Description
We are seeking a hands-on Network Security Engineer to operate and continuously improve our network security stack—primarily enterprise firewalls (Palo Alto, Fortinet, Cisco), secure web gateways/proxies, and site-to-site/remote-access VPNs. The ideal candidate is an operator-engineer hybrid with deep knowledge across L2–L7 security controls, strong troubleshooting skills, and proven experience in high-availability, low-latency environments. Experience supporting MAS TRM or BNM RMiT audits is highly preferred.
Operations & Reliability:
Own day‑to‑day operation of Palo Alto, Fortinet, and Cisco firewalls, Proxies, and VPN appliances (IPSec/SSL).
Monitor and maintain HA clusters, dynamic routing (BGP/OSPF) on firewalls, and NAT/policy objects to ensure availability and performance SLAs.
Execute change management: rule modifications, NAT adjustments, SSL decryption policies, URL categories and app‑ID signatures.
Perform break/fix troubleshooting using methodical, packet‑level analysis (pcaps, flow records, session tables, global counters).
Security Engineering & Hardening:
Manage segmentation (zones, VRFs, tags), east‑west and north‑south controls, and zero-trust policy baselines.
Develop and maintain standardized security templates (objects, groups, security profiles, threat/vulnerability profiles, URL filtering, DLP where applicable).
Tune IPS/IDS, Anti‑Malware, URL filtering, WildFire/ATP, DNS Security, and sandboxing controls to reduce false positives while maintaining strong coverage.
Integrate firewalls with identity (AD/LDAP, IdP, SSO), SIEM/SOAR, PKI, and EDR/XDR telemetry to enrich detections and automate response.
Secure Remote Access & Edge
Maintain VPN architectures (IPSec, GlobalProtect/AnyConnect/FortiClient), posture checks, MFA, split vs. full tunnel policies.
Support branch/edge (SD‑WAN) security policy application and traffic steering to on‑prem or cloud security services.
Manage proxy/SWG policies (e.g., SSL decrypt, file controls, CASB integration) and ensure compliance for web access.
Experience in Zero Trust Network Access (ZTNA) is an advantage.
Governance, Risk & Compliance
Maintain policy standards, rule certification/recertification cycles, and least‑privilege reviews.
Ensure controls meet regulatory and industry frameworks (e.g., ISO 27001, NIST 800‑53/CSF, SOC 2, PCI DSS, MAS TRM if applicable).
Document and execute disaster recovery and BCP plans for network security platforms.
Incident Response & Continuous Improvement
Act as an escalation point for network‑security incidents; participate in RCA, and corrective actions.
Build dashboards and metrics (utilization, block/allow, threat trends, latency) and drive continuous tuning.
Contribute to runbooks, knowledge base articles, and automation (e.g., Ansible, Terraform, Panorama, FortiManager, Cisco FMC APIs).
Similar jobs
JOB TITLE Network Security Engineer A Career with point72’S TECHNOLOGY TEAM As Point72 continues to reimagine the future of investing, our Technology group is constantly improving our company’s IT infrastructure, positio…
Role Summary: The IAM Operations & Access Review Support Analyst is responsible for executing day-to-day IAM operational activities, supporting access reviews, identity lifecycle management, privileged access adminis…
We are seeking a skilled Network Engineer, this role is critical to ensuring the seamless operation of our trading systems infrastructure, driving innovation, and delivering high-performance network solutions in a fast-p…
Senior Network Engineer – L3 Important Information Location: Singapore 12 months contract Job Summary As a Senior Network Engineer, you will be responsible in providing Tier-3 support for enterprise networks including Ci…
Job Title - Cybersecurity Engineer Key Skills - Tenable Nessus Experience - 5+ years Location - Singapore Requirements At least 5 years of relevant experience in cybersecurity. Candidates with relevant certifications suc…
Est. 55,000 EUR
Established in 2004, we are a tech pioneer offering world-class adult entertainment and games on some of the internet’s safest and most popular platforms. With the support of an international team of dynamic and collabor…
Established in 2004, we are a tech pioneer offering world-class adult entertainment and games on some of the internet’s safest and most popular platforms. With the support of an international team of dynamic and collabor…
We are seeking a skilled Network Engineer, this role is critical to ensuring the seamless operation of our trading systems infrastructure, driving innovation, and delivering high-performance network solutions in a fast-p…
The Role We are seeking a highly qualified and talented technologist to join us as a member of our Network Engineering team. The team is responsible for the architecture, design, administration and support of our global…
Est. 125,000 USD
A Career with Point72's Technology Team As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront…
Day to Day : Infrastructure & Deployment Manage and optimize multi-cloud environments across AWS and OCI platforms. Design and implement scalable cloud infrastructure using services such as EC2, S3, RDS, Lambda, OCI…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
Key Responsibilities: ● API Logic Security: Hunt for Business Logic vulnerabilities (BOLA/IDOR, Mass Assignment) that traditional firewalls miss. ● Authentication & Authorization: Design and validate OAuth2, OIDC, an…
GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the…
Incidents & Problem Management• ITIL Knowledge: Familiarity with ITIL processes, especially Incident Management, Problem Management, and Change/Release Management.• Troubleshooting & Root Cause Analysis: Ability…
Est. 85,000 USD
SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with…
The Government Technology Agency (GovTech) is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (…
Est. 200,000 USD
Pico fuels the global capital markets community by providing exceptional market data services and customized managed infrastructure solutions. As financial industry experts at the center of markets and technology, we hel…
[What the role is] GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), G…
Key Responsibilities: ● Threat Modeling: Lead design reviews for new banking features (Payments, Transfers, KYC). Identify logic flaws before code is written. ● Pipeline Automation: Architect and maintain the SAST/DAST/S…
Est. 85,000 EUR
As a Platform Network Engineer, you are the go-to expert for cloud network architecture. You design, implement, and manage complex network environments in Microsoft Azure for our clients. In close collaboration with plat…
We offer the industry’s only platform that fuses customer identity and anti-fraud solutions – customer identity management, identity verification, and fraud prevention. We sell to industries with large, consumer-facing b…
About NscaleNscale is taking on the hyperscalers by building a vertically integrated cloud built for AI. We own the data centres, software, and applications that power today's AI stack using sustainable technology soluti…
Note to candidates: this role is based out of Batam, Riau Islands About NscaleNscale is taking on the hyperscalers by building a vertically integrated cloud built for AI. We own the data centres, software, and applicatio…
Est. 120,000 PLN
Location: Poland We Are: RTB House is a next-generation performance demand-side platform (DSP) that uses proprietary Deep Learning AI algorithms to help brands grow. The company is the market leader in driving performanc…
Key Responsibilities 1. API & Ecosystem Architecture ● The API Fortress: Architect the security layer for our API Gateway (e.g., Kong, Apigee, AWS Gateway). Define global policies for Rate Limiting, Throttling, and A…
Role PurposeThis role is built for a technical leader who can orchestrate and scale high-concurrency red team engagements, managing multiple distinct victim operations simultaneously. The Director ensures the continuous…
GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the…
Est. 55,000 EUR
We are Kaizen Gaming Kaizen Gaming, the team powering Betano, is one of the biggest GameTech companies in the world, operating in 20 markets. We always aim to leverage cutting-edge technology, providing the best experien…
At Anaplan, we are a team of innovators focused on optimizing business decision-making through our leading AI-infused scenario planning and analysis platform so our customers can outpace their competition and the market.…