Network Security Engineer

WE-PLUS PTE. LTD.; Singapore; On-site; SGD 80,000 - 100,000; Full time

Job summary

A leading IT security firm in Singapore is seeking an IT Security Professional to support firewalls, micro-segmentation, and intrusion prevention systems. Responsibilities include ensuring IT governance, designing security workflows, and troubleshooting firewall issues. Candidates should possess a Bachelor’s degree in Computer Science and at least 5 years of IT Security experience, notably in Network Security. Strong communication skills and experience with specific security tools are essential.

Qualifications

• At least 5 years of experience in the IT Security domain, preferably in Network Security.
• Strong understanding of Network Security and Micro-segmentation applications.
• Hands-on experience with firewall filtering mechanisms.

Responsibilities

• Monitor and control IT Governance on Network Security processes.
• Design and document security implementation workflows.
• Troubleshoot and consult on firewall-related inquiries.

Skills

Network Security

Firewall Rule coding

Micro-segmentation

Technical support

Communication skills

Programming/Scripting (Python, PowerBI)

Education

Bachelor’s degree in Computer Science or related field

Tools

FortiGate

Checkpoint R81.10

Illumio PCE Version 24.X

F5 ASM

ServiceNow

Job description

Role Summary

The Network Security team in Singapore is currently looking for an IT Security Professional to support security tools such as firewalls, Micro-segmentation / ZTN, WAF and Intrusion Prevention/Detection Systems for BAU and projects.

Main Responsibilities

• Monitor and control tasks to ensure IT Governance on Network Security processes are executed correctly.
• Design, validate, implement and document end-to-end processes workflows on security implementations.
• Handle internal customer inquiries with firewall consultation and troubleshoot technical issues effectively.
• Ensure to complete the deliverables for global projects within the scope of ProdSec – Network Security.
• Implement the network segmentation concepts to achieve Zero-trust network solutions and micro segmentation solutions.
• Implement firewall rules and troubleshoot when incidents occur, Participate in update/ upgrade/ migration of security tools used by the team.
• Manage Zero-Day web-security vulnerabilities and lead security-operations activities.
• Analyze web-security policies and signature updates, assess risk to banking applications, and recommend mitigations.
• Liaise with external vendors for technical support and new-project solutions.
• Identify process improvement opportunities and automate or finetune workflows using existing or new tools.
• Participate in update/upgrade/migration of security tools used by the team.
• Maintain clear and functional documentations on process guides, technical instructions, etc.
• Support additional tasks and initiatives within the Network-Security team as required.
• Participate in the Permanent Control framework, helping to embed policies and procedures (e.g., Control Plan) into daily operations.
• Assist with Internal-Audit response activities.
• Contribute to the enhancement of Production-Security tools used for tracking and managing security incidents.

Qualifications & Experience

• Bachelor’s degree in Computer Science or a related field.
• At least 5 years of experience in the IT Security domain, experience in Network Security skills is most preferred.
• Proficient in Microsoft office products and ServiceNow.
• Strong fundamental understanding of Network Security, Network and Micro-segmentation and its real-world applications.
• Must have knowledge on the Firewall Rule coding and Rule analysis on the FortiGate / FortiManager, Checkpoint R81.10 or R81.20 Smart console.
• Hands-on experience in firewall filtering mechanisms and must be good in understanding far-end coding and Zero-trust network principles.
• Experience in Illumio PCE Version 24.X and implementation of micro-segmentation with label-based policy implementation will be highly preferred.
• Handle the WAF operations – signature updates, enforcements and review the application security events and take appropriate actions in strengthening application security policies.
• Working experience on F5 ASM, Broadcom AVI Nextgen Load balancing/ WAF module is recommended.
• Excellent communication and advocacy skills, both verbal and written, with the ability to express complex technical issues in an easily understood manner.
• Proficiency in writing programming/ scripting languages (Python, PowerBI, any other language) is a plus.
• Experience in handling production issues and collaborate with other operational teams and drive for the root cause analysis.
• Extend the support in the off-business hours to fix any production impacting security incidents.
• Any Firewall/NAC Certification, WAF and any relevant Security Certification.
• Experience in Project management, must be able to work in dynamic, rapidly changing environments.
• Organized, self-motivated, autonomous, curious, service-oriented and highly implicated in IT Security.