Perimeter Engineer

Job Description

This is an engineer role, and the candidate must be able to demonstrate ability to install, manage and maintain Firewalls in both on-premise and cloud environments. Demonstrated experience in supporting Palo Alto and Fortinet Firewalls as an engineer is REQUIRED. Holding one or more Technical Security Certifications is REQUIRED. Holding one or more vendor-neutral security certifications (e.g., Security +, CISM, CISSP) is a plus for this position.

This position supports a customer out of AUSTIN, TX, and will support the customer's 24x7 Security Operations Center (SOC). This position is in direct support (on-site at customer facilities) of an AT&T customer in the government sector. AT&T is providing Managed Security Service Provider (MSSP) functions related to the Security Operations Center (SOC) including Tier 1 through Tier 3 resource capabilities and activities related to security monitoring, threat, and vulnerability management and incident response (IR).

Responsibilities

• Provision firewalls and WAFs for customer.
• Develop and maintain rule sets for firewalls.
• Help determine tactics, techniques, and procedures (TTPs) for firewalls.
• Recommend computing environment vulnerability corrections.
• Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings).
• Perform patch management for MSSP Security tools and customer's security tools.
• Provides cybersecurity recommendations to leadership based on significant threats and vulnerabilities.
• Ability to work with provided security policies to design and implement network and security rules and configurations across various security platforms.
• Perform Changes to Firewalls as specified by customers.
• Ability to work with provided security policies to design and implement network and security rules and configurations across various security platforms.
• Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.
• Document and escalate incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.
• Create and document procedures and work instructions for use by the Security Engineering staff (Tier 2 through Tier
  3).
• Train and mentor other engineers as needed.

• Provides cybersecurity recommendations to leadership based on significant threats and vulnerabilities.

Preferred Experience and Attributes

• Ability to configure, deploy, and troubleshoot Palo Alto and Fortigate Firewall Platforms.
• Ability to configure, deploy, and troubleshoot Imperva and Fortigate Web Application Firewall Platforms.
• Under limited supervision support and engineering of the WAF and Firewall policies.
• Engineer and Architect solutions using WAFs, firewalls or other security products. Develops and maintains WAF and firewall security design documentation.
• Work with internal delivery teams to integrate applications with WAF policies.
• Provide accurate and timely reporting on all project deliverables.
• Recommends secure and effective solutions for system/application development in compliance with Information.
• Ability to analyze firewall configurations and rule sets.
• Working knowledge of Palo Alto Panorama or Forti Net Forti Manager.
• Working knowledge of SIEM integration preferred.
• Working knowledge of Windows Active Directory Domains.
• Working Knowledge of various Linux OS.
• Strong Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
• Ability to interpret the information collected by network tools (e.g. Nslookup, Ping, and Trace route).
• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Knowledge of cybersecurity and privacy principles.
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of encryption algorithms, cryptography, and cryptographic key management concepts.
• Knowledge of host/network access control mechanisms (e.g., access control list, capabilities lists).
• Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).
• Knowledge of incident response…