Security Engineer — Check Point / Fortinet

Neos Talent; New York (NY); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Neos Talent in New York City is seeking a hands-on Security Engineer to bolster production network security in a major financial services environment in the NYC area.

The role focuses on firewall, proxy, DNS and load-balancing infrastructure with Check Point and Fortinet expertise. You will work in a hybrid pattern (3 days in office), handle incidents, changes, and RCA in a highly controlled enterprise setting.

Qualifications

• Recent hands-on experience with Check Point and Fortinet / FortiGate.
• Strong understanding of firewall policy changes, NAT, VPNs, rule reviews and troubleshooting.
• Operational experience with F5 LTM / GTM load balancing.
• Experience supporting DNS / DHCP, ideally with Infoblox.
• Exposure to enterprise proxy environments, ideally Blue Coat and/or McAfee.
• Strong production support background, including incidents, controlled changes, documentation and RCA.
• Comfortable troubleshooting across TCP/IP, routing, firewalls, proxies, DNS and application connectivity.
• Able to work in a structured, highly controlled enterprise environment.

Responsibilities

• Provide hands-on BAU network security engineering in a major financial services environment.
• Review and implement firewall policies, NATs, and VPN configurations with careful change control.
• Troubleshoot across TCP/IP, routing, DNS, proxies and application connectivity in production.
• Coordinate incident response, RCA documentation and operational changes with the team.

Skills

Check Point

Fortinet / FortiGate

Firewall policies

NAT / VPNs

F5 LTM/GTMs

DNS / DHCP

Infoblox

Proxy environments

Tools

Infoblox

Blue Coat

McAfee

F5 LTM/GTM

Job description

Security Engineer — Check Point / Fortinet

Work authorization: H1B sponsorship is not supported. US Citizens, Green Card holders, OPT EAD and STEM OPT candidates can be considered.

We are supporting a live requirement for a hands‑on Security Engineer to join a major financial services environment in the NYC area.

This role is focused on production network security engineering, not general network support or high‑level architecture. The ideal profile will have recent, practical experience supporting firewall, proxy, DNS and load‑balancing infrastructure in a large enterprise environment.

Role overview:

• Location: NYC / Jersey City area
• Working pattern: Hybrid — typically 3 days per week in office
• Benefits: Healthcare, wider benefits package and flexible working
• Role type: Hands‑on BAU / L3‑L4 network security engineering

Core experience required:

• Recent hands‑on experience with Check Point and/or Fortinet / FortiGate
• Strong understanding of firewall policy changes, NAT, VPNs, rule reviews and troubleshooting
• Operational experience with F5 LTM / GTM load balancing
• Experience supporting DNS / DHCP, ideally with Infoblox
• Exposure to enterprise proxy environments, ideally Blue Coat and/or McAfee
• Strong production support background, including incidents, controlled changes, documentation and RCA
• Comfortable troubleshooting across TCP/IP, routing, firewalls, proxies, DNS and application connectivity
• Able to work in a structured, highly controlled enterprise environment

Financial services or banking experience would be helpful, but the main priority is recent hands‑on depth across the core technologies.

This is best suited to someone who enjoys being close to the infrastructure, solving production issues, supporting critical systems and taking ownership of technical changes.

#NetworkSecurity #FirewallEngineer #Checkpoint #Fortinet #FortiGate #F5 #Infoblox #BlueCoat #CyberSecurityJobs #JerseyCityJobs #NYCJobs #FinancialServices