SecOps Security Engineer (L3) – Check Point, Palo Alto & Fortinet firewalls

HireOn; Pakistan; Hybrid; PKR 1,800,000 - 2,800,000; Full time

Job summary

HireOn in Pakistan is seeking a SecOps Security Engineer (L3) to join a 24x7 security operations team. You will manage enterprise firewall environments and provide advanced-level technical support across Check Point, Palo Alto, and Fortinet platforms.

The role emphasizes incident response, vulnerability remediation, policy review, and ITSM-aligned processes. You should have 7–10 years in security operations, strong hands-on firewall expertise, and the ability to troubleshoot complex issues in a

Qualifications

• 7–10 years of professional experience in Security Operations or a closely related cybersecurity function.
• Proven experience supporting large-scale enterprise security environments.
• Strong hands-on expertise with major firewall platforms: Check Point, Palo Alto, or Fortinet.
• Experience with WAF, VPN, MFA, proxy, and endpoint security technologies.
• Exposure to ITSM processes and security audits/compliance.

Responsibilities

• Administer and troubleshoot Check Point, Palo Alto, and Fortinet firewalls in enterprise environments.
• Design and optimize firewall policies, ACLs, NAT configurations, and security rules.
• Manage and troubleshoot VPN, MFA, WAF, IPS, and proxy security technologies.
• Investigate security alerts/incidents, perform root-cause analysis, and remediation actions.
• Conduct firewall rule reviews, security assessments, and configuration audits.
• Support DR, security readiness, and incident/change/problem management.

Skills

Firewall expertise

Security Operations

Incident response

Root cause analysis

Log & alert analysis

Tools

Check Point

Palo Alto Networks

Fortinet

WAF

VPN

Job description

Position: SecOps Security Engineer (L3) – Security Operations - Check Point, Palo Alto, and Fortinet firewalls

Work Model: Hybrid (can be any of the LHR, ISB or KHI offices)

We are looking for an experienced SecOps Security Engineer (L3) to join a large-scale 24x7 Security Operations environment. This role is suited for a security professional with strong enterprise infrastructure experience who can independently troubleshoot complex security issues, manage critical security platforms, and support incident response and operational security activities.

The position requires hands-on expertise across enterprise firewall technologies, security controls, endpoint protection, VPNs, web security, and vulnerability remediation.

What You’ll Be Responsible For

As an L3 Security Engineer, you will be responsible for maintaining and securing enterprise security infrastructure while providing advanced-level technical support.

Your responsibilities will include:

• Administer and troubleshoot Check Point, Palo Alto, and Fortinet firewalls in enterprise environments.
• Design, implement, review, and optimize firewall policies, ACLs, NAT configurations, and security rules.
• Manage and troubleshoot WAF, IPS, VPN, MFA, and proxy security technologies.
• Investigate security alerts and incidents, perform technical analysis, and identify root causes and remediation actions.
• Analyze firewall, endpoint, and security infrastructure logs to identify operational and security-related issues.
• Support enterprise EDR, DLP, and antivirus platforms, including troubleshooting and security policy administration.
• Conduct firewall rule reviews, security assessments, and configuration audits.
• Perform security hardening and assist with vulnerability remediation across security infrastructure.
• Participate in incident, change, and problem management processes within an ITSM environment.
• Support security compliance, audit, governance, and control requirements.
• Develop and maintain SOPs, technical documentation, configuration records, and operational reports.
• Participate in Disaster Recovery (DR), business continuity, and security readiness exercises.
• Provide L3 technical support for complex security infrastructure issues and work with relevant teams to resolve escalated incidents.

Experience & Technical Background

The ideal candidate should have:

• 7–10 years of professional experience in Security Operations, Network Security, or a closely related cybersecurity function.
• Proven experience supporting large-scale enterprise security environments.
• Strong hands-on expertise with one or more major firewall platforms, particularly Check Point, Palo Alto, or Fortinet.
• Practical experience with WAF, IPS, VPN, MFA, proxy, and endpoint security technologies.
• Experience handling security incidents, troubleshooting complex issues, and performing root-cause analysis.
• Strong understanding of firewall security concepts including ACLs, NAT, rule bases, access controls, and security policies.
• Exposure to vulnerability management, security hardening, audits, and compliance activities.
• Familiarity with enterprise ITSM processes, including Incident, Change, and Problem Management.
• Ability to work effectively in a 24x7 Security Operations environment.

Security Technologies

Experience with the following technologies will be highly relevant:

Network & Perimeter Security

• Check Point
• Palo Alto Networks
• Fortinet
• Firewall Policy & Rule Management
• NAT & ACL
• IPS / IDS
• WAF
• Proxy Security

Access & Endpoint Security

• VPN
• MFA
• EDR
• DLP
• Enterprise Antivirus

Security Operations

• Security Incident Investigation
• Log & Alert Analysis
• Vulnerability Management
• Security Audits
• Configuration Hardening
• Root Cause Analysis
• DR & Security Readiness

Certifications

Relevant industry certifications are advantageous, including:

• Check Point CCSA / CCSE
• Palo Alto Networks PCNSA / PCNSE
• Fortinet certifications
• CompTIA Security+
• Other recognized cybersecurity or network security certifications

Profile We’re Looking For

This role is best suited to a security professional who is comfortable operating at L3/advanced support level, can independently troubleshoot enterprise security infrastructure, and understands both the technical and operational aspects of running a 24x7 security environment.