Secure Firewall Engineering

Nexlogica; Downey (CA); On-site; USD 120,000 - 150,000; Full time

Job summary

A leading cybersecurity firm in Downey, CA, is seeking an experienced Security Engineer to enhance the security of complex systems. The role requires over 10 years of experience in firewall engineering, particularly with Cisco technologies. The ideal candidate will conduct security audits and implement solutions to mitigate vulnerabilities. An IT-related bachelor's degree is required. Remote work flexibility is appreciated. Compensation is competitive.

Qualifications

• At least 10 years of experience with developing and implementing technical solutions to mitigate security vulnerabilities.
• Experience in configuring, managing, maintaining, and troubleshooting Cisco ASA and FirePower firewalls.

Responsibilities

• Conduct security audits, risk analysis, and application-level vulnerability testing.
• Develop and implement technical solutions to mitigate security vulnerabilities.
• Work with outside vendors for additional support tasks.

Skills

Knowledge and experience in safeguarding sensitive data from cyber-attacks

Cisco ASA Firewalls engineering and operations in multi-context mode

Cisco FirePower Firewalls engineering and operations

Palo Alto Firewalls experience

Education

Bachelor’s degree in an IT-related or Engineering field

Tools

Cisco Command Line Interface (CLI)

Cisco Firewall Management Console (FMC)

Job description

Join to apply for the Secure Firewall Engineering role at Nexlogica.

Job ID# 10087 – Posted 7/07/22 – Downey, CA

Position Description

A Security Engineer serves as the security engineer of complex technology implementations in a product‑centric environment; is comfortable with bridging the gap between legacy development or operations teams and working toward a shared culture and vision; works to ensure developers create the most secure systems while enhancing the privacy of all system users; and has experience with white‑hat hacking and fundamental computer science concepts. The Security Engineer will perform security audits, risk analysis, application‑level vulnerability testing, and security code reviews; develop and implement technical solutions to help mitigate security vulnerabilities; and conduct research to identify new attack vectors.

Skills Required

• Knowledge and experience in safeguarding sensitive data from cyber‑attacks.

Skills Preferred

• Cisco ASA Firewalls engineering and operations in multi‑context mode experience.
• Cisco FirePower Firewalls engineering and operations experience.
• Cisco Firewall Management Console (FMC) engineering and operations experience.
• Cisco Command Line Interface (CLI) engineering and operations experience.
• Cisco ACL reviewing, editing and maintaining experience.
• Cisco Site‑to‑Site (S2S) Virtual Private Networking (VPN) experience with focus on double/twice NAT architecture Firepower Intrusion Prevention Systems (IPS) engineering and operations experience.
• Palo Alto Firewalls experience (secondary to Cisco experience).
• Flexible schedule to support out‑of‑hours upgrades/patches/etc. and rotating on‑call schedule with teammates.
• Ability to quickly learn and find technical information to resolve problems.
• Ability to be on camera for all meetings, working sessions, etc., as requested.
• Ability to work with outside vendors for additional support tasks.

Experience Required

This classification must have a minimum of ten (10) years of experience with developing and implementing technical solutions to help mitigate security vulnerabilities.

Experience Preferred

• Firewall engineering and operations with primary experience in Cisco FWs. Daily tasks include configuring, managing, maintaining, and troubleshooting Cisco ASA and FirePower firewalls.
• Experience in configuring, managing, maintaining, and troubleshooting ACLs, S2S VPNs, BGP connections, IPSec, routing, optimizing/tuning, etc. in multi‑context mode.
• Experience using Command Line Interface (CLI) for most tasks.
• Experience using the Firewall Management Console (FMC).
• Configures, manages, maintains, and troubleshoots Cisco FirePower Intrusion Prevention Systems (IPSs).
• Works with the Datacenter Engineers and Security teams to add routes, troubleshoot complex networking issues, make recommendations on configurations, etc.

Education Required

This classification requires a bachelor’s degree in an IT‑related or Engineering field. Additional qualifying experience may be substituted for the required education on a year‑for‑year basis.

Additional Information

This position focuses on both data center firewall engineering and operations, and the secure deployment and monitoring of these environments. The ideal candidate will be very comfortable administering Cisco infrastructure including both CLI and FMC interfaces to accomplish their goals. Due to the complexity and volume of the client’s network, the ideal candidate will be comfortable working in fast‑paced critical support systems environments, and will have the ability to quickly learn and adapt to unfamiliar technologies or situations.

Apply

Please send your resume and any additional information to our recruitment team at [e-mail].