Security Consultant

Sharpedge Solutions Inc; Dallas (TX); Presencial; USD 90.000 - 130.000; Jornada completa

Descripción de la vacante

Sharpedge Solutions Inc in Dallas is seeking an experienced security professional to manage and harden enterprise firewalls and related security infrastructure. You will work with Cisco ASA, FXOS, Palo Alto firewalls and Panorama, implement VPN authentication, and tune security policies to protect critical systems.

Responsibilities include incident handling, log analysis, and collaboration with IT teams to ensure compliance with ITIL processes.

Formación

• Hands-on experience with Cisco ASA, FXOS, Palo Alto firewalls and Panorama.
• Deep understanding of Palo Alto concepts: security zones, policy ordering, audit logs, address books.
• Experience with Cisco ISE for VPN authentication and AAA policy creation.
• Knowledge of routing protocols and security incident handling.
• Strong familiarity with Symantec DLP and various security technologies (IDS/IPS, endpoint security).
• Experience with RSA SecurID, Content Security Gateways, TACACS/AAA.
• Familiar with F5 load balancers and ITIL processes.

Responsabilidades

• Configure Cisco and Palo Alto firewalls.
• Participate in on-call rotation and incident response.
• Review access control lists and audit firewall configurations.
• Collaborate with COE resources to resolve technical issues.
• Manage log management solutions and security monitoring.

Conocimientos

Cisco ASA

FXOS

Palo Alto

Panorama

VPN authentication

Cisco ISE

Routing protocols

Security incidents

Symantec DLP

ITIL processes

F5 load balancers

Audit logs

Security Zones

Policy ordering

RSA SecurID

IDS/IPS

Endpoint security

TACACS/AAA

Herramientas

Cisco ASA

Palo Alto Firewalls

Cisco ISE

TACACS/AAA

Descripción del empleo

• Must have hands on experience with Cisco ASA, FXOS, Palo Alto firewalls and Panorama.
• Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc.
• Must have hand on Cisco ISE for VPN authentication, AAA, policy creation.
• Understanding and experience with routing protocols
• Handson Skill on handling Security Incidents and plan mitigation.
• Good understanding of Symantec DLP
• Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN's, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred
• Understanding of F5 load balancers.
• Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern
• Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams,
• Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes

Technical skill set

• Must have hands on experience with Cisco ASA, FXOS, Palo Alto firewalls and Panorama.
• Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc.
• Must have hand on Cisco ISE for VPN authentication, AAA, policy creation.
• Understanding and experience with routing protocols
• Handson Skill on handling Security Incidents and plan mitigation.
• Good understanding of Symantec DLP
• Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN's, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred
• Understanding of F5 load balancers.
• Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern
• Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams,
• Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes

Non-Technical Responsibilities

• Coordinate with other team members for availability of capable resource
• Ensure quality work - review and validate the technical configuration changes
• Coordinate with COE (Centers Of Excellence) resources for resolution of technical issues/problems before escalation to OEM (Original Equipment Manufacturers)

Technical Responsibilities

• Configuration of Cisco and Palo Alto Firewalls
• Articulate or highlight risks/dependencies
• Participation in an on-call support rotation required
• Firewall Auditing and review access control lists and updating firewalls as needed
• Interacting with various teams in managing the log management solution.
• Adhering to high-quality standards and best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations
• Analyze, troubleshoot, and investigate network security-related incident based on security platform reporting, network traffic, log files, host-based and automated security alerts

Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations