Sr. Network Engineer -Security

The Sr Network Security Engineer provides engineering and operational support to maintain a secure, resilient, and compliant global network infrastructure. This role focuses on configuration, maintenance, and optimization of Web Application Firewalls (WAF), Intrusion Prevention Systems (IPS), DDoS protection, and related security technologies across hybrid environments (on-premises and cloud). The engineer will collaborate with Network, Build, and Operations teams following ITIL standards to ensure high-quality incident management, problem resolution, and change implementation.

• Configure, maintain, and fine-tune WAF, IPS, DDoS, and proxy solutions (Imperva, Checkpoint, Trellix, Cisco, SkyHigh, McAfee, etc.).
• Develop and manage WAF policies, rules, and signatures to mitigate threats and reduce false positives (based on OWASP standards).
• Support onboarding of new applications and sites behind WAF, including performance tuning and CDN configuration.
• Provide incident response and root cause analysis for network security events, ensuring timely resolution and communication with stakeholders.
• Create dashboards, alerts, and reports to monitor network health and compliance with security controls.
• Participate in security drills, vulnerability remediation, and process automation initiatives.
• Maintain documentation in ServiceNow, Confluence, and LucidChart; recommend and implement process improvements.

• 5+ years of experience in network security engineering in large, multi-region environments.
• Strong expertise in WAF, IPS, DDoS mitigation, proxies, and firewalls (Cisco ASA, Checkpoint, Fortigate).
• Working knowledge of multi-cloud environments (AWS, Azure, GCP).
• Familiarity with ITIL incident, problem, and change management processes.
• Experience with monitoring tools (NNMi, Thousand Eyes, Grafana, Dynatrace, Extrahop).
• Excellent analytical, documentation, and communication skills; ability to lead and mentor junior engineers.