Network Security Engineer

S&P Global Market Intelligence; Hyderabad; On-site; INR 2,000,000 - 4,000,000; Full time

Job summary

S&P Global Market Intelligence in Hyderabad, India is seeking a Network Security Engineer to design, implement, maintain, and improve security controls across enterprise network environments. The engineer will protect connectivity through firewalls, secure remote access, network segmentation, and threat prevention, while maintaining reliable access to business services.

This role partners with network engineering, security operations, infrastructure, and application teams to troubleshoot

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or Cybersecurity.
• 7+ years of hands-on experience implementing and supporting network security controls in production enterprise environments.
• Expertise in TCP/IP, subnetting, routing, switching, DNS, and NAT across production environments.
• Hands-on experience configuring and administering enterprise firewalls, VPNs, network segmentation, and IDS/IPS.
• Demonstrated proficiency diagnosing connectivity and security incidents via packet capture analysis and log investigation.

Responsibilities

• Defend enterprise network boundaries by configuring, administering, and troubleshooting firewalls, policies, NAT, and IDS/IPS.
• Embed least-privilege security through network segmentation and access controls across internal, perimeter, and remote environments.
• Enable secure global connectivity by supporting site-to-site and remote-access VPN services.
• Govern network access risk by reviewing firewall and network access requests and removing obsolete rules.
• Accelerate incident response by partnering with security operations during investigations and analyzing logs.
• Build operational resilience by hardening devices, coordinating patches, and automating configuration checks.

Skills

TCP/IP subnetting routing switching

Enterprise firewalls

VPN services site-to-site remote-acc

Network segmentation

Intrusion detection/prevention

Packet capture analysis Wireshark

Security device log investigation

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Wireshark

Job description

Job Summary

We are seeking a Network Security Engineer to design, implement, maintain, and improve security controls across enterprise network environments. The engineer will protect connectivity through firewalls, secure remote access, network segmentation, and threat prevention, while maintaining reliable access to business services. This role partners with network engineering, security operations, infrastructure, and application teams to troubleshoot issues, address security risks, and deliver secure network changes.

Team: S&P Global's Corporate Cybersecurity team is at the heart of protecting enterprise infrastructure that powers trusted financial intelligence worldwide. Our network security function works collaboratively across infrastructure, application, and security operations disciplines - combining technical rigour with a commitment to continuous improvement. We take ownership of outcomes, raise the bar collectively, and treat every network change as an opportunity to strengthen the organization's security posture.

Key Responsibilities

• Defend enterprise network boundaries by configuring, administering, and troubleshooting firewalls, security policies, NAT, and intrusion detection and prevention controls - directly reducing risk exposure across S&P Global's global infrastructure.
• Embed least-privilege security by implementing and maintaining network segmentation and access controls across internal, perimeter, and remote-access environments, ensuring every connection is intentional, documented, and justified.
• Enable secure global connectivity by supporting site-to-site and remote-access VPN services, including secure configuration, authentication integration, and end-to-end connectivity troubleshooting at enterprise scale.
• Govern network access risk by reviewing firewall and network access requests, validating business requirements, assessing risk, and removing obsolete or overly permissive rules - keeping the perimeter tight and audit-ready.
• Accelerate incident response by partnering with security operations during investigations, analyzing packet captures and device logs, and implementing approved containment and recovery measures.
• Build operational resilience by hardening network security devices, coordinating patching and firmware upgrades, remediating vulnerabilities, and automating repeatable configuration checks with appropriate review and safeguards.

Required Qualifications

• Education: Bachelor's degree in Computer Science, Information Technology, or Cybersecurity
• Experience: 7+ years of hands-on experience implementing and supporting network security controls in production enterprise environments
• Technical Skills: Demonstrated expertise in TCP/IP, subnetting, routing, switching, DNS, and Network Address Translation across production enterprise environments
• Technical Skills: Hands-on experience configuring and administering enterprise firewalls, VPN services (site-to-site and remote access), network segmentation, and intrusion detection/prevention technologies
• Technical Skills: Demonstrated proficiency in diagnosing connectivity and security incidents through packet capture analysis (e.g., Wireshark) and security device log investigation

Additional Preferred Qualifications

• Hands-on experience securing cloud or hybrid network environments (e.g., AWS, Azure, or GCP)
• Applied experience implementing zero-trust architecture principles and network access control (NAC) solutions in enterprise environments
• Experience automating network security tasks using scripting languages (e.g., Python, Bash) or infrastructure-as-code tools (e.g., Terraform, Ansible)
• Experience supporting highly available network security services, including disaster recovery planning and recovery testing
• Active certification in one or more of the following: CCNA Security, CCNP Security, CompTIA Security+, Palo Alto PCNSE, or Fortinet NSE
• Experience contributing to security audits, control validation activities, and audit evidence collection