Job Description
Job Description
Looking for a Network Infrastructure / Security Engineer with a strong Networking background, firewall and packet capture experience as well as Python scripting.
This person must be someone who can learn new things and work on new integrations for one of the biggest financial services companies in the nation.
This position can start out remote and for the next few months is fully remote until they come back into the office, this person is expected to be in Phoenix, AZ.
The Network Security Engineer is responsible for the support and maintenance of a Multi-Tenant environment, both cloud based and on-premises, requiring cooperative support of 24x7x365 NOC / SOC operation.
A clear understanding of network security and best practices is highly important. Your primary responsibilities will be to provide ongoing support to our managed customers, performing troubleshooting and resolution of services impacting issues, as well as, applying requested changes, documentation and modifications to the existing environment.
Required :
- Strong Networking Background
- Ability to understand network topology and schematics
- Strong Network Protocol understanding (TCP, UDP, ICMP, etc)
- Strong understanding of network based technologies / protocols (HTTP / S, SSH, Telnet, etc)
- Strong network trouble shooting skill set (routing, access, drops, firewalls, etc)
o nmap, tcpdump, telnet, log analysis, packet / session analysis
- Understanding of network ACLs
- Understanding of load balancers and other related enterprise technologies (WAF, network IDS / IPS, etc)
- Strong Linux CLI Skill set
- Experience with tools used for Threat Detection based on Packet Analysis
Preferred :
- Packet analysis skills (tcpdump, wireshark, session analysis)
- Threat Detection with a focus on Packet Inspection
- TLS / SSL Decryption
- Cloud Packet Capture experience
- RSA Netwitness Packet Capture experience is preferred (or other full packet capture tools acceptable)
This person will be troubleshooting network connection within the environment. Working on deploying different systems in the environment for packet collections.
Working with SOC and threat detection teams to help build and explain different traffic flows and create detections in those traffic flows