Network Security Analyst

Alstom; Bengaluru; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Alstom Bangalore is seeking a Network Security Analyst to join the Operations team. You will handle incidents and service requests for Zscaler Cloud Proxy, ensuring alignment with IS security policies and SLAs.

The role focuses on diagnostics, troubleshooting, and end-to-end testing for user issues. You will collaborate with IS&T partners and operations teams to maintain secure network services, manage configurations, and contribute to continuous improvement initiatives in a dynamic transport

Qualifications

• Bachelor's degree in engineering required.
• 3+ years in Zscaler Cloud Proxy and ZPA/ZDX operations.
• Understanding of IS security policy framework.

Responsibilities

• Operate and support Zscaler Cloud Proxy and ZPA under security policy.
• Manage PAC files, URL filtering, and cloud app control.
• Coordinate with IS&T teams for incident resolution and change requests.
• Document RCA and remediation actions to improve service.

Skills

Zscaler Cloud Proxy

Incident management

Networking fundamentals

Documentation

Education

Bachelor's Degree in Engineering

Tools

SNOW (ServiceNow)

Zscaler Cloud Proxy

Job description

Select how often (in days) to receive an alert:

Network Security Analyst

Company: Alstom

At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, 80,000 colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars.

Could you be the full-time Network Security Analyst in Bangalore we're looking for?

OVERALL PURPOSE OF THE ROLE:

• Reporting directly to the Network Security Manager, the Network Security Analyst will be part of the Operations team handling tickets raised in SNOW - Incidents, Service requests and changes for Zscaler Cloud management in alignment with security policy of Alstom.
• He/She should perform in depth diagnostics and troubleshooting using required Networking tools and Zscaler cloud tools access. He/She should assist Alstom business users with End to End testing or Troubleshooting of Networking or Zscaler cloud service issues.
• He /She should be able to reproduce end user issues to verify problems and document steps as Knowledge base for other Support teams and Operations teams in Alstom Network services.
• He/She should ensure any actions performed is in compliance with Alstom IS Security policy regulations.

RESPONSIBILITIES:

The Network Security Analystis Operational support owner for Zscaler Cloud Proxy under his/her responsibility

• Traffic Forwarding - PAC file Management, Location and Sub location Management.
• GRE Tunnels monitoring for Alstom Local Breakout Sites.
• Authentication Profile - SAML and SCIM management in alignment with Identity management support team
• Policy management - URL Filtering/Cloud App Control/Malware/Sandbox/SSL Inspection/Bandwidth Control
• App Segmentation, Client Forwarding Policy, Device Posture Management on ZPA along with ZTNA understanding
• Access control - RBAC based access privileges, URL Categories management, and Organization wide AUR policy configuration.
• ZAPP end point policy and monitoring for Internet connectivity and Version management in alignment with required UAT.
• Zscaler Licenses Usage, Capacity Monitoring and Reporting for management to be done based on requirements from Management.
• Cloud Firewall Policy management and compliance.

You will interact on a regular basis with IS&T E2E PM, Local IS&T Business Partners, Solutions Architects, Functional team and Operations teams

Qualifications & Skills:

EDUCATION

• Bachelor's Degree in Engineer
• IT Support engineer having 3+ years of experience in Zscaler Cloud Proxy management and ZPA and ZDX ( if worked), ideally with an basic understanding of IS and Network Security Policy framework

BEHAVIORAL COMPETENCIES:

• AGILE - Act quickly, anticipate, learn and adapt continuously
• INCLUSIVE - Embrace differences and work as a team
• RESPONSIBLE - Keep our commitments towards internal and external stakeholders (employees, customers, passengers, society)

TECHNICAL COMPETENCIES & EXPERIENCE

The Network security Analyst follow and comply with below actions in line with the security policy in all actions involved related to Zscaler Cloud proxy Support Services.

• Risk analysis - perform risk analysis and identify mitigation plan when relevant - 1 Year
• Incident management - Manage Tickets raised by Alstom end users within configured Response and Resolution SLA - 2 to 3 Years
• Service Request Management - Manage Service requests raised and approved by business for implementation as per SOP in place - 2 to 3 Years
• Problem Management - Ensure to document RCA and submit corrective and Preventive action on time with remediation - 2 to 3 Years
• Change management - Manage Change Implementation End to end as per required Alstom process in place - 2 to 3 Years
• Support on any Project/Business requirement change like SDWAN which may impact Zscaler Cloud policy - 1 Year
• CSI( Continual Service Improvement) and Tasks automation to improve End user experience - Should be aware
• Event Management implementation in liaison with Business teams where Local Internet breakout is available - 2 years
• Coordinate with other Technology & Services Design, Ops and Project Stakeholders for Support on Zscaler Cloud proxy management - Should be aware
• Develop and implement practices for network security to protect Alstom Business: Level 2
• Risk Analysis and Remediation: Level 3
• ITIL Service process /Quality reviews - Level 3
• Operational Support /Process documentation skills - Level 3
  

EXPERIENCE / SKILL SET

• Should have good experience working on Zscaler Cloud proxy implementation and operational management.
• Good understanding of security tools and mechanisms (IDS/IPS, antivirus, anti-malware, authentication mechanisms, DNS, IPAM, PKI, encryption, etc.)
• Knowledge of ISO 27002 Security Controls.
• Network Security Basic understanding of all components required for Organization security.
  
• IT Skills: MS office tools (Word, Excel, PowerPoint) for Reporting
• Able to identify and document specific security issues, propose resolution options, and interpret matters from the perspective of involved stakeholders
• Excellent written/verbal/communication, listening and facilitation skills

You don't need to be a train enthusiast to thrive with us. We guarantee that when you step onto one of our trains with your friends or family, you'll be proud. If you're up for the challenge, we'd love to hear from you!

Important to note

As a global business, we're an equal-opportunity employer that celebrates diversity across the 63 countries we operate in. We're committed to creating an inclusive workplace for everyone.