مهندس أول أمن شبكات

Role Summary

The Senior Network Security Engineer operates, maintains, and secures the organization’s network security infrastructure across multiple vendors and technologies. The role handles day-to-day operations, executes changes, and resolves complex security issues. It also contributes to POCs and supports junior team members, helping keep security services resilient, compliant, and aligned with business and customer requirements.

Responsibilities

• Handle daily operational cases and tickets, ensuring timely resolution within SLAs.
• Install, configure, operate, and maintain security hardware and software solutions.
• Troubleshoot and diagnose security issues affecting users and customers and escalate to Supervisors or vendor support with complete diagnostics.
• Execute security changes, upgrades, and patching according to approved plans during change windows.
• Perform rule-base reviews, policy tuning, and false-positive reduction across security platforms.
• Contribute to POCs, solution testing, and validation before production deployment.
• Maintain runbooks, configuration documentation, and network security diagrams.
• Support and guide junior engineers through knowledge sharing and technical assistance.
• Collaborate with infrastructure, and application teams on incident response and secure delivery.
• Keep up to date on cybersecurity trends, emerging threats, vulnerabilities, and best practices.

Experience & Qualifications

• 2-4 years of hands-on network security experience.
• Bachelor’s degree in engineering or computer science

Technical Skills — Must-have

• Multi-vendor Next-Generation Firewall operations
• Site-to-site and remote access VPN
• Web Application Firewall operations and tuning
• Network Access Control and TACACS+/RADIUS-based AAA

Technical Skills — Strong advantage

• Telecom, ISP, or large data center experience.
• Email security gateway.
• PAM/IAM.
• Container and Kubernetes security.
• Web proxy.
• API security.
• EDR/XDR.
• Anti-DDoS.
• Endpoint solution.
• Sandboxing solutions.
• DNS Security.
• HSM solutions.
• Database Activity Monitoring (DAM).
• DLP
• AI/LLM security.