Network Security Engineer - Corporate IT

Brennan; Navi Mumbai; On-site; INR 1,800,000 - 3,200,000; Full time

Benefits offered by this job

Training and certification bonuses

Culture Awards

Annual top performers trip

Vibrant social activities

Discounted hardware/software

Learning and development environment

Job summary

Brennan is seeking a skilled Network Security Engineer in Navi Mumbai to design, deploy, and manage Brennan's security architecture across corporate and service-delivery environments. You will monitor incidents, perform threat hunting, and drive vulnerability remediation, ensuring robust, compliant networks that support business goals.

The role requires hands-on experience with NGFWs, VPN design, SIEM, and threat analysis, with opportunities for growth and industry certifications.

Qualifications

• 6+ years hands-on network management in enterprise environments.
• Experience with NGFWs: Palo Alto, Fortinet, Checkpoint, Cisco ASA/FTD.
• Strong VPN design and secure connectivity expertise.
• Deep knowledge of zero trust, segmentation, and micro-segmentation.
• Ability to review VAPT and coordinate remediation with infra teams.
• Experience with Tenable, Nessus, and Algosec for vulnerability management.
• Ability to analyze SIEM alerts and perform root cause analysis.
• Familiarity with network attacks (DDoS, MITM, ARP poisoning).

Responsibilities

• Design and deploy secure Brennan networks for corporate and service-delivery environments.
• Document network technology and controls for team reference.
• Maintain infrastructure to ensure security and operations.
• Run and respond to events, alerts, and incidents with coordinated resolutions.
• Continually improve security resilience using manual and automated processes.
• Educate colleagues and project teams on security topics.
• Collaborate with Brennan teams; prepare documentation for stakeholders.

Skills

Network security

Threat hunting

Vulnerability management

Zero trust

Network segmentation

SIEM analysis

Incident response

DDoS protection

TCP/IP expertise

VPN design

Forensics

Tools

Wireshark

tcpdump

NetFlow

Packet capture

Algosec

Tenable

Nessus

Job description

• Vibrant, fun social activities

Brennan. Where true performance thrives.

At Brennan, we believe that how technology is delivered is every bit as important as what the technology is. We focus on creating real and relevant value for customers with solutions that fit their specific needs and always reflect their true interests.

It’s a claim backed by our True Performance System - a way of working engineered to get us closer, and deliver better, for our customers and their actual experience of technology.

Why join Brennan

True performance for our customers starts with a true belief in our people.

It’s why we’ve structured our business to help our teams, and their talents, shine bright. It's why we’ve created a workplace where people of all backgrounds, beliefs and experiences are welcomed and empowered. And it’s why we’ve built an organisation where real innovation makes a genuine impact and generates true rewards for our team members.

True rewards

In addition to competitive remuneration, Brennan offers extensive benefits, including:

• Training and certification bonuses
• Culture Awards that recognise excellence
• Brennan Daredevils - our annual, all-expenses paid trip awarded to our top performers and outstanding contributors
• Vibrant, fun social activities
• Discounted hardware and software
• An environment that embraces learning and development

PURPOSE OF THE ROLE

As part of this, a Brennan Network Security Engineer plays an integral role within a team whose primarily responsibility is to design, deploy, and manage network security technology for Brennan's corporate (security perspective 1) and service-delivery (perspective 2) teams. This will include a level of security architecture and design, installation and configuration, and then ongoing operational and security monitoring of security technology.

The purpose of the role is to ensure that appropriate security technologies, whether included in Brennan's foundation services, or provided as additional layers, are managed to the levels defined within the service descriptions and SLA's. This includes ensuring that incidents are responded to in such a manner that the service remains available, the immediate threat is detected and classified, and that appropriate communication or escalation takes place to the customer, third parties, engineering teams, or escalation points within Brennan IT.

Roles & Responsibilities

• Design and Deploy: Working closely with other Brennan teams to ensure that networks used within Brennan's corporate and service-delivery environments are designed and implemented in a secure manner.
• Document: Ensuring that network technology and controls documentation is created and maintained, to assist other team members
• Maintain: Undertake scheduled and on-demand maintenance of infrastructure to ensure operational and security outcomes are achieved.
• Run and Respond: Receive and respond to automatically and manually generated events alerts and incidents, and working with other teams to ensure successful resolution.
• Improve: Continually innovate to improve security resilience and outcomes within Brennan, using manual and automated processes.
• Educate: Provide leadership and subject matter expertise to colleagues and projects outside of the immediate security engineer role, aligned to Brennan's other services and products.
• Collaborate: Share knowledge with other Brennan team members, in our internal and customer-facing teams, including preparing and reviewing documentation for same.

KEY COMPETENCIES

General Networking And Security Experience

• Minimum 6 years of hands-on experience with network management in enterprise and MSP environments, Next Generation Firewalls (Palo Alto, Fortinet, Checkpoint, Cisco ASA/FTD) including policy review, rule optimization, and troubleshooting.
• Experience with VPN technologies (IPSec, SSL VPN, site-to-site, remote access) and secure connectivity design.
• Deep understanding of network segmentation, zero trust architecture, and micro-segmentation conceptS
• Ability to analyse VAPT reports, prioritize vulnerabilities, and coordinate remediation with infrastructure teams.
• Experience with vulnerability scanning tools such as Tenable, Nessus and Algosec.
• Ability to validate remediation and perform risk-based vulnerability prioritisation
• Strong understanding of network-based attacks such as DDoS, MITM, ARP poisoning, lateral movement, privilege escalation.
• Ability to investigate SIEM alerts and perform root cause analysis.
• Experience in threat hunting using logs, packet capture, and network telemetry.
• Network Protocol & Traffic Analysis
• Strong knowledge of TCP/IP, DNS, HTTP/S, SMTP, FTP, SSH and network packet analysis.
• Experience using tools like Wireshark, tcpdump, NetFlow, and packet capture tools.
• Experience supporting internal and external security audits (ISO 27001, SOC2, PCI DSS, regulatory audits)