Security Engineer - Network

Expleo; Chennai District; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Expleo Academy

Competitive local benefits

Collaborative environment

Training opportunities

Job summary

Expleo is seeking a Security Engineer | Network in Chennai, India to design, review and advise on firewall, intrusion prevention, secure web gateway and remote access controls. The role is outside live operations and focuses on designs and assurance for UK-based activities.

You will work with offshore consultants and provide quarterly reviews, incident support and thorough reporting in a secure boundary. Strong English and certifications are required.

Qualifications

• Degree in computer science, networking, cybersecurity or related discipline or equivalent experience.
• Vendor firewall certification such as PCNSE or Fortinet NSE 4 or above.

Responsibilities

• Assess firewall, intrusion prevention and gateway change requests for security risk and design quality.
• Carry out quarterly firewall rule-base reviews and report findings.
• Analyze network security logs monthly and during incidents, provide recommendations.
• Track intrusion prevention signature releases and advise on critical updates.
• Contribute to secure web gateway, remote access and SSE/SASE policy design and review.
• Review network segmentation and IT/OT boundary controls and recommend improvements.
• Define audit logging requirements for network security devices.
• Produce internet access usage and network security reports on schedule.
• Maintain network security diagrams and configuration documentation.
• Support growth of Expleo's Cybersecurity Practice through knowledge sharing.

Skills

Firewall design

IPS/IDS

Web gateway

TCP/IP routing

ITIL processes

Reporting

Education

Degree in computer science, networking or cybersecurity

Tools

AlgoSec

Tufin

FireMon

Job description

Overview

Expleo is a trusted partner for end-to-end, integrated engineering, quality services, and management consulting for digital transformation. We help businesses harness technological change to deliver innovation, improve resilience, and support the secure delivery of complex products, platforms, and systems.

As part of the Expleo UK Cybersecurity Practice, you will join a managed Cyber Operations service for a major UK energy network operator that forms part of the UK's Critical National Infrastructure (CNI). The service is governed by Expleo in the UK, with a 24/7 UK Security Operations Centre delivered by a specialist partner and an Expleo consultancy team in India providing design, engineering and assurance expertise across the client's security tooling estate.

As a Security Engineer | Network, you will provide design, review, and analysis expertise across the client's firewalls, intrusion prevention, secure web gateway, and remote access controls.

This is a design, review and advisory role. You will work within Expleo's offshore consultancy team, outside the client's operational environment. You will not have access to the client's operational systems or data and will not make live changes. Operational changes are implemented by UK-based, security-cleared personnel; your work provides the designs, analysis, recommendations and assurance that those changes depend on. You will work from information released to the team through Expleo's controlled UK service boundary.

Responsibilities

Responsibilities

• Assess firewall, intrusion prevention and gateway change requests for security risk and design quality and prepare change designs for implementation by UK-based personnel.
• Carry out quarterly firewall rule-base reviews (and after significant change) using configuration exports, and report findings and recommendations.
• Analyse network security log and alert reporting monthly, and on request during incidents, and provide recommendations.
• Track intrusion prevention signature (digital vaccine) releases against the 48-hour application target and advise on critical updates, working with the Vulnerability and Patch Manager.
• Contribute to secure web gateway, remote access and CASB policy design and review.
• Review network segmentation and IT/OT boundary controls and recommend improvements.
• Define audit logging requirements for network security devices, in line with the logging design.
• Produce internet access usage and network security reports in the agreed format and to the agreed schedule.
• Maintain network security infrastructure diagrams and configuration documentation.
• Support the growth of Expleo's Cybersecurity Practice through knowledge sharing and technical contribution.

Qualifications

• Degree in computer science, networking, cybersecurity or a related discipline, or equivalent professional experience.
• Vendor firewall certification, e.g. PCNSE or Fortinet NSE 4 or above (at least one required).

CompTIA Security+, CySA+, CCNP Security, or an SSE/SASE vendor certification would be advantageous

Essential skills

Essential Skills

• Next-generation firewall design and rule-base review (e.g. Palo Alto, Fortinet, Check Point).
• Intrusion prevention and network detection technologies (e.g. Trend Micro TippingPoint, Cisco Firepower, Darktrace).
• Secure web gateway, SSE/SASE and remote access (e.g. Prisma Access, Zscaler, Netskope).
• TCP/IP, routing, VPN, network segmentation and IT/OT boundary concepts.
• Security log analysis and ITIL change and incident processes.
• Clear written reporting and documentation.

Desired skills

Desirable Skills and Experience

• Rule-base analysis tools (e.g. AlgoSec, Tufin, FireMon).
• Web application firewall and load balancer experience (e.g. F5 BIG-IP).
• OT network security experience (e.g. Nozomi, Claroty) and energy or CNI sector exposure.

Experience

Experience

• 3-6 years in network security engineering or operations.
• Experience of firewall rule-base review and change risk assessment in enterprise environments.

What do I need before I apply

• Have the right to work in India.
• Be based in, or willing to relocate to, Chennai.
• Be willing to complete Expleo enhanced pre-employment background screening (equivalent in standard to the UK Baseline Personnel Security Standard) and any additional vetting the client requires.
• Be able to work hours that overlap with the UK business day, with occasional out-of-hours advisory support during major incidents.
• Have excellent written and spoken English, suitable for engagement with senior UK stakeholders.
• Be comfortable working within a strict security boundary, with no access to the client's operational systems or data.

Benefits

• Collaborative working environment: we stand shoulder to shoulder with our clients and our peers through good times and challenges.
• We empower all passionate, technology-loving professionals to expand their skills and take part in inspiring projects.
• Expleo Academy enables you to acquire and develop the right skills by delivering a suite of accredited training courses.
• Competitive local company benefits [India HR to confirm the benefits package].
• Always working as one team, our people are not afraid to think big and challenge the status quo.

"We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their race, sex, disability, religion/belief, sexual orientation or age."