Senior Network Security Engineer QAR

The Senior Network Security Engineer is responsible for implementing and maintaining advanced security solutions that protect the organisation's network infrastructure. This role involves leading security operational initiatives, responding to complex security incidents, and ensuring compliance with industry standards and best practices. The engineer will work closely with cross‑functional teams to safeguard systems, services, and data against evolving threats.

• Lead investigation and remediation of advanced security incidents, intrusions, and vulnerabilities.
• Perform threat analysis, log correlation, and forensic review using logs and monitoring tools.
• Implement and maintain network security systems and security technologies (Firewalls, WAF, proxy systems, email gateways, packet shapers, and other security technologies).

• Conduct regular vulnerability assessments, coordinate penetration testing, and develop remediation plans.
• Ensure compliance with standards such as ISO 27001, NIST, CIS Benchmarks, and GDPR.
• Perform risk assessments and recommend improvements across network, cloud, and hybrid environments.

• Manage and optimise firewall rule sets, security policies, and web filtering systems.
• Oversee VPN technologies (IPSec, SSL), network segmentation, and Zero Trust access models.
• Implement secure authentication and identity‑based access control systems.

• Automate security tasks and operations.
• Integrate security tools where applicable.
• Improve processes for monitoring, patching, change control, and reporting.

• 6+ years of experience in Network Security Engineering or related roles.

• Bachelor's degree in Computer Science, Cyber Security, Information Technology, or a related field.

• Strong hands‑on experience with enterprise firewalls (Palo Alto, Fortinet, Cisco ASA/Firepower, Check Point).
• In‑depth knowledge of routing and switching, TCP/IP, DNS, DHCP, WAF, and SD‑WAN.
• Strong understanding of encryption, PKI, VPNs, and authentication protocols.
• Experience implementing Zero Trust Network Architecture, proxy solutions, packet shapers, and email gateways.