Network Security Engineer

Metrobank; Philippines; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Metrobank is seeking a Network Security Engineer to design, implement, and enforce security plans across the bank’s IT infrastructure. You will support the Security Architect, maintain tools, and lead security initiatives to protect critical systems and data.

Key responsibilities include evaluating security solutions, configuring devices, and coordinating with ISD teams to ensure robust security controls and disaster recovery readiness.

Qualifications

• Graduate of any college degree in Computer Science or Information Security, or related technical field.
• Extensive knowledge of LAN/WAN topologies, cryptographic methods and OS (Windows/Linux/Unix), databases, wireless, cloud technologies and security tools.
• Certifications may include SANS GIAC, CISSP, CISM, CompTIA Security+ or equivalent.
• At least 3+ years’ experience in designing, implementing and maintaining security solutions.
• Analytical and risk identification skills to analyze information security risk and recommend actions.
• Scripting and programming – programming/scripting skills are an advantage.
• Strong written and oral communication to report assessments and security weaknesses.
• Should also be abreast with security best practices and emerging threats.
• Self-starter with action orientation to drive remediation and reduce risk.
• Good teamwork and collaboration skills; ability to lead security initiatives.
• Good project management skills to deliver tasks within deadlines.
• Clear ability to articulate complex security topics in simple terms.

Responsibilities

• Develops detailed designs for implementation based on approved IT security systems and architecture.
• Formulate, review and maintain IT security policies, standards, and guidelines for securing IT environments and third-party services.
• Provide support to CPSD/SQRD as security SME for IT security and network architecture; identify design gaps and recommend changes.
• Evaluate cost-effective IT security solutions and prepare business cases.
• Manage testing of technical controls related to network security and monitor implementation.
• Define and document network security tool configurations and ensure secure operation.
• Perform regular security configuration reviews and optimize control usage.
• Monitor and assist ITG admins in security devices/issues resolution.
• Review installation and changes to security infrastructure and assess impact on posture.
• Lead implementation of baseline security standards across legacy systems.
• Collaborate with ISD departments to ensure holistic service to internal customers.
• Establish disaster recovery strategy for security tools and test regularly.
• Stay updated on security trends, vulnerabilities, threats; drive improvement programs.

Skills

LAN/WAN networking

Cryptography

OS knowledge

Cloud

Security tools

Scripting

Communication

Project management

Teamwork

Education

CS/InfoSec degree

Job description

Job Description:

Be#InGoodHandswithMetrobank!

HereatMetrobank,wedontsimplyhireemployees—wehonefutureleaders.Weprovideopportunitiesthatenhanceyourskillsandunlockyourtalents,helpingyouevolveintoawell-roundedindividual.Wesupplyyouwithallthepiecesyouneedtodoyourbestwork,unleashingyourfullpotentialtohelpyousecureyourfutureandleadafulfillingcareer.AndwithMetrobanksstrongheartforthecommunity,youhavethechancetogivebackandmakeworthwhilecontributionstoournationseconomicandsocialdevelopment.WithMetrobank,ameaningfullifeiswithinyourreach!

Position Title: Network Security Engineer

Job Summary:

Develop and enforce security plans and standards; ensures that network and system security best practices are executed and implemented. Prepare the plans to deliver/implement the security infrastructure strategy prepared by the Security Architect. Provide support to the Security Architect in enterprise security projects including defining configuration standards, testing and implementation. Leads the research, evaluation and implementation of ISD security tools and small projects. Provide risk assessment support to CPSD and SQRD related to architecture for security concerns and/or security controls to be architected. Maintain and mature the security tools to ensure effective prevention and detection of incidents. Prepare the necessary documentation for project approval and implementation. Act as the subject matter expert on security of assigned technology domain/area (i.e., endpoint, operating system, database, etc.).

Specific Duties & Responsibilities:

• Develops detailed designs for implementation base on the approved IT security systems and infrastructure architecture.


• Formulate, review and maintain IT security policies, technical standards, internal ISD procedures and guidelines related to securing the information processing environment, IT facilities and connected third party services/providers of the Bank.


• Provide support to CPSD and SQRD, serve as the security subject matter expert related to IT security and network infrastructure architecture. Identify security design gaps in existing and proposed architectures and recommend changes or enhancements.


• Evaluate cost-effective solutions and prepare the business case for IT security projects.


• Manage the testing of technical controls related to network security and monitors its implementation.


• Define and document network security tool/device standard configuration parameters. Ensures that network security controls are securely configured and functions effectively and efficiently.


• Perform regular security configuration reviews, ensure efficacy of controls and use is optimized.


• Monitor and if necessary, assist ITG administrators in ensuring problems of security devices/systems are timely resolved.


• Review installation and changes to security infrastructure, i.e., firewall, VPN, routers, IDS scanning technologies, servers and network devices and assess impact to security posture and operations.


• Manages the implementation of baseline system security standards various legacy systems.


• Collaborates and coordinates with other ISD Departments to ensure that holistic ISD service is provided to internal customers.


• Establish disaster recovery strategy of network security tools implemented and ensures it is regularly tested for effectiveness.


• Stay up to date with latest security technology and trends, vulnerabilities and threats.


• Proactively works with the SAID Head in implementing programs for the continuous improvement of the bank’s information security plans and strategies.


• Perform other information security governance, risk and compliance related duties and responsibilities as directed by the SAID Head.

Qualifications:

• Graduate of any college degree in Computer Science or Information Security, or related technical field of expertise.


• Extensive/in-depth knowledge and understanding of LAN/WAN networking topologies and protocols, cryptographic methods and schemes, operating systems (Windows, Linux, Unix), database systems, wireless technologies, cloud technologies and various security tools and technologies in various information security domains.


• Certification may include SANS GIAC, CISSP, CISM, CompTIA Security+ or equivalent.


• At least 3+ years’ experience in designing, implementing and maintaining security solutions.


• Analytical and risk identification skills to analyze a variety of information security related risk situations and develop recommendations on the best course of action


• Scripting and programming – computer programming and scripting skills is an advantage.


• Strong written and oral communication skills to write technical reports on their assessments and communicate potential security weaknesses.


• Should also be abreast with security best practices and knowledge of common and emerging security threats.


• Self-starter, result-orientated in terms of disposition for corrective action to drive the remediation to reduce the risk exposure of the bank.


• Have good teamwork and collaboration skills: good team players with the ability to lead security initiatives.


• Good project management skills to lead and manage accomplishments of assigned tasks/projects within the predetermined time-frame


• Good communication skills: to effectively articulate and explain complex security topics in simple language and easy to understand concepts.

Other Details:

Rank: Junior Officer

Unit: FCS / Information Security Division / Security Architecture and Innovation Department

Location: Metrobank Center, BGC

Requirements: