Infrastructure Security Engineer

Description:

Key Responsibilities Breakdown
1. 24/7 Monitoring & Incident Response
Continuous Surveillance: Monitor security devices (firewalls, IPS/IDS, proxies) and network infrastructure (routers, switches) for alerts, anomalies, and breaches.
Immediate Reporting: Escalate critical security incidents (e.g., DDoS attacks, malware outbreaks) to higher-level teams (L2/L3 or Back Office).
Security Hotline Management: Handle incoming security complaints via phone/email and log them in ITSM tools (e.g., BMC Remedy).

2. L1 Technical Troubleshooting
Initial Diagnosis: Perform basic troubleshooting for:
Network issues (connectivity drops, VPN failures, DNS/DHCP problems).
Security alerts (firewall block logs, endpoint protection alarms).
Escalation: If unresolved, escalate to Back Office (L2/L3 teams) with detailed logs and initial findings.

3. Communication & Coordination
Cross-Team Collaboration: Work with network engineers, SOC analysts, and IT support to resolve incidents.
Stakeholder Updates: Provide status reports to management using Excel, PowerPoint, or dashboards (SolarWinds, Grafana).

4. Documentation & Process Compliance
Incident Logging: Record all events in ITSM tools for audit and analysis.
Follow SOPs: Adhere to security policies, compliance frameworks (ISO 27001, NIST), and escalation procedures.

Required Skills & Qualifications
1. Technical Knowledge
Networking Fundamentals:TCP/IP, DNS, DHCP, VPN, VLAN
OSI Model (troubleshooting layer-wise issues)

Security Devices & Controls:
Firewalls (Palo Alto, Fortinet, Cisco ASA)
Intrusion Prevention Systems (IPS)
Proxies & Endpoint Protection (EDR/XDR)
Monitoring & Reporting Tools:
SolarWinds, Grafana (dashboards, performance metrics)
SIEM Tools (Splunk, IBM QRadar – if applicable)