Network Security Specialist

Jobtailor; Campo Grande; Presencial; BRL 66 960 - 133 920; Tempo integral

Resumo da oferta

Jobtailor is seeking an experienced network security professional in Brazil to manage NGFWs, IPS/IDS, VPN access, and access control policies. The role focuses on proactive monitoring, log analysis, and incident response to protect critical systems.

You will implement network segmentation, ensure LGPD/compliance, and coordinate disaster recovery planning. Strong NSE/Security+ credentials and a Bachelor’s degree are required.

Qualificações

• Bachelor's degree in a relevant field.
• Fortinet NSE certification (Levels 4 to 7) and CompTIA Security+.

Responsabilidades

• Configure and manage Next-Generation Firewalls (NGFW) and IPS/IDS to block malicious traffic.
• Perform network segmentation to limit lateral movement between subnets.
• Implement secure VPN/remote access (IPsec/SSL) for employees and branches.
• Define access controls and authentication policies (AAA) using TACACS+/RADIUS/Zero Trust.
• Monitor security posture and perform threat detection to identify incidents early.
• Analyze logs with SIEM tools and perform centralized security monitoring.

Conhecimentos

Firewall configuration

VPN configuration

Network segmentation

Threat monitoring

SIEM analysis

Incident response

Disaster recovery planning

Formação académica

Bachelor's degree

Fortinet NSE Certification (Levels 4-7)

CompTIA Security+

Descrição da oferta de emprego

Responsibilities

• Configuration of Firewalls and IPS/IDS: Install and manage Next-Generation Firewalls (NGFW) as well as Intrusion Prevention and Detection Systems to block malicious traffic.
• Network Segmentation: Divide the corporate network into independent subnets (VLANs) to ensure that, if one segment is compromised, an attacker cannot easily access critical areas (lateral movement).
• VPN and Remote Access Implementation: Configure secure encrypted connections (IPsec/SSL VPN) for remote employees or branch interconnections.
• Access Control (AAA): Define strict Authentication, Authorization, and Accounting policies (using protocols such as TACACS+, RADIUS, or Zero Trust–based architectures).
• Monitoring and Threat Detection: Security is not static; it requires continuous surveillance to identify anomalies before they become major incidents.
• Log Analysis and SIEM: Centrally monitor security events generated by routers, switches, and servers using SIEM tools (such as Splunk, QRadar, or open-source solutions).
• Network Traffic Analysis: Use sniffers and protocol analyzers (such as Wireshark) to inspect suspicious packets, identify bottlenecks, or attempts to exfiltrate data.
• Vulnerability Management: Perform periodic network scans (using tools like Nessus or OpenVAS) to find open ports, outdated patches, or misconfigurations.
• Incident Response and Mitigation: Containment of attacks by acting quickly to isolate infected devices, block attacking IPs at the firewall, and mitigate denial-of-service (DDoS) attacks.
• Digital Forensic Analysis: Investigate the root cause of incidents (how the attacker got in, what was accessed, and the attacker’s pathway) to produce post-incident reports.
• Disaster Recovery Plans (DRP): Ensure network configuration backups are up to date and that redundancy of links and equipment exists so operations are not interrupted.
• Draft acceptable use policies for the network, enforce complex password policies, and define BYOD (Bring Your Own Device) rules.
• Ensure the network infrastructure complies with market standards and local/international regulations, such as LGPD (Brazilian General Data Protection Law), ISO 27001, or PCI-DSS (for the financial sector).
• Hardening Updates: Apply best-practice hardening guides to secure network assets (disable unnecessary services such as Telnet or plain HTTP, prioritizing SSHv2 and HTTPS).

Requirements

• Completed higher education (Bachelor's degree)
• Fortinet NSE certification (Levels 4 to 7) and CompTIA Security+