Security Engineer - Firewall

Nexlogica; Downey (CA); On-site; USD 100,000 - 130,000; Full time

Job summary

A leading technology company is seeking a skilled Security Engineer to ensure secure system design while conducting security audits and vulnerability testing. Candidates must have a minimum of 10 years of relevant experience, particularly in Cisco Firewall technologies. This is a full-time position based in Downey, California with a focus on professional growth and technical excellence.

Qualifications

• Minimum of ten (10) years of experience with developing and implementing technical solutions to help mitigate security vulnerabilities.
• Configuring, managing, maintaining, and troubleshooting ACLs, S2S VPNs, BGP connections, IPSec.
• Experience in configuring Cisco ASA and FirePower firewalls.

Responsibilities

• Perform security audits, risk analysis, application-level vulnerability testing.
• Develop and implement technical solutions to help mitigate security vulnerabilities.
• Conduct research to identify new attack vectors.

Skills

Knowledge and experience in safeguarding sensitive data from cyber-attacks

Cisco ASA Firewalls engineering and operations in multi‑context mode

Cisco FirePower Firewalls engineering and operations

Cisco Command Line Interface (CLI) engineering and operations

Experience with Firepower Intrusion Prevention Systems (IPS)

Education

Bachelor’s degree in IT-related or Engineering field

Tools

Cisco Firewall Management Console (FMC)

Job description

Job ID# 10134 – Posted 10/27/22 – Remote, Downey CA

Position Description

A Security Engineer serves as the security engineer of complex technology implementations in a product-centric environment; is comfortable with bridging the gap between legacy development or operations teams and working toward a shared culture and vision; works to ensure developers create the most secure systems while enhancing the privacy of all system users; and has experience with white‑hat hacking and fundamental computer science concepts. The Security Engineer will perform security audits, risk analysis, application‑level vulnerability testing, and security code reviews; develop and implement technical solutions to help mitigate security vulnerabilities; and conduct research to identify new attack vectors.

Skills Required

• Knowledge and experience in safeguarding sensitive data from cyber-attacks.

Skills Preferred

• Cisco ASA Firewalls engineering and operations in multi‑context mode experience
• Cisco FirePower Firewalls engineering and operations experience
• Cisco Firewall Management Console (FMC) engineering and operations experience
• Cisco Command Line Interface (CLI) engineering and operations experience
• Cisco ACL reviewing, editing and maintaining experience
• Cisco Site-to-Site (S2S) Virtual Private Networking (VPN) experience with focus on double/twice NAT architecture
• Firepower Intrusion Prevention Systems (IPS) engineering and operations experience
• Palo Alto Firewalls experience (is secondary and does not replace Cisco experience required)
• Flexible schedule to support out‑of‑hours upgrades/patches/etc. and rotating on‑call schedule with teammates
• Ability to quickly learn and find technical information to resolve problems
• Ability to be on camera for all meetings, working sessions, etc., as requested
• Ability to work with outside vendors for additional support tasks

Experience Required

• Minimum of ten (10) years of experience with developing and implementing technical solutions to help mitigate security vulnerabilities.

Experience Preferred

• Firewall engineering and operations with primary experience in Cisco FWs
• Daily tasks include configuring, managing, maintaining, and troubleshooting
• Cisco ASA and FirePower firewalls
• Experience in configuring, managing, maintaining, and troubleshooting ACLs, S2S VPNs, BGP connections, IPSec, routing, optimizing/tuning, etc. in multi‑context mode
• Experience using Command Line Interface (CLI) for most tasks
• Experience using the Firewall Management Console (FMC)
• Configures, manages, maintains, and troubleshoots Cisco FirePower Intrusion Prevention Systems (IPSs)
• Works with the Datacenter Engineers and Security teams to add routes, troubleshoot complex networking issues, make recommendations on configurations, etc.

Education Required

Requires a bachelor’s degree in an IT‑related or Engineering field. Additional qualifying experience may be substituted for the required education on a year‑for‑year basis.

Additional Information

This position focuses on both data center firewall engineering and operations, and the secure deployment and monitoring of these environments. The ideal candidate will be very comfortable administering Cisco infrastructure including both CLI and FMC interfaces to accomplish their goals. They will be comfortable working in fast‑paced, critical support systems environments, and will have the ability to quickly learn and adapt to unfamiliar technologies or situations.

Job Details

• Seniority level: Mid‑Senior level
• Employment type: Full‑time
• Job function: Information Technology

Contact

Please send your resume and any additional information to our recruitment team at [e-mail]