Network Security Engineer

S&P Global; Telangana; Presencial; INR 1 800 000 - 2 800 000; Tempo integral

Resumo da oferta

S&P Global is seeking a Network Security Engineer to design, implement, and improve security controls across our enterprise networks in Telangana, India. You will protect connectivity with firewalls, secure remote access, network segmentation, and threat prevention while ensuring reliable access to business services.

You will collaborate with network engineering, security operations, infrastructure, and applications teams to troubleshoot issues, address risks, and deliver secure network changes,

Qualificações

• Bachelor's degree in CS/IT/Cybersecurity.
• 7+ years of hands-on experience implementing and supporting network security controls in production enterprise environments.
• Expertise in TCP/IP, subnetting, routing, switching, DNS, and NAT in enterprise networks.
• Experience configuring and administering enterprise firewalls and VPN services (site-to-site and remote access).
• Ability to diagnose connectivity and security incidents via packet capture (Wireshark) and device logs.

Responsabilidades

• Defend enterprise network boundaries by configuring, administering, and troubleshooting firewalls, NAT, and IDS/IPS.
• Embed least-privilege security by implementing network segmentation and access controls across environments.
• Enable secure global connectivity by supporting site-to-site and remote-access VPN services.
• Govern network access risk by reviewing firewall rules and validating business requirements.
• Accelerate incident response by analyzing logs and packet captures with security operations.
• Build resilience by hardening devices, patching, and automating configuration checks.

Conhecimentos

TCP/IP

Subnetting

Routing

Switching

DNS

NAT

Firewalls

VPN

IDS/IPS

Wireshark

Security Logs

Scripting

Formação académica

Bachelor's degree in Computer Science, Information Technology, or Cybersecurity

Ferramentas

Wireshark

Terraform

Ansible

VPN

Descrição da oferta de emprego

Grade Level (for internal use)

11

Role Summary

We are seeking a Network Security Engineer to design, implement, maintain, and improve security controls across enterprise network environments. The engineer will protect connectivity through firewalls, secure remote access, network segmentation, and threat prevention, while maintaining reliable access to business services. This role partners with network engineering, security operations, infrastructure, and application teams to troubleshoot issues, address security risks, and deliver secure network changes.

Team :- S&P Global's Corporate Cybersecurity team is at the heart of protecting enterprise infrastructure that powers trusted financial intelligence worldwide. Our network security function works collaboratively across infrastructure, application, and security operations disciplines — combining technical rigour with a commitment to continuous improvement. We take ownership of outcomes, raise the bar collectively, and treat every network change as an opportunity to strengthen the organization's security posture.

Key Responsibilities:-

• Defend enterprise network boundaries by configuring, administering, and troubleshooting firewalls, security policies, NAT, and intrusion detection and prevention controls — directly reducing risk exposure across S&P Global's global infrastructure.
• Embed least-privilege security by implementing and maintaining network segmentation and access controls across internal, perimeter, and remote-access environments, ensuring every connection is intentional, documented, and justified.
• Enable secure global connectivity by supporting site-to-site and remote-access VPN services, including secure configuration, authentication integration, and end-to-end connectivity troubleshooting at enterprise scale.
• Govern network access risk by reviewing firewall and network access requests, validating business requirements, assessing risk, and removing obsolete or overly permissive rules — keeping the perimeter tight and audit-ready.
• Accelerate incident response by partnering with security operations during investigations, analyzing packet captures and device logs, and implementing approved containment and recovery measures.
• Build operational resilience by hardening network security devices, coordinating patching and firmware upgrades, remediating vulnerabilities, and automating repeatable configuration checks with appropriate review and safeguards.

Required Qualifications:-

• Education: Bachelor's degree in Computer Science, Information Technology, or Cybersecurity
• Experience: 7+ years of hands-on experience implementing and supporting network security controls in production enterprise environments
• Technical Skills: Demonstrated expertise in TCP/IP, subnetting, routing, switching, DNS, and Network Address Translation across production enterprise environments
• Technical Skills: Hands-on experience configuring and administering enterprise firewalls, VPN services (site-to-site and remote access), network segmentation, and intrusion detection/prevention technologies
• Technical Skills: Demonstrated proficiency in diagnosing connectivity and security incidents through packet capture analysis (e.g., Wireshark) and security device log investigation

Additional Preferred Qualifications:-

• Hands-on experience securing cloud or hybrid network environments (e.g., AWS, Azure, or GCP)
• Applied experience implementing zero-trust architecture principles and network access control (NAC) solutions in enterprise environments
• Experience automating network security tasks using scripting languages (e.g., Python, Bash) or infrastructure-as-code tools (e.g., Terraform, Ansible)
• Experience supporting highly available network security services, including disaster recovery planning and recovery testing
• Active certification in one or more of the…