Senior Network Security Analyst

ZEISS Group; Bengaluru; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

ZEISS India in Bengaluru is seeking a Senior Network Security Analyst to independently analyze and resolve complex network and security incidents, ensuring service stability. You will monitor Zeiss Cloud Proxy, VPN, CDN, WAF, SSE, and WAN services using logs and packet captures, collaborating with Service Owners and internal teams to drive incidents to resolution.

The role requires hands-on expertise in at least one domain (WASP preferred) with strong incident analysis, root-cause techniques,

Qualifications

• 5-7 years of experience in incident, request, change, and problem management.

Responsibilities

• Lead incident analysis and prepare concise root-cause reports.
• Collaborate with Service Owners and teams to drive resolutions.
• Support WASP/WAF/CDN and SSE/WAN troubleshooting end‑to‑end.
• Mentor junior engineers and contribute to SOP/KB updates.

Skills

Incident management

Troubleshooting

Root cause analysis

Documentation

Communication

Tools

Akamai CDN

Akamai WAF

Zscaler ZIA/ZPA

SD-WAN Velocloud

MPLS

Job description

ZEISS in India

ZEISS in India is headquartered in Bengaluru and present in the fields of Industrial Quality Solutions, Research Microscopy Solutions, Medical Technology, Vision Care and Sports & Cine Optics.

ZEISS India has 3 production facilities, R&D center, Global IT services and about 40 Sales & Service offices in almost all Tier I and Tier II cities in India. With 2200+ employees and continued investments over 25 years in India, ZEISS’ success story in India is continuing at a rapid pace.

Further information at ZEISS India.

Job description

As a member of the L3 NOC Team, the Senior Network Security Analyst will be responsible for independently analyzing and resolving complex network and security incidents, ensuring service stability, and driving continuous operational improvement. The role involves monitoring and troubleshooting Zeiss Cloud Proxy, VPN, CDN, WAF, SD-WAN, RAS and SSE services using logs, monitoring platforms, packet captures, and performance data. The Senior Analyst will collaborate with Service Owners, internal teams, and external providers to drive incidents to resolution.

The Senior Network Security Analyst is expected to act as a technical escalation point and role model within the team, demonstrating strong accountability, ownership, initiative, and leading from the front attitude. The engineer should be willing to take ownership of projects and operational improvements end-to-end and drive them from the front. Expertise in all three i.e. SSE, WASP and WAN handle is not mandatory. The candidate should possess strong hands‑on expertise in at least one of these areas, with WASP expertise being preferable. Proficiency in a second technology domain is highly desirable and would be considered an added advantage for this position. The candidate should demonstrate the ability and willingness to develop knowledge across the remaining technology areas

Role requirements

• 5-7 years of experience in incident, request, change, and problem management.

• Strong experience in incident analysis, evidence collection, troubleshooting, root‑cause analysis, documentation, and communication.

• Experience in working with at least one but preferable with WASP.

• WASP: Akamai Web Application Firewalls (WAF) & Akamai Content Delivery Networks (CDN)

• SSE: Zscaler Internet Access and Zscaler Private Access

• WAN: Wide Area Network

Akamai (CDN & WAF)

• Possesses strong working knowledge of Akamai CDN and WAF components, including cache behavior, basic rulesets, property configurations, and traffic flows.
• Supports standard configuration tasks such as updates to Property Manager, CP code assignments, basic redirects, and application delivery adjustments.
• Demonstrates strong understanding of web and application-layer technologies, including HTTP/HTTPS request and response flows, headers, methods, status codes, cookies, TLS/SSL, DNS, caching mechanisms, origin connectivity, and common web application architectures..
• Performs advanced troubleshooting and root‑cause analysis for CDN performance degradation, latency, access failures, HTTP errors, origin connectivity issues, cache‑related problems, WAF false positives/negatives, and application availability issues.
• Troubleshoots WASP issues end‑to‑end across the complete traffic path, including client, DNS, network, CDN/WAF edge, security policies, origin infrastructure, and application layers, to accurately isolate the point of failure.
• Uses Akamai monitoring, analytics, logging, diagnostic tools, and traffic data to identify anomalies, analyze traffic behavior, correlate events, and drive evidence‑based troubleshooting. Applies equivalent monitoring and diagnostic capabilities for Tencent when supporting China‑specific services. Ability to also learn additional monitoring tools such as Grafana etc.
• Applies a structured and collaborative approach when working with Service Owners, application teams, and internal stakeholders.
• Adheres to processes, documents SOP/KB gaps and employs situational awareness and problem‑solving skills when addressing operational challenges.

Zscaler (ZIA & ZPA)

Aligned to SSE BSL Proficiency Level

• Possesses a strong understanding of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) architecture, including forwarding methods, App Connectors, ZEN/VZEN components, and authentication workflows.
• Demonstrates working knowledge of OSI layers and protocol behaviors (TCP/UDP, HTTP/S, DNS, FTP) as applied to Zscaler traffic flows.
• Understands and applies Zscaler policy structures including URL filtering, access control, authentication policies, SSL inspection, and cloud firewall.
• Independently troubleshoots complex connectivity, policy, authentication, and performance issues using logs, packet captures, and endpoint data.
• Leads TAC cases with structured diagnostics, troubleshooting evidence, testing results, and clear communication.
• Displays strong collaboration and communication skills with Service Owners, peers, and cross‑functional teams.
• Adheres to operational processes, identifies gaps in SOPs/KBs, and demonstrates situational awareness to enhance overall NOC operations.
• Acts as a technical escalation point and supports junior engineers with complex troubleshooting.

SD-WAN (Velocloud & MPLS)

Aligned to WAN Proficiency Level

• Strong understanding of SD‑WAN architecture, overlay tunnels, routing, business policies, path selection, DMPO, and WAN transport.

• Interprets edge monitoring dashboards (Network Overview, QoE scores, link statistics) to identify performance anomalies and trends.

• Supports day‑to‑day configuration, monitoring, and basic troubleshooting of edge connectivity, routing behavior, path changes, and business policies.

• Accesses Fortinet firewalls and WAN transport devices to review configurations, analyze logs, and correlate root causes.

• Identifies anomalies in routing, path selection, DMPO behavior, or link degradation and raises actionable escalations to the appropriate teams.

• Provides structured and timely ticket updates, ensuring clear communication with peers and Service Owners.

• Contributes to SOP/KB improvements, documenting operational learnings and best practices for future team benefit.

• Possesses strong knowledge of networking fundamentals including the OSI model, TCP/IP, routing, switching, and common network services, with the ability to extend this into cross‑functional areas such as DNS resolution, IP reachability, and basic firewall rule checks when guided.

• Demonstrates strong understanding of network protocols, ports, and common application services, and is able to apply this knowledge while collaborating across teams (e.g., firewall, DNS, or infrastructure teams).

• Strong hands‑on experience with network troubleshooting tools such as tcpdump, WinMTR, nslookup, netstat, traceroute, supporting cross‑functional diagnostic tasks following defined standards.

• Good experience using analysis tools like Wireshark, Fiddler, and browser developer tools, enabling structured troubleshooting of web applications and mid‑level connectivity issues.

• Capable of troubleshooting web applications, connectivity issues, and network performance problems, while ensuring activities align with organizational security, compliance, and governance requirements.

• Familiar with major operating systems (Windows, Linux) and commonly used browsers (Edge, Chrome, Firefox, Safari).

• Demonstrates strong communication and documentation skills, actively contributing to SOP/KB accuracy and updates, and ensuring work is consistent with compliance expectations.

• Shows solid time management and task‑prioritization abilities, effectively coordinating with peers and cross‑functional teams.

• Demonstrates leadership through mentoring, knowledge sharing, and technical guidance to junior team members.

• Willingness to work in 24×7 rotational shifts, provide on‑call support as required, and assist with cross‑functional operational tasks such as basic data center coordination (case submissions, labeling, access requests) when needed. Willingness to work 24x7 rotational shifts and be available on‑call when required.