Network Security Engineer - Cloud & Incident Response

Intone Inc; New York (NY); On-site; USD 83,000 - 165,000; Full time

Job summary

Intone Inc is seeking a Network Security Engineer for a 6+ month contract in Midtown, New York. You will design, implement, and maintain robust security across diverse IT environments, ensuring data confidentiality, integrity, and availability.

You will configure Cisco ASA, ISE, IDS/IPS, and VPNs; perform vulnerability assessments and pen testing; monitor with SIEM tools; harden Linux/Windows/macOS/UNIX; manage IPsec/SSL PKI/FIPS; and lead disaster recovery and compliance efforts for NIST, ISO

Qualifications

• Experience designing and maintaining network security across diverse IT environments.
• Proficiency with Cisco ASA, ISE, IDS/IPS, and VPN solutions.
• Experience with vulnerability assessments and penetration testing.
• Knowledge of SIEM tools such as Splunk or SolarWinds.
• Familiarity with system hardening on Linux, Windows, macOS, and UNIX variants.
• Understanding of encryption protocols including IPsec, SSL/TLS, PKI, and FIPS.
• Knowledge of standards like NIST and ISO 27000.
• Experience with AWS and Google Cloud Platform.
• Familiarity with FISMA and FedRAMP requirements.

Responsibilities

• Develop and enforce comprehensive network security strategies aligned with industry standards such as NIST and ISO 27000 to protect organizational assets.
• Configure and manage network security devices including Cisco ASA firewalls, Cisco ISE for identity management, IDS/IPS systems for threat detection, and VPN solutions for secure remote access.
• Conduct vulnerability assessments and penetration testing to identify potential weaknesses within LAN, WAN, SAN, and cloud infrastructure environments such as AWS and Google Cloud Platform.
• Monitor network traffic using SIEM tools such as Splunk or SolarWinds to detect suspicious activities, perform log analysis, and initiate incident response procedures.
• Implement system hardening techniques on operating systems including Linux (Debian, CentOS, Ubuntu), Windows, macOS, and UNIX variants to minimize attack surfaces.
• Manage encryption protocols such as IPsec, SSL/TLS, PKI (Public Key Infrastructure), and FIPS standards to secure data in transit and at rest across diverse platforms.
• Lead incident recovery efforts by executing disaster recovery plans, system security plans, and threat detection and response strategies in accordance with FISMA and FedRAMP compliance requirements.

Skills

Network security design

Cisco ASA

Cisco ISE

IDS/IPS

VPN solutions

Vulnerability testing

Penetration testing

SIEM tools

OS hardening

OS hardening (Windows/macOS/UNIX)

IPsec/SSL PKI/FIPS

NIST/ISO27000

Cloud AWS/GCP

FISMA/FedRAMP

Tools

Splunk

SolarWinds

Job description

Intone Inc is seeking a Network Security Engineer for a 6+ month contract in Midtown, New York. You will design, implement, and maintain robust security across diverse IT environments, ensuring data confidentiality, integrity, and availability.

You will configure Cisco ASA, ISE, IDS/IPS, and VPNs; perform vulnerability assessments and pen testing; monitor with SIEM tools; harden Linux/Windows/macOS/UNIX; manage IPsec/SSL PKI/FIPS; and lead disaster recovery and compliance efforts for NIST, ISO