Security Services Engineer (L2)

NTT DATA BUSINESS SOLUTIONS; Mumbai; On-site; INR 900,000 - 1,300,000; Full time

Job summary

NTT DATA BUSINESS SOLUTIONS in Mumbai seeks an L2 Network Security Engineer to operate and troubleshoot core security systems, focusing on incident response and robust data protection.

The role involves handling NGFW, IPS, web proxy, malware sandboxing, and Anti-DDoS technologies, with on-site duties and 24x7 support. Relevant certifications and 4–6 years of security experience are preferred.

Qualifications

• BE/BTech/BCA or MSc CS/IT required or equivalent.
• 4–6 years of relevant security operations experience.
• Certifications CEH/CCNA/CCNP sec + OEM Firewall (PCNSA/PCNSE) with 2 certs preferred.

Responsibilities

• Monitor firewall and IPS logs to detect threats and anomalies.
• Analyze malware sandboxing and perform incident response.
• Manage firmware updates and security patches for NGFW devices.
• Administer web proxy infrastructure and content filtering policies.
• Coordinate with L3 and stakeholders for incident containment and remediation.

Skills

NGFW expertise

IPS/IDS

Web security

DDOS protection

Incident response

Firewall log analysis

Education

BE/BTech/BCA or MSc CS/IT

Tools

Palo Alto NGFW

Check Point IPS/IDS

NetScout DDOS

Web Proxy

Job description

Job summary

The L2 Network Security Engineer is responsible for the operational management, maintenance, and troubleshooting of the bank's core network security systems. This role is focused on handling security incidents, implementing change requests, and ensuring the robust protection of the bank's sensitive data and network infrastructure using NGFW, IPS, Web Proxy, Malware Sandboxing, and Anti-DDoS technologies.

Key Responsibilities

• Monitor and analyze firewall and IPS logs to detect and respond to security threats and anomalies.
• Analyze reports from malware sandboxing systems to identify zero-day threats and advanced persistent threats (APTs).
• Monitor Anti-DDoS mitigation systems to protect the bank's services from volumetric application-layer attacks.
• Integrate sandboxing alerts with incident response workflows and threat intelligence platforms.
• Provide expert-level troubleshooting for complex firewall- and IPS-related issues.
• Manage and implement firmware upgrades and security patches for NGFW devices.
• Administer and manage web proxy infrastructure and content filtering policies.
• Troubleshoot web connectivity and protocol issues (e.g., HTTP, HTTPS, SSL) and analyze related logs.
• Participate in testing and validating the effectiveness of Anti-DDoS protections.
• Knowledge of malware analysis and sandboxing concepts.
• Act as a key player in incident response, participating in P1/P2 bridge calls and driving network-related incidents to resolution.
• In-depth technical troubleshooting and issue resolution. Implementation, Management and Monitoring all cyber security Solutions/ Devices/ Components.
• Deployment and Installation of all in scope solutions and their monitoring Implementation of service improvements.
• Collaboration with L3 for complex issues. Regular configuration tasks and change management
• Shall analyze incidents identify root causes and act for containment and remediation.
• Shall co-ordinate with the different departments/stakeholders for incident analysis and remedial action.
• Provides engineering analysis and architectural design of technical solutions.
• Closely monitoring of overall health of all solutions and submitting reports to the Bank with related parameters on a daily basis.

Role details

• Role: L2- Next Gen Firewall with IPS, Proxy, Malware Sandboxing Anti Dods
• Level: L2 (24*7)
• Education*: BE/B-Tech/BCA or masters degree in CS/IT
• Certification*: CEH/CCNA/CCNP sec + OEM Firewall (PCNSA/ PCNSE)/Anti-DDOS solution (2 certifications)
• Experience*: 4-6 yearsrelevant experience.
• Technology (OEM)*: Network/Cyber Security, IPS-Checkpoint, Malware Sandboxing-Palo Alto, Perimeter DDOS-NetScout
• Skills: Candidate should have expertise in NGFW platforms such as Palo Alto, IPS/IDS platforms, web security technologies, DDOS and other security devices.

Workplace type

On-site Working