Network Security Engineer

ViewQwest; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

ViewQwest is seeking a Network Security Engineer responsible for design, implementation, maintenance, and continuous improvement of network security solutions. You will lead posture management, perimeter defense controls, compliance activities, and automation initiatives to protect critical infrastructure.

You should have 5–10 years of information security and IT risk management experience with strong knowledge of security protocols, firewalls, VPNs, and risk management.

Qualifications

• Bachelor’s or associate degree in IT, CS, or related field.
• 5–10 years in information security with focus on network security.
• Certifications like CISSP, CCNP Security, PCNSA/PCNSE advantageous.
• Hands-on with firewalls, VPNs, and network security appliances.
• Experience with automation tools such as Ansible and Python.
• Strong problem-solving, communication and interpersonal skills.

Responsibilities

• Lead monthly patching cycles for network security devices and firmware.
• Automate patch deployment via Ansible or vendor tools.
• Perform configuration hardening audits and remediate posture drifts.
• Report posture metrics to leadership.
• Monitor health and performance of network security platforms.
• Perform backups and disaster recovery testing.
• Manage device groups, templates, and stacks.
• Push policy changes safely and tune logging and reporting.
• Design and configure firewalls, VPNs, NAC, and segmentation policies.
• Integrate security controls with monitoring and SIEM tools.
• Achieve and maintain ISO 27001, NIST, PCI-DSS compliance during audits.
• Remediate audit findings within SLAs.
• Share threat intelligence and best practices with the security team.

Skills

Network security

Firewalls

VPNs

Python scripting

Ansible

Panorama API

Risk management

Communication skills

Security architectures

Education

Bachelor’s or Associate degree in IT/CS

Tools

Panorama

SIEM tools

Job description

We are looking for a Network Security Engineer to be responsible for the design, implementation, maintenance, and continuous improvement of network security solutions. You will lead network security posture management, system operations, perimeter defense controls, compliance activities, and automation initiatives to protect critical infrastructure.

To be successful in this role, you should have solid experience in information security and network infrastructure, with a strong understanding of security protocols, firewalls, VPNs, and risk management. You should also possess strong interpersonal and communication skills and be able to collaborate effectively with a wide variety of stakeholders.

Primary Responsibilities:

Network Security Posture & Firmware Patching

• Lead monthly patching cycles for network security devices and firmware
• Automate patch deployment where possible (e.g., via Ansible or vendor tools)
• Perform configuration hardening audits and remediate posture drifts
• Report posture metrics and status to leadership

Management and Maintenance of Network Security Systems

• Monitor system health and performance of network security platforms
• Perform regular backups and disaster recovery testing
• Manage device groups, templates, and stacks
• Push policy changes safely and tune logging and reporting

Perimeter Defense & Network Security Controls Implementation

• Design and configure firewalls, VPNs, Network Access Control (NAC), and segmentation policies
• Conduct pre- and post-implementation testing
• Integrate security controls with monitoring and SIEM tools

Compliance, Auditing & Security Hardening

• Achieve and maintain compliance with relevant standards (e.g., ISO 27001, NIST, PCI-DSS network controls) during annual and internal audits
• Remediate all audit findings within defined SLAs

Knowledge Sharing, Automation & Professional Development

• Automate repetitive tasks using Python, Ansible, Panorama API, or other tools
• Pursue relevant professional certifications and stay current with emerging threats and technologies
• Share threat intelligence, findings, and best practices with the broader security team

Requirements:

• A bachelor’s or associate’s degree in IT, Computer Science, or a related field
• 5–10 years’ experience in information security and IT risk management, with a strong focus on network security
• IT security or risk assessment certifications are advantageous (e.g., CISSP, CCNP Security, PCNSA/PCNSE, or equivalent)
• Hands‑on experience managing firewalls, VPNs, and network security appliances
• Advanced understanding of security protocols, cryptography, network segmentation, and security architectures
• Strong working knowledge of IT risks, security implementations, and common operating systems
• Experience with automation tools such as Ansible, Python scripting, and vendor APIs is highly desirable
• Excellent problem‑solving, communication, teaching, and interpersonal skills