Network Security Engineer Cubist (Point72) · Bengaluru, India 9 hours ago

Tradermath; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Point72 is seeking a Network Security Engineer to support and harden our global network infrastructure. You will work on firewall management, WAF, NAC, and secure access controls across cloud and on-prem environments.

You will implement zero-trust segmentation, lead risk assessments, and collaborate with multiple teams to enforce security controls and architecture. Strong communications and regulatory knowledge are required.

Qualifications

• 5+ years in network security within regulated environments.
• Experience with Palo Alto Networks, including User-ID and App-ID.
• Knowledge of micro-segmentation and zero trust architectures.
• Familiarity with SASE and CASB (Prisma Access, Zscaler, NetSkope).
• Cloud networking with AWS/Azure/GCP and NDR platforms.

Responsibilities

• Provide level 2/3 network security engineering support for diverse platforms.
• Manage Palo Alto firewalls and Prisma Access configurations globally.
• Configure security controls, segmentation, and zero trust policies.
• Collaborate with cloud teams to secure AWS/Azure/GCP workloads.
• Develop and audit network segmentation and vulnerability programs.
• Deliver training on security best practices and policies.
• Ensure compliance with PCI DSS, HIPAA, and GDPR.

Skills

Network security

Firewalls

WAF

SASE

CASB

Zero trust

Network segmentation

Illumio

Guardicore

VMware NSX

Palo Alto

Prisma Access

Darktrace

ExtraHop

Vectra

Cloud networking

CISSP

CCNA/CCNP

Tools

Illumio

Guardicore

VMware NSX

NSX-T

vArmour

Cisco ACI

ShieldX

Unisys Stealth

Zero Networks

Prisma Access

Zscaler

NetSkope

Darktrace

ExtraHop

Vectra

Palo Alto firewalls

GlobalProtect

Job description

JOB TITLE

Network Security Engineer

A Career with point72’S TECHNOLOGY TEAM

As Point72 continues to reimagine the future of investing, our Technology group is constantly improving our company’s IT infrastructure, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts experimenting and discovering new ways to provide exceptional end user experience while embracing enterprise agile methodology. We encourage professional development to ensure you bring innovative ideas to our team while satisfying your own intellectual curiosity.

Our Technology Infrastructure team engineers and operates the foundational technology platforms that power all of the firm’s applications and businesses. Our disciplines span a broad array of technologies from datacenter infrastructure to large scale cloud services, with the shared goal of providing the most reliable, performant, modern technology platforms to improve time-to-market for our business. We also deliver end-user technology solutions to support the evolving collaboration and productivity needs of our global teams. Our team focuses on innovation and challenging the current state of our infrastructure technology in a fast-paced, dynamic, and collaborative working environment.

What you’ll do

• Provide level 2/3 engineering support for various network security related solutions, including our network/micro segmentation (Illumio), firewalls (Palo Alto Networks), VPNs (GlobalProtect/Prisma Access), web application firewall (Cloudflare), network detection and response, network access control (Cisco ISE), web browser isolation, network security policy management, and other related network security platforms
• Manage advanced security configurations of Palo Alto firewalls locally and globally with the deployed Prisma Access SASE solution
• Configure and manage all deployed network security platforms such as firewalls and IDS/IPS, and ensuring they are up-to-date and configured according to industry standards
• Collaborate with other technology teams to ensure secure integration of cloud services such as AWS, Azure, and GCP, including implementation of security controls such as access controls, encryption, and network segmentation
• Develop and maintain network segmentation policies and practices, including implementing zero trust architecture and micro segmentation
• Conduct risk assessments to identify vulnerabilities, perform penetration testing and recommend remediation plans, including vulnerability management programs
• Develop training materials and conduct regular training sessions for users on network security best practices and policies
• Ensure network security compliance with regulatory standards such as PCI DSS, HIPAA, and GDPR by implementing policies and procedures and performing regular audits

What’s REQUIRED

• Minimum of 5-7 years of experience in network security within financial services or another highly regulated environment

• Demonstrated experience with networking, firewalling (Palo Alto Networks, including User-ID, App-ID, IDS/IPS) WAF, DDoS, NAC, and other related network security related tools and technologies
• Knowledge of network segmentation, including micro segmentation and zero trust architecture leveraging tools such as Illumio, Guardicore, VMware NSX (NSX-T), vArmour, Cisco ACI, ShieldX, Unisys Stealth, and/or Zero Networks
• Experience with Secure Access Service Edge (SASE) and Cloud Access Security Broker (CASB) architectures leveraging tools such as Prisma Access, zScaler, and/or NetSkope
• Knowledge of cloud networking with cloud providers such as AWS, Azure, and/or GCP
• Configuration and management in network detection and response (NDR) platforms such as Darktrace, ExtraHop, and/or Vectra
• Industry certifications such as CISSP, CCNA/CCNP Routing & Switching, Palo Alto Networks Security certifications (PCSNE), Security+, and/or CCNA Security.
• Excellent analytical and communication skills, with the ability to explain technical concepts to non-technical audiences
• Ability to collaborate with various engineering and application development teams to align security requirements, influence decision-making, build relationships, and communicate strategy effectively
• Commitment to the highest ethical standards

About point72

Point72 is a leading global alternative investment firm led by Steven A. Cohen. Building on more than 30 years of investing experience, Point72 seeks to deliver superior returns for its investors through fundamental and systematic investing strategies across asset classes and geographies. We aim to attract and retain the industry’s brightest talent by cultivating an investor-led culture and committing to our people’s long-term growth. For more information, visit https://point72.com/..