Network Security Engineer

CDK Global; Hyderabad; On-site; INR 700,000 - 1,300,000; Full time

Job summary

CDK Global in Hyderabad, India is seeking an Associate Network Security Engineer to secure our SaaS platforms. You will manage NGFWs and WAFs, tune security policies, and collaborate with senior engineers to ensure a secure and reliable environment for our applications.

The role emphasizes firewall configuration, network traffic analysis, and incident response, with opportunities to work across teams on security initiatives. This is an on-site Hyderabad position with growth potential.

Qualifications

• Approximately 2 years of hands-on network security experience.
• Solid understanding of networking fundamentals (OSI, TCP/IP, VPN).
• Hands-on with Next-Generation Firewalls and rule management.
• Knowledge of Web Application Firewalls and ASM concepts.
• Strong analytical and problem-solving abilities.

Responsibilities

• Firewall administration: configuration, deployment, and daily management.
• WAF & ASM management: configure and tune policies to protect apps.
• Policy tuning & optimization: review firewall rules for least-privilege.
• Network troubleshooting: diagnose traffic flow and VPN issues.
• Threat monitoring & response: analyze logs and investigate anomalies.
• Documentation: maintain network diagrams and SOPs.

Skills

Networking Knowledge

Analytical Skills

Firewall Fundamentals

WAF/ASM Concepts

2+ years experience

Tools

Palo Alto Networks

Job description

Associate Network Security Engineer (Firewalls & WAF)

Company: CDK Global

Location: Hyderabad, Telangana, India

Experience Level: 1 Year to 3year

About the Role

As an Associate Network Security Engineer at CDK Global, you will help secure the infrastructure that powers our SaaS platforms for the automotive industry. In this role, you will focus on the day-to-day administration, tuning, and monitoring of Next-Generation Firewalls (NGFW) and Web Application Firewalls (WAF). You will work closely with senior engineers to implement security policies, analyze application traffic, and troubleshoot network connectivity issues, ensuring a secure and reliable environment for our applications.

Key Responsibilities

• Firewall Administration: Assist in the configuration, deployment, and daily management of enterprise firewalls (such as Palo Alto Networks) to control internal and external network traffic.
• WAF & ASM Management: Configure and tune Web Application Firewalls and Application Security Management (ASM) policies to protect internet-facing applications against OWASP Top 10 threats, botnets, and layer 7 attacks.
• Policy Tuning & Optimization: Regularly review and optimize security policies and firewall rule sets to support Attack Surface Reduction initiatives and ensure least-privilege access.
• Network Troubleshooting: Apply foundational networking knowledge to troubleshoot traffic flow, VPN connectivity, and access issues across the enterprise network.
• Threat Monitoring & Response: Monitor security logs, investigate blocked traffic or anomalies, and work with application teams to resolve false positives while maintaining strict security postures.
• Documentation: Maintain accurate network diagrams, traffic flow documentation, and standard operating procedures for firewall and WAF deployments.

Required Qualifications

• Experience: Approximately 2 years of hands-on experience in network security, network operations, or a related technical support role.
• Networking Knowledge: Solid understanding of networking fundamentals, including the OSI model, TCP/IP suite, routing protocols, DNS, DHCP, and VPN technologies.
• Firewall Fundamentals: Practical experience managing and configuring Next-Generation Firewalls (creating rules, NAT policies, and monitoring logs).
• WAF/ASM Concepts: General understanding of Web Application Firewalls, ASM modules, and web traffic security concepts (HTTP/HTTPS, SSL/TLS termination, basic web vulnerabilities).
• Analytical Skills: Strong problem-solving abilities and a methodical approach to analyzing network traffic and security events.

Preferred Skills

• Familiarity with network security frameworks like Zero Trust Network Access (ZTNA).
• Experience with ticketing and change management workflows.
• Industry certifications such as CompTIA Network+/Security+, CCNA, or vendor-specific firewall certifications (e.g., PCNSA).