 8+ years in network security engineering/operations or related roles. Hands‑on expertise with firewalls and IPS (policy design, advanced troubleshooting, VPNs, packet capture/analysis). Practical experience with F5 ASM and/or Imperva WAF/CDN policy creation, tuning, and attack mitigation. Experience managing DDoS protection (cloud scrubbers, BGP/RTBH, or appliance‑based). Experience with Tufin Firewall Analyzer (SecureTrack/SecureChange) for rule governance and compliance workflows. Strong understanding of TCP/IP, routing, switching, TLS/SSL, DNS, and CDN architectures. SIEM log analysis and detection triage; ability to write queries and create dashboards. Demonstrated incident response experience focused on network perimeter and web threats. Working knowledge of PCI DSS, SOC 2, and ISO 27001 control requirements relevant to network security. Scripting/automation proficiency (preferably Python; YAML/Ansible a plus). Bachelor's degree in Computer Science, Information Security, or equivalent experience. Certifications: CCNP Security, CCSA/CCSE, F5‑ASM, Imperva, Tufin TCP, CISSP, GCIH/GCIA (or equivalents). Excellent communication skills with the ability to translate technical risks for non‑technical stakeholders.